Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
File:                     J1qrffuxUqZGrfMnOzGqXd5kod8.mft (raw, json)
Hash identifier:          /IJSDEQWy9ZtfD9eLkMSesLn1Cc6t64KQT/mVYgskxc=
Subject key identifier:   1F:FF:C6:F0:FE:FB:4A:18:BD:40:47:8A:03:BD:1C:75:A2:26:34:B6
Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
Certificate issuer:       /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Certificate serial:       0198D515846FA2BC603ABECB7231987D5C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
Manifest number:          0C78
Signing time:             Sat 23 Aug 2025 04:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:13 +0000
Files and hashes:         1: J1qrffuxUqZGrfMnOzGqXd5kod8.crl (hash: /vvlwKwcuIPimFQytl08aSIDAHT5lYjSx440FmWkr2w=)
                          2: _BsLA-Yq0byQhwlqjwrfokOt_ao.roa (hash: nUVtATfYPG2WeBzHlW5fiB+hmlpSz5V9uTVR1MUQR8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:84:6f:a2:bc:60:3a:be:cb:72:31:98:7d:5c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
        Validity
            Not Before: Aug 23 04:00:13 2025 GMT
            Not After : Aug 24 04:00:13 2025 GMT
        Subject: CN=1fffc6f0fefb4a18bd40478a03bd1c75a22634b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:5b:55:e2:7d:6f:a5:18:f3:88:e8:55:29:
                    30:fb:85:4d:7e:15:67:3c:16:90:ce:96:97:51:03:
                    77:5b:f5:f7:04:cf:77:05:19:d7:f1:61:c9:15:a4:
                    e4:79:d1:4e:98:81:d9:a8:80:34:82:f1:78:f0:77:
                    df:1b:93:12:c6:f3:16:47:0e:e5:7b:11:2b:a5:eb:
                    f5:b0:b1:a7:50:ca:a7:6f:f8:c0:2c:c3:fc:b1:6d:
                    a3:ac:82:f8:9f:12:53:d9:99:b3:90:7f:ef:39:8e:
                    6e:ad:75:1f:2f:fe:b6:a5:18:3f:d1:c1:ad:3b:ec:
                    3d:4e:75:5e:7d:4c:ea:76:e1:b0:c3:04:ac:cd:3a:
                    e3:09:8e:7b:ce:65:6b:b2:2d:47:ae:35:d4:c1:46:
                    08:34:f6:3e:be:7c:b7:57:39:a7:d2:5f:91:b6:3a:
                    8c:b7:c0:1c:93:07:e2:d4:ea:30:34:9b:46:39:a3:
                    66:60:6a:b1:88:f6:1f:a6:f5:07:b1:a2:83:05:c7:
                    ba:4a:13:e9:4e:12:32:0f:75:c9:b4:28:47:f9:a5:
                    39:2e:5e:c0:fc:91:1d:f8:e0:7e:e0:80:1b:38:50:
                    78:07:f4:7d:3d:e0:5f:30:9a:7b:a4:b8:4c:8a:71:
                    a4:0f:6e:89:dd:32:db:d5:a7:81:d6:8a:b8:11:ad:
                    3c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FF:C6:F0:FE:FB:4A:18:BD:40:47:8A:03:BD:1C:75:A2:26:34:B6
            X509v3 Authority Key Identifier:
                keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:af:4f:56:48:f5:a6:07:17:df:2a:1f:cb:18:4b:7d:e8:78:
         bb:70:86:42:e8:49:09:b4:15:c9:2b:e3:4f:24:b8:ca:42:13:
         1f:03:b2:3a:8a:d5:07:b4:c5:83:31:f2:23:43:b0:71:af:de:
         7d:4b:59:91:4d:4a:6e:de:b6:e7:da:b3:83:bb:5c:bc:42:4b:
         20:a3:19:95:3a:8d:04:a3:c5:ba:24:35:15:f4:0c:88:30:fb:
         69:b3:c4:22:66:f2:4a:bf:5e:ea:e2:26:f8:40:3f:01:fd:a0:
         55:e3:6a:e6:0d:f4:d2:1e:23:ff:7c:eb:76:33:15:ea:04:cc:
         03:d0:59:08:8b:5b:77:82:b8:1e:40:14:0a:cc:67:c2:09:05:
         4a:e1:d2:64:7e:e2:3c:9a:bb:71:32:7f:9c:ce:80:ff:05:c2:
         78:ae:65:f8:aa:53:b1:54:fd:e5:98:a5:b4:39:cd:ef:b9:6e:
         12:f9:ea:45:7f:02:b8:96:cf:b1:c5:59:19:f1:7c:fa:68:9f:
         48:b0:86:fe:0d:ef:2b:5c:b7:a6:57:0e:33:d3:02:de:f0:7a:
         12:ad:c8:ce:4e:1f:68:75:f8:3a:da:7c:41:dd:75:8d:c3:ed:
         e3:fe:89:03:ef:42:2b:73:18:a1:8f:36:f3:26:4c:b3:39:d4:
         58:c1:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:04 2025 by rpki-client