Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
File:                     J3bWTqj9AotoiON0VXu5HwXuDsY.mft (raw, json)
Hash identifier:          ZpA18OUosOiZ+GaCpjlBbMeAousSFuj8VLH/GuIy6C4=
Subject key identifier:   EB:01:12:F4:79:11:1F:01:D7:F1:DD:51:16:27:81:97:7B:52:29:73
Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
Certificate issuer:       /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Certificate serial:       0198D54E1639C8201FC8C6B3802EEF67E391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
Manifest number:          0C5E
Signing time:             Sat 23 Aug 2025 05:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:01 +0000
Files and hashes:         1: J3bWTqj9AotoiON0VXu5HwXuDsY.crl (hash: 7GE/k0Rb6qzNHHcMd/YtDG750CtXZrFFUkuMOhiXCXo=)
                          2: T_CxlSwnknQox-JCH593XHkgLvM.roa (hash: CV6mCgtIXghwvOdJmAcgD8Xq7LAE7fozTfYdfKC5Sfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:16:39:c8:20:1f:c8:c6:b3:80:2e:ef:67:e3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
        Validity
            Not Before: Aug 23 05:02:01 2025 GMT
            Not After : Aug 24 05:02:01 2025 GMT
        Subject: CN=eb0112f479111f01d7f1dd51162781977b522973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:d1:2c:7e:90:48:d0:b9:19:cc:54:3e:fa:
                    41:52:ca:06:2d:a9:f0:4a:48:0d:e6:d4:71:10:69:
                    52:3c:e2:38:07:92:fb:08:c8:12:09:18:8d:88:67:
                    a3:8d:99:51:98:9e:ae:dc:c8:0e:0c:f9:e9:72:97:
                    cb:54:46:4b:db:95:1c:7f:ef:7c:3b:5a:c2:b6:d7:
                    0e:a0:94:aa:f9:77:bb:e3:e8:91:c3:29:1c:0d:ff:
                    53:f5:04:7e:81:3d:07:99:11:37:34:7e:40:ac:b2:
                    89:db:30:c5:24:80:78:f9:de:1d:0e:53:d7:f7:57:
                    3a:76:17:b5:60:1f:34:1d:48:4c:3f:3f:c3:d1:08:
                    eb:53:81:a6:9e:b6:9a:3e:df:e1:3a:17:15:73:d3:
                    a0:f1:39:6c:47:60:ee:78:37:26:2e:c6:85:6b:75:
                    ea:ae:23:44:ec:49:4c:bc:40:ec:42:e4:50:93:bf:
                    39:e8:c3:f8:ea:fa:ed:ff:aa:f2:3a:c4:56:1c:85:
                    45:61:83:3c:24:08:50:ed:72:9c:69:c1:53:b8:3f:
                    16:77:52:b5:f9:e6:b0:9b:00:a8:4b:fd:1d:84:1a:
                    8f:9d:ab:bb:e0:f1:92:a2:76:7c:31:be:8a:86:4f:
                    69:3d:a9:8a:55:66:ed:03:e8:d7:5e:17:24:dd:d5:
                    83:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:01:12:F4:79:11:1F:01:D7:F1:DD:51:16:27:81:97:7B:52:29:73
            X509v3 Authority Key Identifier:
                keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:70:5c:74:8d:ec:79:4c:c9:3f:14:17:75:ad:5e:10:46:8a:
         b7:df:57:50:95:93:4d:5d:0b:f2:87:9f:d1:32:9b:d9:fe:19:
         d4:b4:a6:65:b9:8b:27:d8:25:e1:28:b5:e0:a3:4f:72:df:75:
         5e:db:40:b7:81:43:4f:d2:73:6d:56:69:d4:0f:04:05:5d:f5:
         fc:ab:44:61:7f:d7:5f:e6:82:7d:49:67:17:01:1f:4a:4a:99:
         89:65:c8:c6:a1:83:e1:d5:02:fb:69:b4:e5:e1:12:82:0b:e6:
         e4:a5:ad:29:29:69:e8:9f:37:f6:b7:dd:8d:88:20:17:7d:09:
         b8:65:9b:86:16:5d:48:e9:e5:3f:ae:80:e8:c9:bb:0a:03:f3:
         d8:e2:68:ea:7e:8e:b4:75:b0:5a:3c:6b:39:5d:0b:78:a7:8b:
         00:16:ab:a0:5b:8f:e7:65:6b:c8:2f:6c:dc:d8:1f:a4:b1:ab:
         3f:48:48:a8:0d:74:de:32:b1:12:29:6b:b1:7c:25:8f:45:68:
         1c:15:ca:90:c7:97:64:84:e0:08:e1:37:a4:2e:85:27:3d:fd:
         b5:73:b3:56:3a:2c:e7:fb:dc:6b:b2:e2:3a:bb:ca:3f:27:fa:
         dd:80:dc:23:53:86:3a:0a:c6:92:79:4e:ab:aa:55:c2:78:1f:
         e9:be:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:51 2025 by rpki-client