Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
File:                     J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json)
Hash identifier:          PhKMa69YF4rP43S3eghGOed3j2ugVtqHuCsoZ2F20+c=
Subject key identifier:   D7:88:EE:E9:5F:D3:D6:06:0C:4D:B2:96:D1:38:74:19:E8:14:4F:4C
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Certificate issuer:       /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial:       0198D54E3727D70DBE3F1F746A9C0A958744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
Manifest number:          10FF
Signing time:             Sat 23 Aug 2025 05:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:09 +0000
Files and hashes:         1: 7E5LSfCOnSbjv-AVC1nxJJ66F4U.roa (hash: /aIHlfM99fuCwlGxN5/ehUDLpA24+vyDEzZMgylijKg=)
                          2: 9UkCw4b12dxaFQuWu2BWrAq18cs.roa (hash: uCtVg42ZHDXRQtsH4hBM45QWmlQhdogsHZ3bdPv3hOo=)
                          3: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: odOpW3c/dZIeakCeVw9njcjAWBHd1ukTWiWzVKlQw8U=)
                          4: Lzxta0jd7ucvehlsvKMLCGGj4SU.roa (hash: r2f4C1ycLWis+wP1tatuwRPmqShhZKPPE1FJIgRZw1w=)
                          5: ONAb3aa9aLqBAH1nZ2X-0Z8C9Vk.roa (hash: toxq5hd68ktpiB99iFz4dER/H0vTabk/sYSInN7166g=)
                          6: P_96blpHfAQM3voIBaqDmBhs-8E.roa (hash: R9hyFEujTVmaNvCmjtuWK6MWoWwhFPOAcCmIzjoPwgM=)
                          7: ZtPUyk_TNktoLC4Kb0JqAQbyro0.roa (hash: AOW26RlAnZ0u9tHghS8csH7uDfnP5ryVT/Rp+gEYBlU=)
                          8: ulUXrUDPWH1jBF3XUvGFq6u9UBA.roa (hash: JO8Wuf/EekqDvWZVFwjNa4p80lEXLhg9dIYBQ3yRrjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:37:27:d7:0d:be:3f:1f:74:6a:9c:0a:95:87:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
        Validity
            Not Before: Aug 23 05:02:09 2025 GMT
            Not After : Aug 24 05:02:09 2025 GMT
        Subject: CN=d788eee95fd3d6060c4db296d1387419e8144f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:0d:9c:23:5c:f1:a9:a8:8e:46:b7:5f:e7:
                    88:88:a3:83:53:b3:d7:8d:74:64:3b:bb:a8:2f:f7:
                    34:4d:fc:c4:eb:e5:b9:23:f3:3c:25:b7:c0:9f:1c:
                    e5:9d:da:ac:f2:96:53:de:3d:85:c1:48:1f:df:7f:
                    30:76:73:c9:98:b8:f3:a4:95:82:ff:53:3b:b2:87:
                    c8:35:37:3e:58:de:cc:23:f2:c5:b9:e3:35:50:4a:
                    f1:99:8e:ac:d9:e3:2a:3d:0a:83:c1:ba:ef:2a:7b:
                    74:c2:29:55:f5:be:8a:bd:71:03:9e:a8:b6:a6:58:
                    18:f7:ae:11:66:22:3f:78:fc:e3:5d:be:61:e5:98:
                    24:09:da:ef:2c:5f:5d:dc:3f:cd:58:e2:a3:3b:3d:
                    07:f3:d4:db:a9:85:64:55:c8:eb:ee:dc:6d:92:1b:
                    6b:8d:f0:47:c3:ba:25:78:4f:d8:57:b9:8c:21:4b:
                    81:2a:86:f8:09:46:6b:fd:8d:e6:c9:70:7b:94:24:
                    5c:72:27:51:e5:4e:a3:3e:10:3b:03:72:3d:04:44:
                    91:84:ab:b7:93:cd:64:76:30:5b:93:ae:37:a0:b3:
                    f9:50:b1:81:d1:eb:f6:7d:81:25:e4:b5:4b:16:b1:
                    83:7a:9c:4c:8f:b4:4d:92:b0:32:78:7b:b6:37:63:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:88:EE:E9:5F:D3:D6:06:0C:4D:B2:96:D1:38:74:19:E8:14:4F:4C
            X509v3 Authority Key Identifier:
                keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:66:e7:89:00:ef:cf:c2:7f:fb:25:34:7c:c5:2c:f3:8c:97:
         bf:42:61:85:30:13:03:54:4e:45:2f:d3:8e:98:b6:ed:48:d0:
         94:0e:86:c9:98:96:66:e9:dc:4a:38:7c:b6:53:a9:cc:23:dc:
         36:10:75:d7:6f:91:df:2f:1e:45:eb:e5:6d:4a:8e:09:5e:33:
         2c:2a:22:02:e3:b2:2a:43:d9:82:2c:c0:8e:f8:2f:4d:c6:d6:
         f0:f9:fc:2d:7c:65:3c:d2:3e:e3:90:19:54:01:17:78:bc:69:
         ed:24:88:5f:ae:cf:d9:21:3d:82:dd:07:f2:8d:59:3e:a0:94:
         72:1e:9f:31:ea:6c:a5:bf:e0:85:d5:dd:5f:fd:43:40:09:e3:
         18:91:67:e8:73:69:9e:51:25:ab:2d:63:0e:a5:79:db:91:ce:
         2c:dd:83:99:27:02:ca:e4:a1:4c:cb:38:39:19:6c:76:d2:cc:
         d4:46:91:9b:a1:9c:72:c4:d7:6f:92:9f:34:ae:c5:91:8a:a4:
         29:81:92:bb:17:77:0e:70:fd:7c:b3:19:14:93:9e:b6:24:e3:
         5a:d3:b9:a6:7a:e3:70:35:be:f2:3a:12:1a:d6:36:1e:71:5d:
         41:f2:fd:3d:55:ff:a1:f5:1f:0c:7e:64:52:8f:ef:75:8b:b4:
         a0:36:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:11 2025 by rpki-client