Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
File:                     J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json)
Hash identifier:          hSvxF0PxNQftjsDo9GRmiG3ingFIhqIJyOfla5iN2t0=
Subject key identifier:   E3:93:DD:54:90:2D:FE:40:85:65:9F:7C:83:35:F1:98:B9:D2:5C:CC
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Certificate issuer:       /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial:       0198D66060C8BE9F5815C14945C537C151DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 10:01:37 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:37 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:37 +0000
Files and hashes:         1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: CCIy7pLW1l/dl5R17e41v5/DcxF8qhZGI6ZIpGzw4iI=)
                          2: rTVHjttPuQQ_1Dt0EA11KAiXgII.roa (hash: 5V1V0+UjdPuxZIazNIUWaVHiDdBin/aDpwXhDP5JcYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:60:c8:be:9f:58:15:c1:49:45:c5:37:c1:51:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
        Validity
            Not Before: Aug 23 10:01:37 2025 GMT
            Not After : Aug 24 10:01:37 2025 GMT
        Subject: CN=e393dd54902dfe4085659f7c8335f198b9d25ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:fc:16:13:4f:31:59:f1:ce:ce:d0:42:e1:
                    e1:67:24:11:00:13:92:10:2a:30:93:4f:cf:8c:eb:
                    83:1f:a7:f1:a7:5c:75:db:c4:ac:58:5f:e9:e3:5b:
                    0f:fb:72:e2:2d:0f:2b:58:71:c6:4e:7b:f6:9d:ec:
                    d0:77:46:a7:06:c5:0d:28:39:b9:7b:cc:ec:6d:45:
                    03:af:ff:b6:26:2a:e1:31:80:44:b4:89:22:21:c0:
                    6a:2e:74:5b:87:50:cf:05:98:0f:5b:c2:07:d4:2f:
                    f2:2e:42:7f:7e:2b:51:86:b8:f1:31:d6:cb:84:0b:
                    a9:29:66:0b:45:a1:05:10:05:52:c7:12:62:72:9b:
                    82:91:c9:e6:fc:be:25:3c:cd:89:91:c7:bd:e6:6a:
                    5f:f9:57:5a:28:e5:55:26:a6:5f:12:85:9f:01:48:
                    71:42:cc:6e:fc:c4:5a:8a:1b:23:e4:2e:50:28:47:
                    22:59:c4:ab:de:1b:46:05:63:41:f2:ee:58:38:9c:
                    5b:1f:ed:51:87:47:01:3c:25:2a:de:e0:66:5d:7a:
                    b5:c3:71:5d:7b:2f:96:a1:26:ac:48:db:27:60:ee:
                    de:98:5f:5a:32:6a:cd:30:65:6e:7f:68:62:db:23:
                    ed:f1:14:9f:8b:90:ce:36:b4:d5:d5:9c:52:f1:2b:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:93:DD:54:90:2D:FE:40:85:65:9F:7C:83:35:F1:98:B9:D2:5C:CC
            X509v3 Authority Key Identifier:
                keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:52:ec:ae:e0:4b:cb:b8:47:c2:6a:d8:e7:db:92:88:32:2c:
         0f:27:11:90:a5:59:70:7c:1a:fb:08:6d:91:c5:0e:7f:e2:71:
         3f:1b:29:25:47:ed:66:bf:0b:f5:14:9a:80:d0:78:23:a6:60:
         dc:fc:40:5a:03:34:97:5f:79:c0:e4:82:1f:16:ac:6b:4d:33:
         14:6a:73:d6:74:d5:bc:60:77:9a:20:dc:1e:30:96:ad:1a:19:
         3a:68:96:03:a3:70:56:e1:ea:07:a1:12:3f:57:1f:2a:ac:38:
         71:dc:8f:94:80:cb:9e:fd:b8:a6:ec:68:ec:3f:ac:e2:9c:69:
         f6:ee:92:25:c1:e3:14:ca:e1:3e:35:85:cb:c7:ac:1c:0c:f6:
         8f:53:ce:3f:35:46:f1:53:49:26:65:82:93:a4:0f:b8:c1:61:
         5c:9c:3b:3e:66:7f:37:40:2a:b3:a8:04:4b:ec:af:76:ea:ad:
         d4:fc:07:5a:a7:53:2f:94:8a:59:ea:73:4c:9e:91:70:76:d4:
         4b:69:ad:a4:34:f3:c2:e2:a1:64:e6:d3:29:a1:c2:84:e5:76:
         db:1b:fc:c7:21:59:fc:4c:f2:be:aa:de:b0:80:3a:67:58:bf:
         6d:10:9b:0d:67:c7:62:87:5f:3e:a5:da:3a:d5:3c:16:47:97:
         09:b9:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:11 2025 by rpki-client