Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File:                     J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier:          gT1xlNhn/+7tiORsVKsxLWKoPD6A59GbZnyVfJxytio=
Subject key identifier:   B0:3C:05:9C:40:83:C3:55:E9:4C:A0:D0:52:7D:8C:A7:62:19:A4:7A
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer:       /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial:       0198D698428E52D3FDE1DCB2F22D705522E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 11:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:39 +0000
Files and hashes:         1: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (hash: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=)
                          2: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: bVEZ0F8GxKAww03VKZenYcF7iNl6v/ZaHP8AwpNFQVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:42:8e:52:d3:fd:e1:dc:b2:f2:2d:70:55:22:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
        Validity
            Not Before: Aug 23 11:02:39 2025 GMT
            Not After : Aug 24 11:02:39 2025 GMT
        Subject: CN=b03c059c4083c355e94ca0d0527d8ca76219a47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:89:7a:a3:77:44:29:2f:d4:00:61:98:34:15:
                    2e:47:97:e0:63:2f:9d:cf:29:7b:a9:e8:52:16:3e:
                    59:57:44:94:bd:d6:c2:49:82:c6:16:14:b9:dc:c7:
                    bd:3d:2d:29:c0:8a:33:fc:8f:2e:4c:a7:07:c7:98:
                    cc:0e:00:9b:79:71:bb:7d:19:48:65:cc:c2:0d:fe:
                    63:a6:c7:d9:64:66:60:19:e0:b9:29:a0:b2:cc:18:
                    e3:43:b6:af:49:29:b3:a9:a6:9f:51:c7:cf:ef:0c:
                    40:44:20:e4:be:28:61:02:c9:dc:ca:c8:11:26:fb:
                    89:09:48:64:24:4c:bb:6a:18:88:8e:35:15:08:08:
                    af:a3:c3:09:44:58:91:5e:14:91:aa:83:ca:79:32:
                    d7:2c:64:c8:a8:aa:41:d3:0f:93:65:7e:e2:a6:fb:
                    47:9b:5a:80:60:52:89:a1:8d:a0:25:02:6d:0c:5c:
                    5f:ba:7a:26:87:88:4e:ab:86:33:e1:15:94:53:07:
                    0d:a3:42:ad:05:2e:f9:70:d7:88:4d:15:74:7f:fb:
                    81:f8:e2:fc:2a:1c:26:23:54:33:0f:3b:ea:24:0c:
                    f7:e2:70:3c:c6:34:34:e6:ca:6f:92:e5:46:7b:c6:
                    c4:07:dc:35:55:97:a9:8c:de:fa:4a:7e:a6:7e:a6:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3C:05:9C:40:83:C3:55:E9:4C:A0:D0:52:7D:8C:A7:62:19:A4:7A
            X509v3 Authority Key Identifier:
                keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:e4:0a:16:ed:2f:a4:c4:31:2c:a3:06:a7:c9:31:f3:4b:
         57:55:c0:30:33:68:2e:9f:2f:c7:21:a3:8e:73:16:8e:6b:a0:
         c9:07:8c:65:ca:47:7d:e7:96:42:40:fe:06:6a:37:f3:67:d2:
         71:5b:c4:69:0b:44:10:2b:7e:ca:2c:03:bb:e0:8a:20:c6:a2:
         e9:8d:d0:d5:c2:85:78:c2:c6:3c:2c:27:34:a4:6a:63:ab:00:
         38:0e:ef:81:9c:f5:a1:bd:30:e8:81:02:7f:69:2f:ad:36:ca:
         79:81:f2:cb:8c:24:d8:e2:79:17:5e:1e:d1:bf:d8:ac:c3:59:
         62:43:6f:92:4b:19:0c:6c:d6:55:8e:b6:e6:ae:58:63:52:78:
         e2:bd:b6:63:4d:33:59:c3:dd:b0:d2:c7:35:3e:de:fe:69:cb:
         dd:19:f5:6b:34:14:e0:c6:b6:6f:e4:4a:25:a1:a8:0a:89:18:
         b5:a4:34:f6:01:f7:0f:97:0a:57:6c:b6:c3:6f:01:88:25:9a:
         42:c1:0a:ec:ae:cf:e9:ac:c1:96:9e:12:6e:27:ab:8f:3c:76:
         c7:dd:b7:0d:51:45:2c:32:ec:c4:db:e6:8a:8b:48:ee:38:fb:
         92:ce:22:5d:33:e0:bf:98:a3:76:c7:4f:4b:ef:32:b2:db:df:
         e4:82:bf:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmEKOUtP94dyy8i1wVSLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZjEzMGI2ZjQ1ZjAwZjdjMWQxMzViNmM5M2IyMGU2OTA0
MTJjZmMwHhcNMjUwODIzMTEwMjM5WhcNMjUwODI0MTEwMjM5WjAzMTEwLwYDVQQD
EyhiMDNjMDU5YzQwODNjMzU1ZTk0Y2EwZDA1MjdkOGNhNzYyMTlhNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yl6o3dEKS/UAGGYNBUuR5fgYy+d
zyl7qehSFj5ZV0SUvdbCSYLGFhS53Me9PS0pwIoz/I8uTKcHx5jMDgCbeXG7fRlI
ZczCDf5jpsfZZGZgGeC5KaCyzBjjQ7avSSmzqaafUcfP7wxARCDkvihhAsncysgR
JvuJCUhkJEy7ahiIjjUVCAivo8MJRFiRXhSRqoPKeTLXLGTIqKpB0w+TZX7ipvtH
m1qAYFKJoY2gJQJtDFxfunomh4hOq4Yz4RWUUwcNo0KtBS75cNeITRV0f/uB+OL8
KhwmI1QzDzvqJAz34nA8xjQ05spvkuVGe8bEB9w1VZepjN76Sn6mfqbvowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLA8BZxAg8NV6Uyg0FJ9jKdiGaR6MB8GA1UdIwQY
MBaAFCfxMLb0XwD3wdE1tsk7IOaQQSz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQt
MDdkYmQ5MDBjNGFkLzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQtMDdkYmQ5MDBjNGFk
LzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDvkChbt
L6TEMSyjBqfJMfNLV1XAMDNoLp8vxyGjjnMWjmugyQeMZcpHfeeWQkD+Bmo382fS
cVvEaQtEECt+yiwDu+CKIMai6Y3Q1cKFeMLGPCwnNKRqY6sAOA7vgZz1ob0w6IEC
f2kvrTbKeYHyy4wk2OJ5F14e0b/YrMNZYkNvkksZDGzWVY625q5YY1J44r22Y00z
WcPdsNLHNT7e/mnL3Rn1azQU4Ma2b+RKJaGoCokYtaQ09gH3D5cKV2y2w28BiCWa
QsEK7K7P6azBlp4Sbierjzx2x923DVFFLDLsxNvmiotI7jj7ks4iXTPgv5ijdsdP
S+8ystvf5IK/+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:34 2025 by rpki-client