Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          HrHGjCjusCPVto3annEWclhOVBl4luNLWymyC4JE0/A=
Subject key identifier:   10:A1:C6:C2:7A:95:2E:56:E3:2F:EE:1B:1D:83:CA:AF:B0:E0:79:6D
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       0198D4A7DC88E0FC8F8E7AE83479AAC0139A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          0E07
Signing time:             Sat 23 Aug 2025 02:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:27 +0000
Files and hashes:         1: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (hash: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=)
                          2: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: k8RLjK9j2Q5wPmRzIWsYqKoknrSFT0CO8Q6NfQqcYe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:dc:88:e0:fc:8f:8e:7a:e8:34:79:aa:c0:13:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: Aug 23 02:00:27 2025 GMT
            Not After : Aug 24 02:00:27 2025 GMT
        Subject: CN=10a1c6c27a952e56e32fee1b1d83caafb0e0796d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:92:83:26:09:68:6f:f6:49:38:9d:7e:9d:
                    9b:16:62:ac:6b:ab:ef:ca:4f:17:ea:98:b2:4c:9a:
                    ba:b7:b3:51:cf:77:25:57:b7:b8:54:ba:e7:5f:09:
                    be:1a:9f:4c:ca:29:96:9f:54:18:b7:ac:32:6c:93:
                    1f:3f:61:35:0a:f4:17:06:4f:ff:fd:ba:06:45:a7:
                    82:07:e5:a2:4a:83:61:3c:18:fb:1e:6b:14:d2:1f:
                    3d:5d:fe:76:48:6a:67:f1:73:2b:49:1e:0d:46:89:
                    6b:d6:87:7e:b1:94:42:70:90:36:45:2c:9d:e5:25:
                    29:a0:0a:73:ce:54:92:52:c6:f4:dd:d6:99:3a:5f:
                    fc:43:58:e2:0e:39:32:1c:24:b1:a1:a4:97:2a:e5:
                    bf:bf:2e:26:ea:41:34:db:48:a6:ae:26:e5:a2:dc:
                    9b:55:87:a7:5a:b7:6a:53:72:c5:a9:93:d3:aa:5c:
                    89:ec:a4:8a:b3:84:16:5b:4c:2b:f2:17:8f:c3:f3:
                    c5:c8:ad:f0:c2:44:3d:07:24:99:c5:9c:af:65:f8:
                    d0:7c:7c:43:da:c6:60:d3:c1:58:6c:e0:31:0a:48:
                    f9:f9:40:7e:60:97:aa:61:55:96:7b:db:8e:f4:26:
                    48:9c:3f:7e:59:ea:1c:3a:fc:e5:e3:30:89:43:9f:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A1:C6:C2:7A:95:2E:56:E3:2F:EE:1B:1D:83:CA:AF:B0:E0:79:6D
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d2:17:31:d6:05:d5:32:33:f9:ca:5c:26:88:74:59:08:1b:
         43:0e:f7:c7:32:b8:7b:8c:88:ae:6b:b9:73:6f:48:e2:26:87:
         23:15:03:99:97:fd:d2:96:c9:1f:d9:b6:f5:a6:2e:9f:6c:1c:
         d4:57:1f:50:3f:a3:23:68:77:8a:7e:f1:1c:df:3f:43:32:40:
         b1:b4:45:45:b8:18:87:ba:f3:9f:ff:64:28:66:60:61:0b:8f:
         65:7e:a5:98:eb:db:64:85:83:32:23:01:20:2a:4b:84:28:bf:
         ad:c5:3b:74:93:e2:74:7a:91:aa:f4:04:92:6c:e3:23:32:38:
         a7:39:d7:f4:13:85:f4:ce:a1:d8:78:5c:13:1a:47:1e:bd:7c:
         29:3b:58:a2:b1:3f:6d:ea:0d:4e:f5:15:0e:c8:d3:dc:77:f4:
         e5:b2:5d:f8:1d:bc:9a:57:00:a8:61:8f:11:dd:35:9d:d8:3b:
         1e:a3:0d:2b:42:96:d7:50:c3:79:7d:00:64:f0:6e:2d:92:42:
         c9:d2:03:06:55:81:b2:d5:41:c5:fd:6f:58:ed:e6:25:c4:32:
         3f:53:d3:bd:ef:e9:6a:b7:51:37:f9:8b:de:87:d4:ee:9d:45:
         a4:ca:b7:b7:6c:9c:f5:24:7b:a7:7b:47:89:a3:fe:57:2c:55:
         83:dd:a1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:29 2025 by rpki-client