Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File:                     J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier:          wHbAgN+P5Dc0Aei7C9y1NdalEykKIxiywaAsIPIS+S0=
Subject key identifier:   AC:FE:7E:BD:5C:C0:2E:5F:C7:78:A1:24:0A:1C:CE:B0:20:7A:C7:F6
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer:       /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial:       0197CDCE39076518A6842D9D7F8A620AE46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number:          0AE9
Signing time:             Thu 03 Jul 2025 01:02:13 +0000
Manifest this update:     Thu 03 Jul 2025 01:02:13 +0000
Manifest next update:     Fri 04 Jul 2025 01:02:13 +0000
Files and hashes:         1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
                          2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: Mmn+6z3WrmJ5NWA74bN6u5BVSaNZ/fr4ZduW3txu7/M=)
                          3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:ce:39:07:65:18:a6:84:2d:9d:7f:8a:62:0a:e4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
        Validity
            Not Before: Jul  3 01:02:13 2025 GMT
            Not After : Jul  4 01:02:13 2025 GMT
        Subject: CN=acfe7ebd5cc02e5fc778a1240a1cceb0207ac7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d1:0a:d7:cd:6a:96:23:27:9c:7c:f9:79:82:
                    41:31:23:40:94:93:f8:b8:5a:78:b4:e6:96:d1:33:
                    a3:3f:5f:3a:6b:a2:85:e2:b2:f3:ee:d1:fc:36:3a:
                    1c:ce:1e:c7:09:67:4a:8c:b0:6d:39:da:60:5b:80:
                    44:67:b1:62:80:56:42:e4:d6:30:54:cb:63:13:c4:
                    da:0e:0e:51:ec:85:9c:15:72:1f:7d:d3:55:76:f1:
                    87:0d:67:61:ca:b7:f0:6c:16:13:19:88:e0:d0:31:
                    5e:42:06:a1:c1:71:08:3a:fa:49:fd:4d:8b:28:c1:
                    88:08:bf:fe:cd:10:fc:ac:69:f2:81:01:19:8f:d4:
                    9b:bb:56:64:d8:c2:95:fd:b5:dd:f0:62:62:28:b7:
                    c6:ae:52:83:64:ff:ff:59:f8:39:27:46:79:36:01:
                    24:83:63:f9:8d:89:4a:b8:dd:43:39:97:22:25:f0:
                    40:cb:f7:a8:05:01:e2:a5:20:f0:ff:e1:cf:0d:42:
                    ab:aa:6a:18:1a:0b:fa:28:33:9f:fb:04:2e:fc:f9:
                    c9:42:32:3a:24:45:78:23:05:98:e3:b1:8d:23:59:
                    28:17:97:b5:ee:16:1f:fa:19:10:b5:15:f6:af:5c:
                    b4:8e:22:4c:fd:d4:35:8f:cd:0c:c3:b7:c0:05:d6:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FE:7E:BD:5C:C0:2E:5F:C7:78:A1:24:0A:1C:CE:B0:20:7A:C7:F6
            X509v3 Authority Key Identifier:
                keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:68:0b:95:fc:a5:61:21:fc:42:a6:64:81:e7:24:64:ed:6d:
         3b:a3:bd:51:cf:7b:16:4a:f9:d6:7b:ed:0c:32:2c:f0:02:79:
         63:81:a1:c7:cb:b1:f1:d9:c3:29:f6:9d:ac:1f:c0:f6:58:50:
         e7:68:68:1b:4e:81:cc:a9:44:17:12:4e:2c:0c:fa:11:51:a6:
         ff:8a:fc:8e:1b:1a:34:5e:1a:41:4a:49:b3:34:0a:61:99:e4:
         0d:a9:9b:58:7f:16:a0:af:dc:2b:ed:0b:f0:87:7d:e6:52:06:
         76:30:ac:27:6f:6f:3f:26:18:15:ea:58:76:7b:24:01:e4:d9:
         7d:55:dc:a0:53:11:ab:8a:ad:85:0c:39:b6:7a:8b:dc:22:8f:
         1b:60:89:29:9c:1a:ae:95:99:21:52:07:66:fd:05:fd:1b:5a:
         6d:9b:80:65:90:12:75:55:a1:b7:26:d9:92:7f:b8:08:72:2a:
         ac:94:48:0e:13:3a:5f:93:26:a9:c3:02:67:bf:47:d9:ff:91:
         8c:4d:b6:8c:11:7c:bb:83:b6:fd:34:74:4b:b9:14:4b:ae:cb:
         e9:34:c4:9f:28:9e:18:91:4b:14:dd:43:ff:60:f9:02:0a:90:
         11:98:78:6f:ab:6a:68:bc:70:d3:94:28:97:fa:c5:01:33:44:
         37:30:55:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:21:36 2025 by rpki-client