Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
File:                     J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft (raw, json)
Hash identifier:          HVibRkdz0ka45Hu7Z6Ut8Q4SpZEPHWW9cztM4g+SMvY=
Subject key identifier:   73:3C:9D:17:E4:34:59:27:5D:04:78:E5:A9:8C:47:7D:7B:1F:87:88
Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
Certificate issuer:       /CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Certificate serial:       0198D73B14148B6C1B6C0E123120F318B8F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
Manifest number:          07C0
Signing time:             Sat 23 Aug 2025 14:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:29 +0000
Files and hashes:         1: J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl (hash: H/uP0+Z4RZnink5q+j117ghr7+Bx0mRYhy/YKT0YAhw=)
                          2: WQUjTS9p84oOcXA50chvpNniznQ.roa (hash: b9u2bPYyFl9JVGS2r/Wv4Q0+aj8rFnnmE/wBKVY/4HE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:14:14:8b:6c:1b:6c:0e:12:31:20:f3:18:b8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4
        Validity
            Not Before: Aug 23 14:00:29 2025 GMT
            Not After : Aug 24 14:00:29 2025 GMT
        Subject: CN=733c9d17e43459275d0478e5a98c477d7b1f8788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:e8:36:af:2f:40:a2:03:61:03:a9:9b:d3:
                    1f:b0:eb:ba:21:2b:99:d0:b7:09:44:21:6b:fd:0f:
                    e3:77:64:49:89:99:66:c8:e1:96:f7:ed:cf:1d:3a:
                    cf:28:38:e9:b6:83:35:cb:3e:a2:1e:d2:b7:d0:c5:
                    49:56:90:e5:1a:14:84:13:1d:18:c3:2e:04:e9:27:
                    3e:c6:0a:85:4d:63:7b:06:56:b6:e7:56:a8:29:71:
                    77:44:9a:98:0a:bd:c2:8e:ef:10:d4:07:5b:ad:6d:
                    66:e6:73:44:ef:fe:87:1a:7b:f5:11:bf:6b:8f:78:
                    6e:07:42:3b:d2:fb:b1:6b:ea:19:0a:ad:85:28:4b:
                    72:07:0e:fd:70:b5:a0:0d:5b:a4:12:b7:70:64:57:
                    3e:57:44:a3:25:04:a6:18:8c:96:f1:15:98:44:3f:
                    ff:10:f4:c1:90:b5:ce:59:e1:97:51:78:98:a7:da:
                    78:67:35:ca:19:1e:71:96:b3:fe:4a:dd:af:85:64:
                    41:85:94:67:10:b5:64:2f:20:a8:68:47:63:7e:39:
                    7b:38:08:92:be:88:42:ac:d9:57:2c:39:1d:67:0f:
                    8d:77:30:5c:c6:56:a6:92:65:53:af:77:0d:2c:56:
                    52:63:d3:86:9d:f5:98:e7:9a:38:6e:9f:61:52:c1:
                    b9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3C:9D:17:E4:34:59:27:5D:04:78:E5:A9:8C:47:7D:7B:1F:87:88
            X509v3 Authority Key Identifier:
                keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:82:d2:cf:d3:0a:5a:54:77:83:94:8c:c9:dd:e5:0f:fe:52:
         bf:c9:a5:70:c0:10:a8:69:b6:87:22:83:f5:c3:ea:50:d1:48:
         32:a4:53:02:4e:57:12:ba:c5:34:c1:cc:d3:b9:03:32:be:85:
         5a:7a:1f:1e:da:9e:60:08:19:6a:a7:59:50:95:24:3f:7b:28:
         93:ed:7c:cf:6d:ac:c7:be:17:9c:5e:82:39:c7:ff:f2:c8:27:
         de:90:57:0e:4f:ac:69:8b:31:64:15:16:32:91:4e:5d:c0:55:
         85:7d:6c:ce:f7:08:80:11:50:c2:7e:1f:0a:a5:7c:57:d6:20:
         01:af:26:de:8e:9d:46:e9:47:61:cb:32:c9:b4:72:4f:0c:29:
         88:50:58:4b:55:d7:7c:fb:a1:7d:a0:56:2f:0b:ae:8e:82:d9:
         83:01:e7:8f:0b:c3:8d:93:54:46:13:b5:b8:38:a3:61:b4:86:
         37:c4:47:58:d7:42:08:4b:01:e1:bc:bb:0e:10:49:50:a5:b1:
         16:53:9d:67:98:9d:18:13:fb:46:69:4f:3e:48:65:62:e2:6c:
         65:f1:c8:cc:43:1b:70:d9:1b:33:66:63:e7:14:76:91:31:93:
         70:a6:11:e4:66:f5:0a:bf:7e:2d:bc:f3:96:68:cc:84:dc:36:
         38:e6:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:39:36 2025 by rpki-client