Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
File:                     J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft (raw, json)
Hash identifier:          ODcKHDHRuYRjfTDMKqkf7q1DgaTDm21D9GDz2DhMh1g=
Subject key identifier:   0E:02:B3:2E:76:D9:96:5F:85:E2:3B:9E:E3:A7:3C:5C:D4:9E:77:C7
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Certificate issuer:       /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial:       0197B6D73118A7784381E41083B999887EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
Manifest number:          13F3
Signing time:             Sat 28 Jun 2025 14:00:45 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:45 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:45 +0000
Files and hashes:         1: 32DmFG6eckwT_cmIA6P2GvExV8o.roa (hash: QAbNn1NoMo9kTBTTYBudg/heTTEApB1Axs6m2LEO3wM=)
                          2: 8mfWKUaTIk1RDd44sNUtQ4HsM2s.roa (hash: GuIpyglmMkqHqRdMJ131I6La+nXiqbtWAj+MwrMR+Yc=)
                          3: Ht6FsCIGKxXaA3P0oIyjphKEPpk.roa (hash: jQWJMmY8DgPGrpE2GgmGMr1+l/UtziWDhgw2WyC6x2Q=)
                          4: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl (hash: uj/PNOFd4qoTyMojokaqry3Z0517HzmoH2dV1NA6wf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:31:18:a7:78:43:81:e4:10:83:b9:99:88:7e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
        Validity
            Not Before: Jun 28 14:00:45 2025 GMT
            Not After : Jun 29 14:00:45 2025 GMT
        Subject: CN=0e02b32e76d9965f85e23b9ee3a73c5cd49e77c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:33:79:fe:13:fa:4b:ac:cc:8c:12:33:f8:
                    63:cb:d5:93:46:ed:6f:3a:98:df:b7:42:da:07:4f:
                    93:d7:11:4b:cc:3b:16:3a:5d:b3:2a:6f:61:2d:25:
                    11:5c:57:9e:e0:b8:62:5a:16:21:c5:e4:9c:35:03:
                    8d:a4:96:eb:05:6e:0f:f1:dd:32:eb:5e:4d:4a:c6:
                    e0:4c:07:e0:21:cc:aa:f9:0d:a9:33:f7:79:68:0e:
                    0d:52:1b:1b:bd:a5:38:49:ad:a8:96:8d:d5:35:9d:
                    0c:11:78:51:24:ff:ec:d7:e9:38:7d:64:04:1c:d9:
                    05:29:9f:49:32:37:17:4e:be:0b:9f:78:17:e7:a7:
                    e3:f1:af:ea:4f:f3:37:c6:39:3f:f3:e0:be:cb:df:
                    18:87:ea:27:ab:41:1a:a6:cb:32:ce:79:41:e1:c0:
                    ff:5d:7b:89:5a:bc:70:9c:12:77:a6:29:da:46:3d:
                    f9:c5:af:05:bc:5a:c3:37:3f:3f:b1:62:34:9a:e3:
                    6f:76:b0:16:9a:49:8b:df:9d:1c:10:d3:e6:b1:06:
                    f6:aa:cf:8d:f1:11:39:1a:d0:82:61:e0:fb:a7:45:
                    37:49:1a:66:12:6e:3b:26:40:00:0a:83:ec:db:d4:
                    af:79:d8:0a:d4:d6:79:1c:af:41:d4:73:32:bb:7a:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:02:B3:2E:76:D9:96:5F:85:E2:3B:9E:E3:A7:3C:5C:D4:9E:77:C7
            X509v3 Authority Key Identifier:
                keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:60:00:23:b0:51:a9:04:cb:b8:8f:87:62:d1:13:ca:7d:88:
         bf:56:51:df:af:74:d3:1b:66:fa:42:60:fb:c6:c4:36:fb:47:
         29:d2:b6:36:71:ba:72:a7:83:9a:2b:43:cd:1a:83:72:25:8a:
         de:8b:e0:54:54:34:67:8f:83:85:df:17:91:ee:a7:8e:14:dd:
         5a:97:6d:4e:c0:92:60:f9:98:fa:f5:16:a0:2a:2c:40:68:c8:
         1a:07:71:e5:12:b1:15:6a:bf:38:10:57:3b:2c:2d:e3:bd:fc:
         0d:a0:b0:20:fa:95:6b:85:67:42:a2:fa:d3:03:92:df:1b:dc:
         12:fc:5a:94:08:0e:35:37:56:db:92:94:85:45:7a:71:ac:65:
         e4:45:09:50:06:de:0d:95:95:5f:c6:25:a1:40:df:c2:38:29:
         50:0d:1b:ca:f7:5c:f6:cf:1e:fb:36:02:78:0f:d3:39:f2:c3:
         f5:04:8b:64:a2:44:fb:fe:a6:8d:ba:56:32:4c:c3:e7:da:bc:
         76:c5:b5:70:1b:c0:22:49:79:a7:4f:56:4b:9e:c3:ef:78:c6:
         bd:d9:d9:37:68:bf:5e:39:80:05:08:97:35:30:6a:05:51:f0:
         97:bc:7c:47:7b:75:e4:4f:16:db:ce:7f:65:26:bf:c3:bd:ca:
         58:be:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:11:44 2025 by rpki-client