Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
File:                     J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json)
Hash identifier:          PMB0YsdiyClicqCerOp2/kGzUcsYjmOW10mZZmYoG5A=
Subject key identifier:   04:3F:73:A7:71:C2:84:E2:D3:6E:90:D2:5B:C5:58:4C:C9:B9:F2:1F
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Certificate issuer:       /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial:       01983570B89A98C76F5F134CD01343255430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
Manifest number:          0B54
Signing time:             Wed 23 Jul 2025 04:00:36 +0000
Manifest this update:     Wed 23 Jul 2025 04:00:36 +0000
Manifest next update:     Thu 24 Jul 2025 04:00:36 +0000
Files and hashes:         1: 4Q0OMlDeRzDSOzAw8LxkvQaDF7E.roa (hash: U7GjqbV2dOQXajvpmYRAMgZ0b0HIaEV5bZmn2apsyWk=)
                          2: 9BTsC-VY_sKGkh2euSED3WOM9ZI.roa (hash: viXsjra2jhTZdPzpqdc9qlQE8a3DDErudBN55tMe3Wg=)
                          3: BhUouDec_qIuL9ykpJ14UlZA-QM.roa (hash: 8yFW2hqVAr5xf6x8b1tEfXwA8rQJPiCbK72VY0EAl8E=)
                          4: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: BHnJZQKdJesFWE0oEQpVrVirVwXynQH+pXc21ePtOBs=)
                          5: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=)
                          6: fTlQ_aFq0HxtikyWXBVM7-ai5xg.roa (hash: bP/GLXVxFeAxAAJqxWAhSYOyK1jAs2dAu7nJ/iPPogI=)
                          7: mxp9eCP_e2nSLu5oRfBqVs7w-s8.roa (hash: 6jdAOohFaolMwD/Z0nQ8nrDtHYVzSE7gtNTijlQEgqw=)
                          8: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=)
                          9: zg4MjXATnC0iLIUH-MKaHL7sg6w.roa (hash: UiidXY2RTo7YfVgqJA3FQpeWQuCf9FUQ5InMtkG9nzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:70:b8:9a:98:c7:6f:5f:13:4c:d0:13:43:25:54:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
        Validity
            Not Before: Jul 23 04:00:36 2025 GMT
            Not After : Jul 24 04:00:36 2025 GMT
        Subject: CN=043f73a771c284e2d36e90d25bc5584cc9b9f21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:c2:2e:a3:ce:32:6a:fc:ff:4c:f6:3b:42:
                    bb:d1:0b:e8:d9:39:2b:4b:79:8b:56:bb:11:c2:c8:
                    e9:28:81:f7:21:ee:5b:6f:a6:a2:02:4a:da:5a:dc:
                    2d:68:05:ac:ab:2c:64:47:7a:65:97:28:b9:e1:90:
                    e2:d2:1c:2c:c3:f4:e3:fc:f9:cc:47:eb:a8:cd:95:
                    07:c7:ea:22:f5:f0:59:10:07:93:8c:e9:08:43:b4:
                    c4:68:4d:b8:69:22:b4:33:82:75:12:5a:40:66:16:
                    bc:4d:9b:27:a2:84:52:e6:83:00:c9:da:70:db:9e:
                    52:10:bd:af:25:34:af:ec:b8:c8:6f:d3:1e:60:56:
                    4e:67:1f:5f:29:60:eb:8f:19:8a:c5:62:10:97:a4:
                    e2:6d:41:3e:d5:26:a1:89:0f:17:d6:99:f0:a1:b9:
                    0b:4c:75:7a:ce:6a:d8:7b:e9:20:d6:61:d4:21:42:
                    c8:f7:ca:b5:84:98:e5:c6:cd:8d:27:69:8d:a2:df:
                    9c:d0:c0:f2:78:e8:23:29:03:19:cf:4f:5d:1a:7e:
                    0a:4e:54:8e:e6:e5:36:09:53:cd:85:f0:5f:e0:0a:
                    14:12:1e:3e:fb:e0:66:bd:b4:af:20:10:74:22:ec:
                    e2:c4:e2:16:53:48:f6:c0:ae:e5:74:18:b0:1b:37:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3F:73:A7:71:C2:84:E2:D3:6E:90:D2:5B:C5:58:4C:C9:B9:F2:1F
            X509v3 Authority Key Identifier:
                keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b9:a6:35:f0:df:46:1c:3d:84:d3:26:0f:1a:5b:6e:1f:fa:
         52:b6:27:81:36:9a:0b:ab:b1:64:02:83:a4:7f:f4:14:cb:c4:
         0f:81:48:03:82:bc:2d:15:fc:66:51:9d:9d:fc:ef:a5:ee:8b:
         0e:ce:86:ac:9b:e3:de:4c:36:af:6c:56:fc:af:68:ab:18:14:
         11:15:42:27:20:bc:a2:40:a7:b0:ee:b5:e3:85:c4:d6:4e:c3:
         67:7e:9e:9b:a9:df:66:fe:75:79:12:ad:21:39:3b:a5:40:6e:
         a7:5d:89:f4:0f:14:51:95:10:6e:12:cb:08:36:f9:0d:54:bf:
         e1:e4:79:03:c5:5f:6a:a7:9f:5f:26:a6:a8:4a:7e:08:4c:d2:
         f3:cc:d5:df:74:b8:ad:29:62:c4:7a:03:6f:92:9c:7f:7d:09:
         1c:6c:30:65:0c:22:ad:1f:33:c6:1d:a3:2b:8e:d5:98:36:4e:
         fe:2e:e1:ad:9a:59:05:ff:c7:5c:c5:7f:77:83:a0:e4:73:fe:
         88:3e:36:6b:bf:8f:c7:f0:2c:8e:aa:44:6e:e4:18:a8:88:ae:
         76:33:5b:d6:0d:b4:d9:d2:85:21:fe:c6:e8:e5:53:75:0f:71:
         ea:ff:ea:2f:67:f5:ed:68:04:5c:97:80:f3:86:dd:f0:c1:d8:
         99:6a:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:59:41 2025 by rpki-client