Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
File:                     J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft (raw, json)
Hash identifier:          wNO+MaPIQsOHojl58IB7i3JXm0xEZDb7ZIaGgBHICAQ=
Subject key identifier:   15:FD:F0:80:47:5A:C1:AF:3B:65:78:DC:51:18:DE:60:D5:B9:46:73
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Certificate issuer:       /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial:       019847779B4F41728D53F59B21C43F58EE10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 16:01:17 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:17 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:17 +0000
Files and hashes:         1: 4FXB0W838e2KDL7-L_x6UPsRNAQ.roa (hash: LK8SbOkeipWhuTJTuor/1UupMV/BQue0Yrv+JoGi1Bc=)
                          2: J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl (hash: mmo1MXN+LTMpifB43lQV0xBJecJ+gJkdWhRNsHAcHv4=)
                          3: VWEs-xVV5ND0GJkPhbytzQmCX2s.roa (hash: Lvidk3VL8SGZhZHfYCyzYvXPKQ2gZ6B2D2mdtv2GK9E=)
                          4: l5YxBP66J268QPpOfOKh6pf_dA0.roa (hash: VfFGld2mgne36x9HBpf5GPD2Bw0k6fbkaTy5yNO7fDc=)
                          5: vTTN7Jd0zPqa91uLSy540B9C-ks.roa (hash: OZfHJYsEdowOMA253v79GTAv8RCtV3bvgVGY0+xVsr8=)
                          6: z6ZchbUwtdpz1UJIozdf3Vyzbas.roa (hash: 9jBz1RUdaL6PLVqIdtXh6rvEfUHptMVuoQ/ptnKIDQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:9b:4f:41:72:8d:53:f5:9b:21:c4:3f:58:ee:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
        Validity
            Not Before: Jul 26 16:01:17 2025 GMT
            Not After : Jul 27 16:01:17 2025 GMT
        Subject: CN=15fdf080475ac1af3b6578dc5118de60d5b94673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:33:69:68:45:4d:e5:2c:61:69:5e:d7:dd:
                    d9:1e:7f:56:01:f3:51:64:38:17:22:2a:b2:c0:3f:
                    6f:bb:39:13:7d:7d:47:06:45:87:e6:92:ef:6c:01:
                    a8:c0:8c:32:a2:62:3f:3d:e2:ab:21:59:7f:da:ef:
                    b9:5c:12:aa:22:25:9f:f7:5f:d1:90:5d:84:80:52:
                    01:8b:f7:52:88:d2:db:74:6f:5a:88:ed:a3:97:15:
                    74:a7:59:59:dd:30:ac:26:0e:42:2b:21:a2:8f:1e:
                    70:da:f3:e3:ea:59:ca:4b:0f:98:62:36:07:d0:b7:
                    8c:29:a7:95:b1:62:cd:9b:77:6b:f4:1f:91:5d:4a:
                    a6:16:f9:ad:2d:f1:06:e8:88:2f:cb:d7:28:40:bb:
                    50:61:b5:0e:bc:1c:a5:d9:2e:ec:4b:a6:b2:61:e8:
                    9a:83:da:e5:e2:54:22:12:ba:4d:5b:93:a6:46:2c:
                    37:51:85:cd:7a:32:e2:c3:83:58:9b:61:e1:ea:34:
                    1a:82:f2:47:26:bf:a4:05:20:3f:cb:2f:a5:73:23:
                    b3:8d:81:40:dc:09:55:1d:78:db:4e:a6:eb:d4:51:
                    d9:e7:66:8d:f6:c5:06:8b:63:69:98:47:25:13:7f:
                    6e:38:ce:4c:c0:28:3c:bd:a2:c5:dd:71:3a:d6:8d:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FD:F0:80:47:5A:C1:AF:3B:65:78:DC:51:18:DE:60:D5:B9:46:73
            X509v3 Authority Key Identifier:
                keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c4:9e:a0:39:c1:d2:8c:08:5a:a9:b6:3f:af:5d:ec:46:74:
         f6:66:e1:6d:16:1b:ea:cd:c4:fb:53:14:be:21:48:a4:24:a2:
         8e:47:d7:7c:37:ea:47:f9:0e:24:f9:ee:b0:f1:a0:77:93:2d:
         03:d5:c0:c4:ec:53:a1:3a:e2:5e:00:9b:a7:53:98:03:ca:41:
         fc:ae:fc:cf:09:61:63:2a:32:e7:92:9a:95:44:c0:d6:fc:28:
         77:1e:5d:6b:d0:1c:fc:8f:98:a8:25:b2:8b:d8:4c:61:15:7c:
         5e:f6:4f:20:6e:07:c7:3a:d8:b0:83:04:5e:76:74:3e:bd:fb:
         72:b1:41:5c:f1:03:01:68:e1:64:88:19:80:f8:58:9f:cd:c9:
         75:02:a4:d7:a8:13:4d:de:f0:97:ff:7d:51:32:77:13:d9:9a:
         f0:31:97:1a:3c:56:31:63:5e:ed:a3:fb:1d:a2:b9:c7:6d:21:
         05:c2:e0:c3:92:f9:36:1d:d7:62:21:92:cb:e7:0b:fb:bf:e9:
         a4:4e:ab:9c:4d:a3:f9:84:59:4f:3d:e6:b6:14:62:3b:82:73:
         42:b2:29:ac:ca:37:f1:1a:27:7c:71:31:1f:02:e5:4a:f2:39:
         2e:22:31:84:33:18:90:3b:e1:a1:90:d8:d2:01:25:24:8e:ea:
         7b:bd:11:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:02:49 2025 by rpki-client