Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
File:                     J5O96Uauk208rME2pfMjnt8kMfQ.mft (raw, json)
Hash identifier:          4SHirR3L8Aofaare55EZS6XRaj1rl8C4dIWmGbd1S2M=
Subject key identifier:   80:21:D5:74:AD:66:5E:CE:7E:F7:F0:D0:05:00:59:FF:69:1B:FD:EB
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Certificate issuer:       /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial:       01984287C62EAD64E785092CA540F5E3BBFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
Manifest number:          10B3
Signing time:             Fri 25 Jul 2025 17:00:51 +0000
Manifest this update:     Fri 25 Jul 2025 17:00:51 +0000
Manifest next update:     Sat 26 Jul 2025 17:00:51 +0000
Files and hashes:         1: 7E5LSfCOnSbjv-AVC1nxJJ66F4U.roa (hash: /aIHlfM99fuCwlGxN5/ehUDLpA24+vyDEzZMgylijKg=)
                          2: 9UkCw4b12dxaFQuWu2BWrAq18cs.roa (hash: uCtVg42ZHDXRQtsH4hBM45QWmlQhdogsHZ3bdPv3hOo=)
                          3: J5O96Uauk208rME2pfMjnt8kMfQ.crl (hash: eNKVRvrtAOrTHwHegx9jS8qEagdS4ayROTzTy3YLFBE=)
                          4: Lzxta0jd7ucvehlsvKMLCGGj4SU.roa (hash: r2f4C1ycLWis+wP1tatuwRPmqShhZKPPE1FJIgRZw1w=)
                          5: ONAb3aa9aLqBAH1nZ2X-0Z8C9Vk.roa (hash: toxq5hd68ktpiB99iFz4dER/H0vTabk/sYSInN7166g=)
                          6: P_96blpHfAQM3voIBaqDmBhs-8E.roa (hash: R9hyFEujTVmaNvCmjtuWK6MWoWwhFPOAcCmIzjoPwgM=)
                          7: ZtPUyk_TNktoLC4Kb0JqAQbyro0.roa (hash: AOW26RlAnZ0u9tHghS8csH7uDfnP5ryVT/Rp+gEYBlU=)
                          8: ulUXrUDPWH1jBF3XUvGFq6u9UBA.roa (hash: JO8Wuf/EekqDvWZVFwjNa4p80lEXLhg9dIYBQ3yRrjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:87:c6:2e:ad:64:e7:85:09:2c:a5:40:f5:e3:bb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
        Validity
            Not Before: Jul 25 17:00:51 2025 GMT
            Not After : Jul 26 17:00:51 2025 GMT
        Subject: CN=8021d574ad665ece7ef7f0d0050059ff691bfdeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:17:c6:e4:d8:30:41:9e:42:95:c9:ba:54:
                    22:49:f9:89:01:39:63:eb:27:68:18:b0:e5:ef:16:
                    51:52:37:f7:36:9b:5e:f9:9b:0b:ba:05:90:00:6b:
                    20:3b:2c:33:23:4e:91:d6:5e:11:19:f3:dd:07:ce:
                    b9:ad:0e:a4:12:32:76:88:f2:19:e5:d2:50:2f:fc:
                    23:12:21:e3:c3:67:f2:91:fa:16:e5:74:53:fb:26:
                    10:93:a7:ee:9b:37:42:d0:4a:18:bb:56:51:67:4d:
                    6b:5d:24:9e:6b:cf:00:c7:ca:c8:8f:9a:23:54:23:
                    b9:7a:e0:3f:01:9a:fe:91:22:50:9c:d3:97:54:4e:
                    fe:db:d4:80:08:93:8e:cb:92:b8:ed:0e:bf:bc:13:
                    76:8d:62:a8:5e:3d:f3:b0:b2:85:57:5f:6e:6b:dc:
                    c8:a7:4e:e8:e6:60:e5:d6:24:95:14:cf:ee:89:26:
                    0b:64:32:8f:f7:bd:84:b3:c7:32:ed:d6:0e:21:88:
                    4d:65:90:b7:c4:6b:54:d3:22:93:aa:ba:bf:38:7f:
                    54:c4:54:c3:b8:8f:53:3b:90:f0:d9:f1:c6:39:42:
                    9d:22:88:ea:fd:c3:21:86:82:79:2b:fb:30:bd:d7:
                    47:66:3c:6d:63:12:ff:6e:ae:04:3c:3e:7c:99:2d:
                    00:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:21:D5:74:AD:66:5E:CE:7E:F7:F0:D0:05:00:59:FF:69:1B:FD:EB
            X509v3 Authority Key Identifier:
                keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:84:17:bf:e0:33:85:d4:f7:86:68:f3:4e:bf:0a:70:2c:fb:
         1c:a0:48:90:98:ff:a0:82:4a:c4:8b:0f:46:e4:e6:2d:3f:24:
         ed:14:3a:c3:8c:ac:66:c2:ef:60:b5:f8:5c:74:db:e8:3a:00:
         a7:32:80:ee:e9:63:e3:23:ab:45:9b:ad:83:51:57:ac:7f:65:
         7f:14:d9:03:5d:c6:16:d5:31:d6:89:91:95:0f:cb:a7:b3:ce:
         ed:34:fa:cd:2d:4a:61:4e:b0:cb:63:66:21:23:f6:80:b4:ac:
         7f:a0:ee:fd:26:18:8d:11:a7:1c:96:ba:93:95:24:57:ad:ac:
         45:a5:c4:4e:ff:a5:e8:f7:d5:dc:d1:db:ce:ba:ff:79:d1:f1:
         8d:66:36:1b:a9:c5:06:52:93:39:cc:87:8d:2f:43:32:f6:9a:
         48:84:fc:2e:ab:ea:d8:60:81:66:79:f4:61:46:e5:75:db:2d:
         10:79:b2:d8:e1:33:e7:0f:c0:45:da:0c:10:f7:a7:f2:99:a4:
         28:1f:e1:66:ad:11:73:e4:25:81:e9:1c:56:04:2a:c0:23:76:
         67:d0:91:a2:ab:0a:70:4b:76:f2:a3:40:8e:65:60:56:2d:70:
         e6:2e:b2:38:6d:ec:8d:2e:2d:f6:da:f0:f2:fc:52:d5:3c:82:
         f3:ff:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:12:46 2025 by rpki-client