Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File:                     j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier:          y8U4uRSWNRTlHi4OQWgSusOaT8frAzJ42+h9xwX6/fM=
Subject key identifier:   F1:69:EE:9D:40:20:97:64:20:EF:FF:60:CA:02:5C:C5:3B:D1:83:F8
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer:       /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial:       01984B552870CCBA8CE7643DB43DE423EE67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number:          054C
Signing time:             Sun 27 Jul 2025 10:02:08 +0000
Manifest this update:     Sun 27 Jul 2025 10:02:08 +0000
Manifest next update:     Mon 28 Jul 2025 10:02:08 +0000
Files and hashes:         1: 13OA8Kowa9u-F_7ZWwXTDMJLU0A.roa (hash: TLY9MKIWsbVqHZrgOnopJQQ8yZUjxig3a2ZRbtkH/Xw=)
                          2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: 8FVx+1lge8wt2CApPVdQMn7ZuACNlxOu7ZzfPSwWLDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:55:28:70:cc:ba:8c:e7:64:3d:b4:3d:e4:23:ee:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
        Validity
            Not Before: Jul 27 10:02:08 2025 GMT
            Not After : Jul 28 10:02:08 2025 GMT
        Subject: CN=f169ee9d4020976420efff60ca025cc53bd183f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:32:ca:fb:da:4f:68:e0:0e:26:ad:fe:2c:
                    35:07:29:1c:af:55:d9:88:ea:eb:e8:c0:2c:1d:39:
                    4a:b1:88:0c:38:99:de:9d:cb:72:74:40:06:26:2e:
                    ad:c3:86:6e:e6:85:d9:fe:2d:fb:3d:32:bf:0a:4d:
                    4c:e0:0a:6b:17:c7:2c:28:c4:04:28:35:5b:d7:f0:
                    f3:ba:69:00:3b:96:a6:fd:b4:e4:47:ab:c7:1d:9b:
                    b1:aa:eb:ad:17:36:41:36:c2:36:80:bd:2f:5d:18:
                    bb:81:95:62:ac:b9:1f:6b:1e:47:f6:87:34:52:8a:
                    cc:b4:f2:fe:4b:f4:c1:22:98:c2:d6:a5:d9:fb:09:
                    9b:5d:f6:74:18:e8:8e:62:f8:07:4c:58:70:fe:78:
                    12:3a:59:a6:27:00:aa:24:23:bd:ac:5a:bb:22:35:
                    6f:2b:fc:9a:95:f8:d0:cb:5a:01:4b:d7:35:b8:40:
                    6b:02:81:09:d9:83:86:f7:86:57:67:ee:1d:7b:90:
                    7c:d5:d3:b7:ff:73:35:db:b8:83:eb:31:6b:ea:20:
                    14:0a:66:e6:de:80:71:bf:38:90:02:37:32:53:f4:
                    66:17:01:37:e1:60:5c:17:3f:84:52:64:59:a1:43:
                    85:c0:28:9c:ed:7f:37:f7:20:d0:01:44:1c:17:e6:
                    31:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:69:EE:9D:40:20:97:64:20:EF:FF:60:CA:02:5C:C5:3B:D1:83:F8
            X509v3 Authority Key Identifier:
                keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:15:94:51:99:13:af:95:fb:4a:9b:01:be:fd:7a:a7:e4:68:
         4b:1b:f7:45:21:54:26:e1:92:91:93:7b:eb:89:c4:4e:55:d7:
         fa:1c:76:8f:bb:b6:f5:7e:a8:b0:d6:85:06:64:5f:e3:76:dc:
         a3:d8:72:36:36:63:60:2f:67:3f:06:76:e3:ac:31:ca:fb:3b:
         7d:50:bb:f6:94:8c:d1:e8:7a:fb:23:50:52:bc:30:21:31:0b:
         b0:c2:fc:92:dd:f0:6b:83:f6:c6:f1:49:5c:53:0d:e2:86:7a:
         a6:dd:9d:d2:1f:aa:d3:d9:1e:fa:e6:c5:34:45:bb:4a:0c:0a:
         62:be:5d:0c:90:19:a4:fb:76:48:94:f0:bb:23:8e:22:66:4a:
         52:40:2c:fe:b0:bf:17:40:1e:8c:61:59:ad:27:e6:38:29:59:
         76:0b:97:59:e1:1d:3b:71:5c:01:eb:5e:0d:d3:03:bb:57:57:
         fa:e5:88:ab:5a:ab:2d:c0:9c:da:18:3b:b2:45:15:23:a6:80:
         19:17:07:bc:16:93:7c:87:de:e7:a3:34:9f:6e:e6:a2:92:b8:
         af:3c:b1:16:48:5e:a6:e0:05:34:39:69:db:81:b4:a9:ed:6e:
         f5:73:94:13:b3:5f:76:33:3d:af:48:ed:3f:c7:58:4c:3d:52:
         81:b5:88:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:14 2025 by rpki-client