Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.mft
File:                     J6TlqssSnqUHOCsj25fKQgBwTWk.mft (raw, json)
Hash identifier:          nd58rmvzoTZpuvOFV7NGqW02A+PPDl0ZvAYF3DNBYPo=
Subject key identifier:   01:9F:47:73:75:5A:AB:20:F2:52:22:C7:0A:A8:CD:8A:C5:63:1F:87
Authority key identifier: 27:A4:E5:AA:CB:12:9E:A5:07:38:2B:23:DB:97:CA:42:00:70:4D:69
Certificate issuer:       /CN=27a4e5aacb129ea507382b23db97ca4200704d69
Certificate serial:       0198518C740E431A36F6DD3EEA6131830EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6TlqssSnqUHOCsj25fKQgBwTWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.mft
Manifest number:          1609
Signing time:             Mon 28 Jul 2025 15:00:15 +0000
Manifest this update:     Mon 28 Jul 2025 15:00:15 +0000
Manifest next update:     Tue 29 Jul 2025 15:00:15 +0000
Files and hashes:         1: J6TlqssSnqUHOCsj25fKQgBwTWk.crl (hash: vGt85kk/wWQLRn7svEiN2IdVe/uv2nPCK8vJc7OYeW0=)
                          2: bzVsLijY3-nRPNP3h4rxl64PXKk.roa (hash: riS0R0mOdaXJPo4gzgYg5KC9rMRZjBjAip5TXiNX86Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J6TlqssSnqUHOCsj25fKQgBwTWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:8c:74:0e:43:1a:36:f6:dd:3e:ea:61:31:83:0e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27a4e5aacb129ea507382b23db97ca4200704d69
        Validity
            Not Before: Jul 28 15:00:15 2025 GMT
            Not After : Jul 29 15:00:15 2025 GMT
        Subject: CN=019f4773755aab20f25222c70aa8cd8ac5631f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:eb:8d:4f:7b:fc:07:e6:3d:52:43:cf:18:
                    48:52:ed:2c:d9:72:81:25:f9:55:e5:89:c2:33:d8:
                    9f:aa:41:3c:d6:05:8b:19:30:0b:bf:54:fc:84:39:
                    03:bf:41:36:c9:50:0e:dd:d5:f7:ad:f7:71:ee:03:
                    62:22:d1:33:97:74:b7:70:58:5e:72:bd:19:4f:2f:
                    ed:26:9e:49:db:1f:d5:e2:9b:3f:92:5d:fd:49:c3:
                    c7:ee:7a:ee:b4:8f:91:5b:9d:2f:06:ed:db:ff:1f:
                    99:61:ba:bc:fc:e8:a4:1b:1f:31:bb:73:40:f6:b3:
                    5f:05:ed:67:05:1e:a6:81:93:23:20:75:37:11:5c:
                    69:7f:19:2c:15:71:71:5f:11:76:07:45:54:ce:64:
                    cb:31:b2:b4:8c:31:80:23:6b:70:99:f8:ca:4c:1d:
                    04:1a:36:fb:a3:5f:d6:9a:2a:a3:c5:3b:ef:e4:ac:
                    be:dc:14:a9:2e:7d:2f:ab:0b:aa:4e:a2:60:de:08:
                    22:da:60:e2:0e:b0:73:3d:d5:1c:b8:59:49:55:bc:
                    ec:2a:18:7b:bb:67:bb:d3:fb:6b:55:94:f2:f8:5f:
                    54:f2:a1:35:22:63:9b:7d:55:c0:4d:ee:b9:e5:95:
                    2a:67:ce:59:86:62:bd:80:ca:fa:08:72:8c:46:20:
                    46:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9F:47:73:75:5A:AB:20:F2:52:22:C7:0A:A8:CD:8A:C5:63:1F:87
            X509v3 Authority Key Identifier:
                keyid:27:A4:E5:AA:CB:12:9E:A5:07:38:2B:23:DB:97:CA:42:00:70:4D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6TlqssSnqUHOCsj25fKQgBwTWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fe8042-fef4-4ff0-bac4-c8a48339ca79/1/J6TlqssSnqUHOCsj25fKQgBwTWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:54:20:e0:42:77:b9:92:39:3b:6e:93:fd:2a:e3:74:ca:df:
         87:e0:5f:79:11:5f:47:4f:94:e4:4b:1f:9d:96:7c:cc:b3:06:
         93:5b:15:65:4c:99:46:58:34:d7:de:73:76:5f:e9:0f:43:2e:
         48:da:14:06:eb:8c:b7:0b:a5:0f:e9:74:af:e9:b9:cd:a1:ec:
         17:f7:c8:32:1a:06:b8:ed:ed:38:54:bd:40:f5:d8:ed:3e:4f:
         04:c3:4e:6c:17:cd:c8:ca:a0:79:42:41:26:f4:b9:22:8f:20:
         49:99:5c:3e:27:58:62:01:ee:25:03:8c:53:4f:16:b7:1c:ea:
         51:0c:c3:c5:d8:a4:64:d3:4d:54:56:2e:36:9b:77:a5:b6:b9:
         e3:89:df:cf:93:10:b0:58:9c:e0:13:10:ac:86:19:0f:5d:ba:
         75:ed:84:ca:b9:c5:34:42:a8:5b:50:f6:67:70:95:38:ad:16:
         12:27:1c:5f:91:62:6a:4b:44:41:6c:ab:8d:ae:00:1d:17:50:
         c6:6e:47:d6:30:73:70:39:43:2d:d4:82:b8:7c:25:9c:e8:92:
         78:da:b7:3a:4c:1f:9c:bc:bc:b6:4f:0f:3b:c5:c5:b6:bf:3f:
         04:12:31:1e:21:32:07:b2:ce:6a:8d:38:23:5c:2d:66:63:19:
         3c:bd:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:11:42 2025 by rpki-client