Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier:          LoAlMItki+cFQoCUXB2vPMNluSWZDiY9ZBisO40TAno=
Subject key identifier:   21:CE:F3:EA:69:DE:A2:AB:11:C9:5A:8B:5C:A1:5F:50:F0:10:8B:25
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       019933494138B326A97596D380764FC531A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number:          167F
Signing time:             Wed 10 Sep 2025 11:01:02 +0000
Manifest this update:     Wed 10 Sep 2025 11:01:02 +0000
Manifest next update:     Thu 11 Sep 2025 11:01:02 +0000
Files and hashes:         1: B1nucPb7NWUbBUo9E6aO-U-ClRc.roa (hash: JvGsvFvtRyqqdZt/kpyabUpQhS7hpxa8fDi+el1bUhg=)
                          2: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: Rib7nKQxDN4iu/NCkj1ExWEVHHhu+UHwqVSOu/H7awU=)
                          3: m7nZQDUNXTAKS4UOybVqVQmdP5w.roa (hash: xKnYvzxmkeCg53JAhipiTpZl84ccUL77H2BTcrzkprw=)
                          4: yFJjRro5JzpGdzShKj2Qbj-Hr50.roa (hash: KNe/rWaTqo2IHu+MVm5qVm+k7A9vULCB7kmT0LNcB1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:49:41:38:b3:26:a9:75:96:d3:80:76:4f:c5:31:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: Sep 10 11:01:02 2025 GMT
            Not After : Sep 11 11:01:02 2025 GMT
        Subject: CN=21cef3ea69dea2ab11c95a8b5ca15f50f0108b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:26:e1:37:23:d7:83:59:ba:37:88:6e:9d:52:
                    2a:93:dc:e4:b3:70:3c:51:a8:d5:15:2c:1e:6f:c2:
                    be:62:c7:5f:01:30:cb:56:6f:0b:66:6f:0d:54:c9:
                    f5:09:a7:94:0c:a6:2c:f4:09:d2:39:50:ff:68:b8:
                    42:18:97:b7:82:19:c3:bc:2c:0c:7d:9c:28:93:f2:
                    12:1a:fe:c7:0a:0f:56:28:ee:aa:5a:9e:72:01:17:
                    fa:c4:bf:84:2f:25:c4:9d:e1:0f:8d:9d:21:12:e1:
                    81:e1:02:78:70:b1:7e:89:74:bb:13:63:c7:10:15:
                    85:26:92:70:6b:99:9b:8d:5e:3a:24:fd:b6:b7:fd:
                    8d:56:fd:3d:27:fc:0c:75:0f:ee:4a:f2:72:71:8f:
                    f5:d9:03:7c:5e:a1:a1:b3:f2:3e:4c:75:1d:21:4b:
                    19:d9:5a:1f:70:37:79:10:a4:ea:d1:61:66:80:d1:
                    7e:88:8b:43:d2:fb:19:a2:64:ea:48:67:1c:1b:85:
                    44:42:41:05:50:ca:39:50:e1:1e:db:44:7c:6c:45:
                    91:47:fd:57:4f:28:3d:dc:04:26:85:dc:6b:98:f0:
                    76:d5:20:45:e2:60:29:58:78:8d:c7:60:2c:05:e3:
                    40:99:a0:64:7e:c1:58:56:0e:14:8f:f0:91:53:c8:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CE:F3:EA:69:DE:A2:AB:11:C9:5A:8B:5C:A1:5F:50:F0:10:8B:25
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e6:6b:f2:eb:c1:13:f3:62:f4:30:96:57:1b:15:e2:8c:2f:
         f7:3b:7f:b4:e8:15:03:05:09:0c:06:eb:db:50:b1:c4:ff:fe:
         72:0b:b1:19:1a:4c:d9:a0:03:c4:70:1d:cf:f4:5c:b2:f4:4c:
         5f:71:dc:e3:0e:6c:88:fd:3c:02:dd:5a:80:64:96:20:3f:6b:
         06:e6:eb:f8:6b:8d:46:fc:9b:cc:fa:75:4c:73:f6:dc:88:39:
         f9:7a:f2:38:87:07:75:99:2b:72:c8:75:42:10:f4:11:2e:96:
         8a:df:1c:52:31:02:03:93:53:e6:c0:14:21:43:88:e0:bf:f6:
         d3:c3:b6:df:99:6d:bc:6b:0f:67:d6:4c:b5:7b:6e:82:3c:5f:
         0e:f3:6a:dd:d0:b4:eb:6b:4f:a2:01:22:2b:85:3a:40:44:b9:
         7c:35:51:42:d1:67:0e:38:87:f9:c4:be:e4:ee:b1:e3:62:69:
         40:25:8c:23:36:e1:75:ea:aa:8f:74:84:bd:f6:eb:db:ff:92:
         c7:89:24:ee:e5:9f:55:58:04:5c:44:24:f8:37:be:f1:94:5f:
         83:30:8e:bc:d7:26:f8:05:3e:72:cd:b8:af:4a:a7:45:9a:01:
         34:49:57:e9:02:06:9d:7c:07:93:77:fa:c9:96:87:c1:14:c4:
         73:8f:e8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:36:32 2025 by rpki-client