Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier:          n9+5S3V2DX7ybfSjo4SkfsscfxRwQM2N3BT/XaDcp2Y=
Subject key identifier:   A5:E9:79:83:F0:4F:2A:C9:4D:6F:77:66:7F:24:DB:A5:88:A0:AC:36
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       019843D0D8729BBEFBE484DB3F29D08D7755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number:          1603
Signing time:             Fri 25 Jul 2025 23:00:16 +0000
Manifest this update:     Fri 25 Jul 2025 23:00:16 +0000
Manifest next update:     Sat 26 Jul 2025 23:00:16 +0000
Files and hashes:         1: B1nucPb7NWUbBUo9E6aO-U-ClRc.roa (hash: JvGsvFvtRyqqdZt/kpyabUpQhS7hpxa8fDi+el1bUhg=)
                          2: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: x+O9i7GZT+R6xQGQ/MnJGDcZ/2VfHvlncv+SDRCiXTo=)
                          3: m7nZQDUNXTAKS4UOybVqVQmdP5w.roa (hash: xKnYvzxmkeCg53JAhipiTpZl84ccUL77H2BTcrzkprw=)
                          4: yFJjRro5JzpGdzShKj2Qbj-Hr50.roa (hash: KNe/rWaTqo2IHu+MVm5qVm+k7A9vULCB7kmT0LNcB1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:d0:d8:72:9b:be:fb:e4:84:db:3f:29:d0:8d:77:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: Jul 25 23:00:16 2025 GMT
            Not After : Jul 26 23:00:16 2025 GMT
        Subject: CN=a5e97983f04f2ac94d6f77667f24dba588a0ac36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:db:4d:7f:6f:6d:7e:0e:ba:35:3f:47:87:f3:
                    d0:af:64:6f:9b:7c:ea:09:6b:07:f9:3c:63:b7:64:
                    eb:7d:e8:ca:85:1b:a0:18:ee:ad:c1:f7:92:2a:ee:
                    d9:17:0f:2a:ec:3f:1d:6a:ba:61:fe:fa:de:5a:cc:
                    7c:92:0c:6d:55:5b:0e:cd:1f:23:f0:f6:12:e8:4d:
                    96:d4:c9:43:4b:51:16:49:ac:22:8e:8b:4f:ff:a5:
                    f3:72:72:ac:01:3e:cf:4b:9a:bf:bd:02:97:55:42:
                    38:d5:71:71:b9:15:03:99:17:10:ec:f1:0d:38:40:
                    fa:ce:1b:e5:e7:23:3f:0c:ca:d7:03:7b:a3:83:6c:
                    04:2f:fd:32:dd:7b:43:c4:2e:a2:29:8c:68:23:f4:
                    9c:ee:bc:a7:e9:fd:f9:7b:10:3a:84:8b:36:10:95:
                    68:4f:60:27:ca:cc:69:7b:3d:cd:b6:1f:55:ce:5e:
                    6f:10:10:e8:a5:da:01:c2:e6:77:90:0f:bf:4a:6d:
                    04:07:0e:85:e5:dc:b0:71:52:f3:bf:34:bf:88:3f:
                    d0:e1:ea:e6:b2:ce:26:f9:b5:0a:2f:e5:e0:87:2e:
                    93:6b:82:72:14:8a:1b:b5:f5:cd:82:95:aa:8f:64:
                    d9:04:88:ba:14:e5:3b:19:61:14:ae:8b:da:fd:7b:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E9:79:83:F0:4F:2A:C9:4D:6F:77:66:7F:24:DB:A5:88:A0:AC:36
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b4:5e:e0:22:3a:e1:a7:c1:64:1e:b4:d5:26:38:fa:4b:01:
         66:92:10:c1:dd:cc:80:1e:fd:79:8f:41:c5:56:50:37:0e:1d:
         93:aa:4e:b1:b9:9d:5d:ef:ed:63:a1:73:7b:10:4a:bf:2b:32:
         11:23:97:8f:a8:c7:9b:c1:06:b8:7a:a8:d6:b9:0e:ae:ae:2d:
         e9:a6:cd:fd:f8:35:a5:9e:63:ca:15:37:47:32:07:a7:b1:bc:
         d4:5b:63:03:8a:34:c8:e6:81:f5:da:94:b4:47:83:04:db:5f:
         00:0a:c0:8a:b4:79:d6:e2:43:8c:2b:bd:43:10:23:4f:1a:c6:
         ec:69:74:45:b3:9f:64:d7:48:77:4f:58:a4:f8:0d:22:f0:7a:
         e6:45:2e:92:43:73:2b:7d:38:c6:bf:d1:94:da:bf:33:52:96:
         65:de:7d:1a:04:2a:c5:b2:0e:60:a1:aa:bf:dc:1d:84:2c:43:
         23:85:2b:3d:eb:01:3a:55:58:06:a0:ae:55:9c:fd:73:fd:55:
         aa:2e:a8:fd:58:f5:08:ce:e2:74:d8:21:3f:35:fd:91:3e:82:
         e2:33:fd:0d:e1:c5:cf:70:04:5c:04:6f:89:28:ae:62:db:35:
         60:d9:4d:d4:91:14:89:85:48:7a:72:81:07:de:82:ef:bc:a0:
         a1:bc:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:31:40 2025 by rpki-client