Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
File:                     J0hJVnNlSeqzsG4jqricpZk6gHY.mft (raw, json)
Hash identifier:          301jo8wwZxBONMHV0x0nUF/TtSi335E6NAVxkqU22V8=
Subject key identifier:   AF:74:AA:CC:DA:4D:DB:23:A4:A1:24:34:7E:43:D3:89:02:70:23:49
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       019944E216DF7C0570199CB849F28C0836B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
Manifest number:          1288
Signing time:             Sat 13 Sep 2025 21:01:31 +0000
Manifest this update:     Sat 13 Sep 2025 21:01:31 +0000
Manifest next update:     Sun 14 Sep 2025 21:01:31 +0000
Files and hashes:         1: J0hJVnNlSeqzsG4jqricpZk6gHY.crl (hash: jyExxG0Ry5HF0UrWUsKCInNi7siJn3/hLPRmksz+XAU=)
                          2: JSfSNBZp2sArMnNqgy7JPjlV3w0.roa (hash: AAxuDoIwBhXDcehYAfqhoDL4a0JHM/VmkCzff4ZSoTk=)
                          3: aHgUlmeQvXSLOAXmjY6OG9x7CHw.roa (hash: EkeJb1vk/DYNvMk3tNYmPq0HrdN72YN06ty6+3e7rPU=)
                          4: hOUd1wZ_zMaTKuCxsCn2r2bH2BU.roa (hash: bxwt1u/r3VzOjW3gEkeatdflQyeXrR7mqzyeYNfcLHY=)
                          5: tW9YcXZ53Rr1e1oEOmqCt5AR9Sc.roa (hash: O3S/RX4GnOSFqdUE+99ZJDVtp7vahAb9JLGw0JZrYQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:44:e2:16:df:7c:05:70:19:9c:b8:49:f2:8c:08:36:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Sep 13 21:01:31 2025 GMT
            Not After : Sep 14 21:01:31 2025 GMT
        Subject: CN=af74aaccda4ddb23a4a124347e43d38902702349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:f6:e8:93:7f:db:bd:b4:55:84:31:9f:7c:
                    12:31:90:eb:85:eb:b6:58:65:b6:52:26:8f:4c:ff:
                    91:b3:74:2b:f7:a4:a5:ea:1b:44:0a:95:b7:73:09:
                    2a:69:09:9b:66:de:21:f4:d1:f9:a8:54:de:94:0f:
                    27:70:1c:5e:b2:5e:14:27:6b:1b:30:93:ea:ce:c1:
                    f4:f8:6e:22:d8:53:6b:87:05:b5:ce:06:30:0f:4c:
                    00:36:f4:9e:c4:5f:3e:48:8e:f8:28:88:9d:b6:ca:
                    a6:9e:29:40:2e:ec:22:9d:58:d2:29:a9:ec:08:1f:
                    1d:d0:24:20:e6:51:74:0f:76:24:ad:d4:15:3e:f4:
                    39:9f:27:6d:14:9e:7d:54:17:22:17:29:55:73:80:
                    ba:7a:5f:c4:e2:f2:d3:79:40:96:b9:44:2a:8b:98:
                    08:5c:77:80:a6:bf:51:3f:5e:18:a5:b1:9c:58:9f:
                    4a:d7:51:08:f0:6b:3f:eb:26:57:6f:b1:7e:a8:86:
                    7d:38:63:18:73:5a:ea:65:0e:40:c7:80:24:9c:eb:
                    30:66:d8:53:a6:55:7e:07:c0:fc:8a:dd:48:2f:94:
                    75:83:8d:c9:70:47:5a:fa:90:a2:0b:47:a6:78:43:
                    a7:61:17:12:6d:82:e6:b0:cb:82:dc:0c:ec:13:a7:
                    b3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:74:AA:CC:DA:4D:DB:23:A4:A1:24:34:7E:43:D3:89:02:70:23:49
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:4c:fd:44:03:da:ff:96:52:2c:73:e0:87:23:3a:3c:8d:
         eb:8e:b3:9b:51:b0:de:92:43:21:14:12:00:c8:ea:fe:1e:16:
         91:6e:e0:75:92:da:dc:bc:06:76:14:45:4a:e9:fe:ca:5d:13:
         2d:21:e8:d6:2c:29:35:c5:92:47:b6:0c:99:55:16:f9:c0:96:
         14:30:a1:fa:b7:53:19:fb:cd:fd:0d:98:ad:2d:d8:1c:6a:f8:
         fa:eb:f2:7a:c0:2d:b1:fe:d3:29:a7:58:1e:2c:ec:38:18:9a:
         49:67:b7:5b:3a:38:22:52:ec:8a:6b:6e:b6:38:ef:9e:29:cd:
         90:c9:24:73:2e:df:16:f0:02:87:e6:bc:03:b0:53:e3:7e:45:
         c5:8b:6b:b4:6b:48:3d:65:47:c0:d2:6d:5a:15:50:c3:d9:53:
         58:96:f5:04:fe:42:b3:a1:07:c9:0c:58:5c:a0:a3:64:cf:22:
         a2:81:1c:24:60:5e:34:be:d8:bc:3f:ed:5f:3d:8b:21:c8:e4:
         a9:e3:eb:7f:e8:3e:47:50:5c:10:e7:20:40:af:b2:fa:5e:65:
         ed:48:d3:4d:b4:9a:26:12:63:51:f6:b7:3c:d5:39:58:0d:b8:
         de:4a:ca:92:2e:f6:8b:24:07:f9:92:73:83:51:1a:4a:3d:a1:
         f1:bb:0e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 04:33:33 2025 by rpki-client