Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
File:                     J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft (raw, json)
Hash identifier:          Y5y8oxB//WLp07d4NWY6JKEzc+OQ3aJy5X5ZJB2A6r8=
Subject key identifier:   C1:A9:6F:EA:1D:9C:46:4F:8D:29:97:ED:4D:0C:85:FA:2A:9D:C8:8F
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Certificate issuer:       /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial:       01994C2D0376C5C63146EFB0B991FC65185A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
Manifest number:          1689
Signing time:             Mon 15 Sep 2025 07:00:42 +0000
Manifest this update:     Mon 15 Sep 2025 07:00:42 +0000
Manifest next update:     Tue 16 Sep 2025 07:00:42 +0000
Files and hashes:         1: 4FXB0W838e2KDL7-L_x6UPsRNAQ.roa (hash: LK8SbOkeipWhuTJTuor/1UupMV/BQue0Yrv+JoGi1Bc=)
                          2: J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl (hash: RGyE2gzlKLa+RFwVrusYBZITo2UlnToeapj9PnY8NPI=)
                          3: VWEs-xVV5ND0GJkPhbytzQmCX2s.roa (hash: Lvidk3VL8SGZhZHfYCyzYvXPKQ2gZ6B2D2mdtv2GK9E=)
                          4: l5YxBP66J268QPpOfOKh6pf_dA0.roa (hash: VfFGld2mgne36x9HBpf5GPD2Bw0k6fbkaTy5yNO7fDc=)
                          5: vTTN7Jd0zPqa91uLSy540B9C-ks.roa (hash: OZfHJYsEdowOMA253v79GTAv8RCtV3bvgVGY0+xVsr8=)
                          6: z6ZchbUwtdpz1UJIozdf3Vyzbas.roa (hash: 9jBz1RUdaL6PLVqIdtXh6rvEfUHptMVuoQ/ptnKIDQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4c:2d:03:76:c5:c6:31:46:ef:b0:b9:91:fc:65:18:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
        Validity
            Not Before: Sep 15 07:00:42 2025 GMT
            Not After : Sep 16 07:00:42 2025 GMT
        Subject: CN=c1a96fea1d9c464f8d2997ed4d0c85fa2a9dc88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ec:f8:bc:22:bc:9b:60:37:81:5c:d9:01:d0:
                    dc:dc:64:b3:e5:d3:e4:d1:c3:75:a3:6c:33:b0:67:
                    05:b4:f3:c9:f4:1c:e3:05:c0:e2:b0:41:02:8e:2d:
                    ad:18:25:9c:32:f1:c9:d6:08:70:f5:89:1e:a9:f7:
                    cb:c6:72:4d:b4:04:9c:92:8e:53:be:3f:cc:d0:41:
                    60:0c:88:f9:78:03:4b:6a:0b:11:67:12:bd:9e:5b:
                    4c:51:1a:e8:9e:9e:fb:ee:5f:d4:4f:91:7e:57:ac:
                    a6:b7:70:71:f2:f7:fb:b7:df:12:13:43:84:44:00:
                    2d:c9:7c:95:1b:83:6e:4f:f5:90:f5:7a:f4:c7:26:
                    98:45:10:3c:70:bd:1c:99:1b:7e:c0:ad:7b:38:97:
                    0e:76:ac:a5:73:cd:64:11:74:21:86:81:95:9e:50:
                    f3:12:fb:fa:ac:3a:f3:7f:cb:ef:28:27:a4:e8:5d:
                    d2:e0:ff:e9:f2:4d:09:43:3a:cf:af:ca:4f:19:b2:
                    7a:d5:17:75:df:3e:b4:b6:fe:10:ee:76:1b:8b:6b:
                    d3:05:c9:32:60:17:98:70:8d:e5:48:b0:8f:4b:89:
                    c7:d2:77:44:cc:d0:62:24:af:50:0b:89:4a:a3:5f:
                    40:a3:7a:0a:c6:c9:78:f5:93:53:41:e5:07:ee:2b:
                    f0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A9:6F:EA:1D:9C:46:4F:8D:29:97:ED:4D:0C:85:FA:2A:9D:C8:8F
            X509v3 Authority Key Identifier:
                keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:14:6d:98:66:0a:6b:35:ac:30:ce:c3:40:60:46:a8:3f:16:
         91:31:e2:f0:81:b8:0e:d2:64:b4:99:85:f3:de:44:94:b0:27:
         69:37:ae:dc:5b:b8:dc:45:51:c7:5d:20:ad:9c:8c:d9:a9:54:
         c2:bb:2a:b7:13:ad:b6:56:3b:49:9e:fa:7d:30:c7:3e:2d:a8:
         25:a5:c0:f5:69:21:f9:92:b7:6c:8c:d2:7b:25:e8:7b:74:fa:
         f1:2a:c7:da:e0:ed:9b:e2:07:3d:5f:96:21:52:02:58:16:98:
         a4:74:05:3a:c9:fc:30:f7:2c:ea:55:a1:49:c0:77:76:5c:c9:
         d1:32:56:ce:7b:57:fb:29:8b:89:1e:eb:80:a0:56:f8:b3:85:
         3b:c3:64:d0:cc:52:1e:b3:a1:3f:07:71:b7:0a:c6:83:6b:b3:
         46:b7:a5:b2:2c:8e:ad:bb:a6:f7:bd:01:12:0b:be:77:25:b8:
         74:e8:01:f1:73:02:49:f5:74:88:fd:2c:d5:38:0a:30:6f:57:
         11:1a:54:8a:86:72:f3:d3:d3:ea:94:36:bb:e7:11:38:ca:78:
         22:1c:cf:44:9c:1f:04:85:3c:cd:1b:75:a8:00:c5:ef:a3:e5:
         ac:f3:32:20:6c:4c:4a:72:94:28:59:1b:16:c0:43:fb:d6:be:
         01:6f:de:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 12:09:44 2025 by rpki-client