Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
File:                     J3bWTqj9AotoiON0VXu5HwXuDsY.mft (raw, json)
Hash identifier:          wplDB3++xrmmNnrq0Fju5eEUx2oZd50G/eD7rK092fg=
Subject key identifier:   03:09:BD:63:EB:BC:40:B4:D4:84:31:F0:CE:C7:26:6F:DE:FA:11:43
Authority key identifier: 27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6
Certificate issuer:       /CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
Certificate serial:       0199228C90593271CD5805AB12DCFF840D38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
Manifest number:          0C86
Signing time:             Sun 07 Sep 2025 05:01:01 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:01 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:01 +0000
Files and hashes:         1: J3bWTqj9AotoiON0VXu5HwXuDsY.crl (hash: t7GulymGvIisVbpLLcRI1FN7B59D0nD/YCUuV9zLnWo=)
                          2: T_CxlSwnknQox-JCH593XHkgLvM.roa (hash: CV6mCgtIXghwvOdJmAcgD8Xq7LAE7fozTfYdfKC5Sfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:90:59:32:71:cd:58:05:ab:12:dc:ff:84:0d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2776d64ea8fd028b6888e374557bb91f05ee0ec6
        Validity
            Not Before: Sep  7 05:01:01 2025 GMT
            Not After : Sep  8 05:01:01 2025 GMT
        Subject: CN=0309bd63ebbc40b4d48431f0cec7266fdefa1143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c5:56:e7:06:8e:bb:54:4c:7e:4a:08:7e:3e:
                    36:b6:47:89:ca:bd:45:ab:44:4f:da:28:91:d9:f8:
                    74:aa:1e:59:b6:f7:30:35:77:49:95:9e:10:cb:6f:
                    9a:23:0e:91:a6:3c:70:0b:b1:d0:f7:66:78:fa:43:
                    ff:6d:20:7c:e5:cf:35:3b:4d:23:32:02:cc:b3:00:
                    c1:b3:f6:31:93:4a:9c:d7:7c:83:dc:b1:b2:80:de:
                    25:2b:fa:83:7e:6f:d2:13:35:33:f3:e1:27:78:56:
                    bb:b7:db:a9:98:2b:87:c4:ee:76:30:72:bf:d0:b4:
                    fd:d0:f8:08:c1:3f:74:41:59:3e:4f:61:ca:79:3b:
                    b8:1d:7c:93:79:5b:8a:ee:f4:7d:c1:54:8e:4a:dc:
                    8e:eb:c8:7b:d4:0c:0c:14:50:13:cd:c5:db:1b:99:
                    e6:4d:dc:b6:21:9b:03:af:23:0b:22:a7:62:14:ee:
                    75:5b:19:18:0a:e9:2d:ab:e9:1b:90:17:58:17:0e:
                    30:33:02:06:98:3e:94:4e:8d:05:7a:8a:f3:16:0b:
                    be:50:61:78:b0:17:52:44:5b:f2:b7:55:7d:0b:ad:
                    a4:96:d8:ae:0a:70:9e:58:60:fb:fc:0d:a2:53:0f:
                    23:87:9c:31:27:e2:a1:60:20:f4:97:44:f2:91:a5:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:09:BD:63:EB:BC:40:B4:D4:84:31:F0:CE:C7:26:6F:DE:FA:11:43
            X509v3 Authority Key Identifier:
                keyid:27:76:D6:4E:A8:FD:02:8B:68:88:E3:74:55:7B:B9:1F:05:EE:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3bWTqj9AotoiON0VXu5HwXuDsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3ed97d-e867-425f-8743-0daed3aa6249/1/J3bWTqj9AotoiON0VXu5HwXuDsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7b:ae:a6:81:77:04:9b:0f:09:4f:eb:14:97:c6:4c:2b:cd:
         31:c3:b6:ac:1a:87:cf:e5:79:af:01:fc:7a:b6:a3:3b:8c:9b:
         86:37:e0:fe:2c:a8:5e:51:53:5e:9f:48:63:30:8e:25:a3:b6:
         10:19:00:a6:78:ec:91:1c:9f:79:38:4d:b8:32:3e:73:8f:41:
         e1:10:2e:ae:47:8e:5e:07:96:59:2b:16:6f:3a:69:36:7d:11:
         bf:9f:cb:0a:a7:cb:71:e3:d4:20:95:b7:67:b0:9a:f7:89:60:
         4e:14:1e:75:7d:c6:c1:a2:73:80:55:3d:0e:ef:5b:71:fe:6f:
         aa:57:cd:71:d8:a1:cd:81:b7:e4:a3:1b:44:51:01:27:e6:b0:
         14:12:63:98:77:c1:03:d2:a3:4e:63:5f:a6:fd:68:d1:d0:79:
         25:ee:f0:50:ad:52:f6:91:28:76:ce:62:91:cc:8e:26:f1:1f:
         ca:99:3e:a0:41:21:27:cd:36:4d:8f:fb:2e:4f:46:9c:d2:50:
         c9:24:bd:aa:0f:6b:39:62:05:a1:66:d1:92:3a:33:e1:c1:36:
         47:c6:06:28:52:fb:02:38:90:59:9c:67:91:c4:af:e1:27:0c:
         67:49:15:ed:fc:91:80:a4:63:2a:5e:d3:60:c3:3b:ad:77:49:
         66:99:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:54 2025 by rpki-client