Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          ok0kilKTwd9vFo37oYuF7dg2zy42E8UQnzKYj//Zz/o=
Subject key identifier:   BF:2E:C4:2F:9E:47:36:E4:78:A4:0D:0A:67:77:B3:53:42:8C:C9:AF
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       01993537BCD84386047846FFEAA59CB0A61C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          0E39
Signing time:             Wed 10 Sep 2025 20:01:08 +0000
Manifest this update:     Wed 10 Sep 2025 20:01:08 +0000
Manifest next update:     Thu 11 Sep 2025 20:01:08 +0000
Files and hashes:         1: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (hash: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=)
                          2: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: LHKLjtLPu6O5soJKHcEmXNL0AaHlAdwKLbAnl9Ll/ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:37:bc:d8:43:86:04:78:46:ff:ea:a5:9c:b0:a6:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: Sep 10 20:01:08 2025 GMT
            Not After : Sep 11 20:01:08 2025 GMT
        Subject: CN=bf2ec42f9e4736e478a40d0a6777b353428cc9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:49:48:e8:12:ed:88:9b:9c:ac:d6:49:92:
                    a2:d1:e5:c1:7b:bd:eb:c2:b8:a2:db:2c:01:6c:7d:
                    6d:1c:f9:89:97:bf:8c:75:a6:06:b9:24:be:c6:73:
                    0e:8b:d0:15:59:5a:51:ac:82:40:3c:b2:3d:a7:28:
                    04:4a:4b:10:61:43:ad:27:bc:23:51:8a:0c:c8:be:
                    85:de:ac:cd:f5:b4:db:4a:59:58:3d:ca:82:be:a1:
                    e4:8a:1b:d2:55:8e:6e:c1:e6:a6:55:3a:59:74:f0:
                    7f:94:55:c1:40:01:78:47:a0:9d:df:ae:75:c6:fe:
                    eb:1a:bd:1a:56:fd:00:f0:33:4a:aa:9d:6e:9a:a2:
                    97:9f:db:3b:de:7d:e4:05:6b:e8:bb:79:f2:38:48:
                    dd:ad:09:f2:bd:46:22:48:15:e7:7f:56:c9:0f:75:
                    04:1a:fe:6f:6b:20:d2:82:9c:ba:23:37:b2:bd:e6:
                    3a:c9:ef:4f:73:c8:52:58:13:97:9f:04:63:64:c9:
                    2b:7e:18:4c:4e:0d:24:98:ca:a2:69:f7:78:de:f4:
                    e2:f2:ef:a2:36:68:96:a8:a7:5e:1b:81:b0:a7:f7:
                    39:bc:94:af:ce:c7:42:82:36:16:f1:bb:c7:02:0a:
                    9e:df:73:ee:47:30:63:ea:26:02:2b:14:46:bf:ff:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2E:C4:2F:9E:47:36:E4:78:A4:0D:0A:67:77:B3:53:42:8C:C9:AF
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:de:23:5c:89:82:72:1c:07:e3:7b:86:05:46:e6:44:1a:5b:
         8c:cd:33:87:91:9b:5e:5b:48:54:b6:bd:5a:73:c9:57:3a:d0:
         0b:78:b8:0b:a9:24:90:ef:9d:89:9f:c8:81:0b:d1:d6:4d:2f:
         a5:73:ce:3a:51:15:c7:ff:2f:e1:27:be:a6:a9:05:5e:db:a0:
         05:9e:42:72:54:7c:0c:77:8e:78:d4:6e:3c:92:bf:2c:a6:ff:
         a2:c1:6e:15:e9:21:b1:77:e0:fc:07:70:68:56:d8:dc:ae:51:
         c8:60:53:c3:21:68:aa:66:0e:13:fd:5c:33:b6:24:37:99:f0:
         54:b8:66:51:df:fc:da:7b:9d:b4:6e:c0:0d:95:70:fd:14:bc:
         b2:9e:59:1d:ad:d1:bd:a2:da:73:4e:02:6a:56:a6:25:10:51:
         81:02:04:68:53:2c:f8:b6:14:ca:35:f3:5b:b9:71:be:66:52:
         69:c8:af:55:62:dd:91:47:12:e5:4b:55:2c:b4:dc:80:e8:16:
         2d:84:ca:9c:06:ed:42:54:f6:1a:47:96:82:e0:21:22:1c:d1:
         91:d1:53:02:2d:40:f6:47:12:b8:53:33:e2:6d:a5:df:3e:5c:
         4f:ef:a5:6d:56:bc:f9:88:ee:fb:f2:62:af:a1:c4:0e:cf:07:
         a8:26:c2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:06:02 2025 by rpki-client