Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
File:                     J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft (raw, json)
Hash identifier:          TSzmvFN+4KC4dsk+CXnoSHOdTZIWv4aDOGsKe7eFk+Q=
Subject key identifier:   E9:AD:35:17:3E:B8:32:75:CC:FE:D6:DD:E0:24:C7:79:FE:3B:E5:EA
Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
Certificate issuer:       /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Certificate serial:       01993501307D00F4AD6CE920CCCA892DF7C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
Manifest number:          167A
Signing time:             Wed 10 Sep 2025 19:01:34 +0000
Manifest this update:     Wed 10 Sep 2025 19:01:34 +0000
Manifest next update:     Thu 11 Sep 2025 19:01:34 +0000
Files and hashes:         1: 1Up92kLaciflZCGF6thZ6O_2gb4.roa (hash: MZjlg+hjkFznVUD2gKvbQop6qeX1ypK906BpNhUjgLA=)
                          2: JDa6SY9OudTO59Luwi4g9XuH-5g.roa (hash: 9WJ0L7baOHSNBgfr0oc7eP1UiTVZAMhpoL/3V6eL10k=)
                          3: J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl (hash: +JQirIe7+yg3weEy6ayIzAVmcR9qTrZUKjIf1kVt2Io=)
                          4: UjdRg-4YFjoxl_g8YXlmvQbDI8A.roa (hash: rgWrNq7qmzpWB8PQIHq/XPPdpuoL1N7tYUChf7PYf28=)
                          5: cvzTz2OXBB_yidJBNxcXZxwYdrY.roa (hash: YVNb7JT5aj8Grywf7uIQmWk7NHgm3JKfDMAhwde/BcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 19:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:01:30:7d:00:f4:ad:6c:e9:20:cc:ca:89:2d:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
        Validity
            Not Before: Sep 10 19:01:34 2025 GMT
            Not After : Sep 11 19:01:34 2025 GMT
        Subject: CN=e9ad35173eb83275ccfed6dde024c779fe3be5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2d:49:66:cf:46:22:4b:db:3b:d6:5b:1f:ab:
                    2f:c8:57:e5:5f:41:96:43:00:9a:fd:0b:07:d6:90:
                    2e:26:f6:c7:f8:06:d4:4e:a5:6a:68:2d:95:76:20:
                    57:7f:51:69:ae:11:50:f9:48:71:2a:76:01:0a:86:
                    cb:da:ba:8a:01:3d:ad:d2:05:03:b5:01:e6:04:09:
                    0d:8d:27:ef:9f:97:19:22:7a:4b:94:6c:21:df:b7:
                    b2:9f:7e:17:22:34:81:a5:dc:7c:f9:b3:a1:be:51:
                    05:f6:9e:c9:52:42:f1:9b:81:21:a6:96:3e:70:09:
                    7c:2e:72:05:a5:d1:61:d9:9f:82:24:18:c4:46:9e:
                    26:10:51:ca:3b:4f:54:a1:ed:1c:e2:7e:a4:19:18:
                    ec:4f:6b:3a:ab:96:d1:a9:0b:d4:eb:3d:ed:1d:f4:
                    4e:7d:bb:b9:70:96:54:44:65:90:ae:4b:0c:e0:85:
                    60:b6:91:db:70:91:20:63:4e:89:4c:91:c7:d1:cd:
                    56:33:02:cb:a3:32:88:11:88:90:75:5a:d5:b9:a6:
                    fc:03:28:b4:77:cc:bf:d6:56:54:1f:b6:8d:c0:11:
                    77:5c:de:1a:e0:9b:ea:ac:a0:c5:e8:8f:74:d5:14:
                    73:e1:be:d7:bf:da:59:ef:4e:36:78:e7:87:3a:eb:
                    60:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AD:35:17:3E:B8:32:75:CC:FE:D6:DD:E0:24:C7:79:FE:3B:E5:EA
            X509v3 Authority Key Identifier:
                keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:9c:70:b2:ee:f4:77:e3:95:44:25:d1:cf:26:d9:3d:18:
         24:46:94:86:37:ab:6f:af:ed:fa:ee:87:cf:a4:38:ff:08:ed:
         e4:68:3e:3b:f1:90:62:36:5c:eb:14:42:cd:4f:fd:bd:81:35:
         98:64:0f:14:a9:1c:66:f5:61:fe:52:54:01:9d:4a:a2:74:71:
         c7:f8:0f:cd:4e:6f:10:a3:19:d2:1b:c9:3d:0d:a9:e8:1a:7f:
         67:4d:cf:9c:65:57:ef:a9:c1:4a:41:58:1c:8c:12:92:f3:a9:
         d1:e9:62:bf:28:12:e4:7a:87:f2:c5:b7:de:d9:67:47:b7:d4:
         68:47:28:16:35:2e:04:09:b3:a5:70:d5:02:d6:50:c2:32:22:
         ec:f6:13:2d:cf:1f:f0:a1:29:ef:40:70:8c:54:ff:5f:6a:7b:
         8a:8b:dc:3e:18:47:cf:f0:dc:dc:b5:84:d8:7e:4a:49:d7:e4:
         2d:ef:00:77:c5:1d:3d:eb:82:37:d3:08:34:b9:06:aa:8c:ec:
         60:b7:92:75:30:b5:72:44:08:95:66:69:1d:18:9b:64:aa:cf:
         0e:0b:4e:95:bb:3e:16:d4:85:f9:f8:59:d7:c7:5b:24:c6:ad:
         fc:cb:45:75:ae:8a:2c:7c:d2:c6:22:38:45:e0:90:e2:eb:3a:
         c7:2c:8a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:28:06 2025 by rpki-client