Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
File:                     J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json)
Hash identifier:          YOqLviKkgNiuMQGK/4nQiwvzCEzH+ycRaHJqtBVpuuE=
Subject key identifier:   A8:19:0B:5C:9B:5E:CB:2A:51:D0:A8:84:9F:5D:FE:8C:AB:87:1E:26
Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
Certificate issuer:       /CN=27b2133219989e6a32d71158d0852a516eb6f79f
Certificate serial:       01992331497C2A8D80E3B8928351B2582FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
Manifest number:          12F7
Signing time:             Sun 07 Sep 2025 08:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:56 +0000
Files and hashes:         1: 9yA1BkRviJoFuz4ovXK7z_9dmsQ.roa (hash: TmOG+5LxnyALDVOkw9CXFcKpknkNr7jhmiggKOWlYA0=)
                          2: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: //jmxgjT7GjzCVhvyOIvYVAUC0NSvfWkgN3qtW7JOyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:49:7c:2a:8d:80:e3:b8:92:83:51:b2:58:2f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f
        Validity
            Not Before: Sep  7 08:00:56 2025 GMT
            Not After : Sep  8 08:00:56 2025 GMT
        Subject: CN=a8190b5c9b5ecb2a51d0a8849f5dfe8cab871e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:f2:13:db:ba:15:23:f6:13:cf:6f:d9:c7:
                    6c:3e:ea:8e:6a:16:47:74:6b:b6:fa:0f:c8:65:cd:
                    46:ec:fe:34:b3:50:d1:45:55:d9:6a:5d:f6:75:98:
                    39:3f:69:1e:e4:01:b1:ab:35:f4:d9:6b:b3:76:ef:
                    e3:40:01:46:c3:88:cd:fd:87:43:3b:30:0b:68:90:
                    af:7f:a3:77:23:57:cf:c5:af:06:7d:57:ce:56:a3:
                    74:38:46:c2:66:18:b5:eb:5e:08:95:5e:d0:45:97:
                    cc:49:66:ce:25:b0:ac:6d:ea:9f:9c:9d:4f:71:8c:
                    f0:e9:e0:61:a4:aa:f0:b9:a2:8e:22:cf:42:61:29:
                    03:41:d1:b7:c6:b6:78:c9:d9:3c:f5:74:f2:b6:00:
                    43:a7:d6:ec:d7:53:08:bc:cf:ed:96:f5:7a:e0:15:
                    2a:88:6a:be:b1:02:c9:97:90:cf:71:20:a2:fa:c3:
                    fa:1b:4e:e3:4e:a5:b7:9b:b7:94:fe:3f:c6:8f:07:
                    40:3c:e8:ff:1f:07:5d:58:8e:ff:7c:ac:ca:fe:93:
                    80:41:6b:55:81:63:1f:3b:ef:b5:31:c6:04:d0:9d:
                    a9:c1:74:30:4a:14:04:d7:f1:b2:bd:f1:4f:f1:38:
                    28:95:12:b3:09:87:7d:55:2d:28:16:cc:0e:46:99:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:19:0B:5C:9B:5E:CB:2A:51:D0:A8:84:9F:5D:FE:8C:AB:87:1E:26
            X509v3 Authority Key Identifier:
                keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:49:54:ee:bb:cc:30:32:2a:40:6c:53:8f:3d:46:6b:3a:0d:
         12:20:d9:c6:56:15:d5:7d:de:7c:d0:55:ae:79:e7:0f:c6:99:
         a4:e6:53:3d:2e:24:64:93:97:15:eb:cd:e4:c5:5e:63:ec:35:
         1d:71:70:05:07:22:f2:f3:32:f4:81:1b:c5:61:e4:8f:06:ea:
         d7:41:ea:c9:56:21:cd:73:29:67:03:14:ce:9c:e2:08:a8:58:
         10:50:9a:0b:74:7c:cd:b5:c8:3b:7e:8b:d4:dd:4b:d0:9b:a1:
         2c:cf:b5:d1:b9:8f:1b:44:d5:af:a1:1b:5c:de:43:25:f0:64:
         0f:f7:40:e2:4c:46:dd:67:33:83:e9:f6:91:e5:e1:22:d4:70:
         59:42:5c:33:5c:10:24:2a:6e:f3:89:e4:6d:06:ca:9e:54:c7:
         12:7d:76:6c:5e:a3:ac:37:3c:0d:b7:8c:a8:a7:41:bd:f6:60:
         81:98:c5:91:9f:e3:16:12:82:ee:e3:0b:ac:0e:8e:f6:59:fa:
         91:39:db:8c:fd:eb:07:53:e5:79:b6:a8:cb:9d:1b:91:d1:ad:
         57:74:57:20:45:cc:a1:11:cc:d6:df:21:e7:08:8e:39:d4:2a:
         1a:e9:ea:9c:5c:99:bb:96:d8:af:79:fa:12:75:c8:8e:3c:eb:
         f7:a3:e4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:42:26 2025 by rpki-client