Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
File:                     J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft (raw, json)
Hash identifier:          qaE79CgTdmOnW0eMcIo++OkJr/5iToZxhXPpNEqVLbY=
Subject key identifier:   0D:ED:88:91:4E:90:91:76:4D:1E:47:1C:6D:1E:3A:FA:18:78:97:FB
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Certificate issuer:       /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial:       019A096EFBD4DFEAC235B515A56119212E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
Manifest number:          1527
Signing time:             Wed 22 Oct 2025 01:00:59 +0000
Manifest this update:     Wed 22 Oct 2025 01:00:59 +0000
Manifest next update:     Thu 23 Oct 2025 01:00:59 +0000
Files and hashes:         1: 32DmFG6eckwT_cmIA6P2GvExV8o.roa (hash: QAbNn1NoMo9kTBTTYBudg/heTTEApB1Axs6m2LEO3wM=)
                          2: 8mfWKUaTIk1RDd44sNUtQ4HsM2s.roa (hash: GuIpyglmMkqHqRdMJ131I6La+nXiqbtWAj+MwrMR+Yc=)
                          3: Ht6FsCIGKxXaA3P0oIyjphKEPpk.roa (hash: jQWJMmY8DgPGrpE2GgmGMr1+l/UtziWDhgw2WyC6x2Q=)
                          4: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl (hash: Vdv9mxKrN7W1RPNR1WK7cufW+lcEyMrSRoor764v8FM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:09:6e:fb:d4:df:ea:c2:35:b5:15:a5:61:19:21:2e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
        Validity
            Not Before: Oct 22 01:00:59 2025 GMT
            Not After : Oct 23 01:00:59 2025 GMT
        Subject: CN=0ded88914e9091764d1e471c6d1e3afa187897fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:5a:c6:32:c9:a9:1d:4d:cf:80:7c:e5:2a:
                    8c:a9:e2:ce:5e:87:29:71:7d:b9:1d:f2:81:2b:e7:
                    4d:81:96:77:48:64:10:2a:17:47:78:12:c5:72:55:
                    35:fe:9b:bb:1c:42:d3:4d:73:ec:fa:67:1b:00:e4:
                    73:76:af:16:22:c7:6a:97:d5:b2:89:42:dd:e3:c5:
                    7f:a3:ce:d7:92:db:83:f3:8e:40:92:d7:a0:b8:40:
                    ab:3c:ce:9a:d6:b4:5a:8e:1d:7b:cf:20:2f:6f:eb:
                    97:63:b5:9d:63:ee:cc:ff:c8:cb:f6:d0:be:3a:42:
                    14:93:9a:96:77:5a:49:55:5d:b3:af:b4:ff:74:8f:
                    aa:64:70:65:7e:12:c7:89:65:79:34:44:ee:2d:4b:
                    e8:42:45:79:d9:bf:b9:dd:b5:c9:5f:c2:80:1c:fc:
                    41:e0:b5:f1:d2:89:a3:9d:36:c0:05:2c:f3:c5:26:
                    a2:a8:13:9a:75:e1:5f:0c:7c:05:0c:76:06:81:f3:
                    19:25:83:d6:2a:97:d8:0c:61:90:3e:ee:7f:3d:25:
                    06:a5:33:f8:79:70:3a:5d:2c:d2:4c:5a:ff:a6:11:
                    17:6d:9d:57:86:99:e2:f4:99:b1:41:31:47:81:2e:
                    33:87:83:70:b7:d9:8e:ab:d7:57:47:33:f1:71:b7:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:ED:88:91:4E:90:91:76:4D:1E:47:1C:6D:1E:3A:FA:18:78:97:FB
            X509v3 Authority Key Identifier:
                keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:57:13:26:8b:1c:91:4d:09:fa:08:5c:56:a9:8d:63:44:
         88:c7:ed:2e:f4:68:73:8c:1d:37:25:f0:02:a9:b4:44:90:55:
         1d:58:6e:25:1d:08:59:0d:58:99:6b:89:7d:66:fd:87:4a:49:
         f9:bf:1f:c5:bc:36:2e:1f:74:3f:6c:8c:58:8b:58:a7:ab:c7:
         19:84:ee:9b:7c:04:68:93:62:c1:fa:cc:ed:11:9c:3c:3e:f1:
         d8:3d:4c:cc:84:df:e3:86:e3:e0:79:36:48:90:10:e5:f3:ee:
         c1:e3:84:1c:21:ba:f4:20:1c:5d:07:c5:36:c8:e5:2d:64:06:
         f0:57:f9:79:13:cb:8a:f6:37:b1:6c:7c:88:c5:6d:0d:67:94:
         ce:33:9e:4c:3b:90:3e:aa:fc:6e:1e:26:0f:fd:31:ea:5c:db:
         8b:84:d1:f3:8a:b0:fa:19:1f:46:66:59:a2:7f:2b:12:15:e8:
         e2:e8:58:a5:49:90:10:81:9a:aa:66:5d:15:10:73:be:57:1f:
         01:d7:20:9a:f6:31:42:ed:0c:af:89:45:45:74:b0:47:6b:a6:
         5f:16:b6:62:a1:e6:51:e2:49:d8:f3:e1:2b:94:ff:26:c5:c7:
         89:43:ab:8f:9e:09:88:cc:59:0a:eb:38:53:19:57:7f:ac:86:
         d0:f6:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:13:50 2025 by rpki-client