Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File:                     0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier:          kFAzR5Z51djD8o08kx6I8yHVGp3Y5hcHOoOhd23Cim8=
Subject key identifier:   39:D2:F5:DB:C7:98:A9:9B:9C:D4:5B:0E:FE:25:25:33:F8:69:87:4D
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer:       /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial:       01988E7D9FFEC18BE5FA7B84AB3CDC3DB9CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number:          05DC
Signing time:             Sat 09 Aug 2025 11:00:54 +0000
Manifest this update:     Sat 09 Aug 2025 11:00:54 +0000
Manifest next update:     Sun 10 Aug 2025 11:00:54 +0000
Files and hashes:         1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: /yvp33u2reyWvZW6lbE6PFYkNxLC2WHOIWC74d5/8UI=)
                          2: B30qKHB4pvW_uIxt5ksptRBP4PQ.roa (hash: Y9HutrF2XOKiS4omLhBmOgiWSK360mai1Yz5rvj0XF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:7d:9f:fe:c1:8b:e5:fa:7b:84:ab:3c:dc:3d:b9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
        Validity
            Not Before: Aug  9 11:00:54 2025 GMT
            Not After : Aug 10 11:00:54 2025 GMT
        Subject: CN=39d2f5dbc798a99b9cd45b0efe252533f869874d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:4f:a6:ef:3f:18:37:c5:66:76:ad:17:46:
                    24:67:30:4c:ce:46:a1:90:bf:a3:44:cd:05:6f:4d:
                    72:1e:cd:d4:71:7a:14:8e:5a:f7:73:79:67:ee:c6:
                    15:7a:97:9c:b2:db:38:10:90:31:a7:c8:ae:f5:df:
                    13:7a:35:5f:42:f6:72:d0:b7:38:06:02:3f:4d:4f:
                    dc:fd:cb:de:ef:eb:64:a7:48:25:16:e1:f8:51:9c:
                    ab:a0:db:2b:84:9a:22:2c:6a:4e:3d:80:1a:d2:cd:
                    72:d4:48:7c:84:a8:76:b1:f2:b5:cb:f7:6f:ef:4d:
                    a6:1f:08:1c:fe:6e:e3:99:3c:d1:a2:6f:0d:9d:73:
                    4e:73:2e:06:33:ec:0f:5f:fb:05:89:9e:5d:b9:1f:
                    54:ef:b4:02:ac:ee:6a:97:30:30:fa:b9:30:38:f2:
                    ff:79:f1:6f:32:bc:5a:3f:72:cd:2a:7f:97:98:31:
                    cc:72:24:84:7c:ab:4e:79:7e:cb:bc:31:25:40:98:
                    0b:3c:16:4c:ad:fd:37:6c:fd:fb:06:7b:6c:0f:d0:
                    2b:c4:28:ac:9a:e6:a5:b2:31:a1:f9:d3:20:97:77:
                    bd:67:33:06:79:9a:07:ab:8f:38:0f:a3:1c:77:44:
                    62:7e:f5:85:1a:eb:1b:33:d1:6a:f3:da:ca:78:66:
                    cd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D2:F5:DB:C7:98:A9:9B:9C:D4:5B:0E:FE:25:25:33:F8:69:87:4D
            X509v3 Authority Key Identifier:
                keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:36:74:36:08:36:c0:68:e2:30:c1:9d:45:8f:42:c5:37:
         cb:7d:fd:5d:b5:05:f1:5b:23:e5:16:2f:2a:2a:4d:21:6c:ad:
         86:3a:18:73:c3:7d:49:7c:34:42:1b:f9:47:d6:de:d0:b9:07:
         d2:47:79:6f:f1:c8:f5:bc:3e:a5:dc:3e:21:5e:07:aa:07:51:
         3f:90:54:94:d4:bb:99:13:bd:16:8e:e8:66:9e:3e:e6:4f:52:
         57:d0:78:6e:e0:8a:63:4e:64:97:9c:03:12:e4:92:b5:f2:b1:
         50:73:92:52:46:3b:a5:e6:fa:8a:b4:05:b4:9b:9f:52:08:e9:
         c1:b6:aa:89:62:04:cf:2e:98:6d:8b:f7:5e:e7:61:1a:90:f9:
         d8:1c:84:3d:f4:a0:a6:5b:0f:26:6f:3c:e7:37:88:56:69:da:
         5d:1e:d8:a8:3b:9d:38:e8:5d:9f:30:55:1b:19:78:db:97:12:
         7c:c0:fb:fd:61:1c:56:94:ed:90:25:c1:e7:fe:9d:af:18:a1:
         6b:de:70:59:93:ba:47:33:b4:86:28:dd:6f:58:75:eb:42:5a:
         f7:2f:99:85:97:13:70:d3:02:ea:a9:15:37:52:ad:ef:4d:e3:
         43:34:36:a7:1b:ba:72:6b:e0:d5:67:e6:96:26:0f:98:87:66:
         3c:7f:01:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:32:30 2025 by rpki-client