Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          X+eYmXIUp0jvLKOLvipDeeJbY0ynsFVj6nPHESTFlN0=
Subject key identifier:   C9:BE:26:C1:F3:3E:5A:1B:D2:CE:6D:8C:9F:2D:61:42:0A:90:AF:82
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       01987D89ECAFFF69906BAB75A1EAD20E65D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          1621
Signing time:             Wed 06 Aug 2025 04:00:47 +0000
Manifest this update:     Wed 06 Aug 2025 04:00:47 +0000
Manifest next update:     Thu 07 Aug 2025 04:00:47 +0000
Files and hashes:         1: 4-VMs7WjnHapNWAogJtHgkJT3FU.roa (hash: gSDXueJPuBUvKo0WOnGXmd8a/t7YwU/fLnYXo72JtQQ=)
                          2: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (hash: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: wspBXwb7UJvHLvGg4LVi6SfbPLMvZCnCpXY1Q1F84Pk=)
                          4: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (hash: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=)
                          5: _bqODjPn-Rd4cBmxTx3qtm9oavg.roa (hash: y2y1qSWU+HMBsyjHGzEQQZsskHsqz5iR/DyAxLMfaoM=)
                          6: p68H3uMjio8Wt8Lw5I34yYxIxUU.roa (hash: Cl/bx139AnmJ9IE64HvUFHSswl0yNbebsilLqxaX8Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:89:ec:af:ff:69:90:6b:ab:75:a1:ea:d2:0e:65:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Aug  6 04:00:47 2025 GMT
            Not After : Aug  7 04:00:47 2025 GMT
        Subject: CN=c9be26c1f33e5a1bd2ce6d8c9f2d61420a90af82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ca:26:e1:d5:7f:9b:1c:80:9d:76:6a:0a:d6:
                    c7:98:1b:e9:24:71:7e:62:03:10:03:9e:6a:42:b5:
                    21:9f:7c:1e:dd:3b:cc:a7:8a:31:db:3a:b8:fa:da:
                    f7:b7:7a:c0:f4:1e:72:a4:8e:54:4d:1f:4f:75:14:
                    c7:4e:68:a1:74:c5:bd:80:24:e8:c7:8b:99:50:62:
                    05:69:b5:74:d5:a2:8c:67:3e:76:ac:0d:7c:ef:ad:
                    65:3c:02:93:86:d4:17:22:3c:bc:10:80:94:7d:52:
                    52:bf:f4:bb:ad:80:89:41:39:2a:09:25:f2:a6:f7:
                    34:a8:1b:4e:f4:60:24:40:b9:51:03:b1:c4:9e:69:
                    46:05:85:63:ae:9c:3c:53:c7:4f:4b:17:5d:fe:db:
                    d3:e0:c6:c6:1b:97:9d:b7:ac:d7:f6:77:d2:33:d3:
                    5f:fa:81:bc:68:11:6d:bb:1c:98:61:a9:b5:88:b9:
                    ce:f1:e1:3d:6f:b6:28:28:56:2a:24:c0:a8:b8:c1:
                    82:ab:3d:a5:a3:87:4a:2c:06:d8:77:e3:82:2b:fe:
                    76:68:ea:bf:dd:23:ab:e5:38:b4:ea:b4:75:e6:22:
                    45:22:38:e5:3d:47:b8:7c:c4:8b:ff:e0:da:24:12:
                    fb:71:0f:84:4d:3b:1d:c1:fb:dc:81:fa:45:04:71:
                    a8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BE:26:C1:F3:3E:5A:1B:D2:CE:6D:8C:9F:2D:61:42:0A:90:AF:82
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:cc:e7:85:e5:52:a6:7e:ed:90:a3:59:9c:1c:50:24:d9:
         8b:b5:5c:2e:0c:44:47:50:e6:f6:e3:0c:3d:03:78:9f:6b:5b:
         30:85:ff:b6:55:0b:9f:91:da:cc:ca:e4:96:a8:c5:c9:80:5e:
         18:2e:10:a5:39:88:66:35:55:8b:11:36:b4:0a:34:56:ff:26:
         66:b0:75:0a:e8:b0:9e:9d:2f:03:a4:d9:84:91:c3:50:3d:50:
         87:cf:21:11:25:1b:f1:a0:34:a7:05:ea:d8:45:08:75:4c:88:
         50:b7:d5:06:28:5c:d8:49:2d:bc:16:83:b7:5e:49:29:56:08:
         9f:37:e0:75:63:48:a0:22:20:1a:d9:62:08:7d:cf:4d:57:57:
         2c:57:99:16:39:81:50:ed:d1:d8:9a:2f:73:c3:8e:d4:16:22:
         11:97:6d:a3:1b:39:0a:49:f9:c6:d8:8e:37:19:8f:cb:c6:b1:
         2e:1b:74:84:72:2d:58:93:21:d6:8f:ba:c6:79:a7:7c:29:70:
         82:19:70:0e:58:b8:1a:19:fa:e4:8c:d3:a2:af:3c:e2:c3:76:
         de:cf:32:d2:fe:54:73:60:c7:d2:2d:88:86:87:b8:a8:ac:2e:
         19:2b:1d:49:c2:30:93:f3:53:02:72:10:8c:f2:9e:8d:4d:7d:
         03:38:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:10 2025 by rpki-client