Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File:                     J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier:          oOcX2WcHVTj0KmGNs8I8ZhAnqPidS7PQ6k8S/kR6oK4=
Subject key identifier:   44:27:E0:87:B1:CB:4F:D4:49:78:78:96:6D:80:79:D9:DC:F3:70:EF
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer:       /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial:       01987450391FC6B760DFA274E057CE336D50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number:          0F8C
Signing time:             Mon 04 Aug 2025 09:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:11 +0000
Files and hashes:         1: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: 0Vh+2S+h2wY4sgxEIwu21CI1qBsPDQ02joqDcS1KjUg=)
                          2: vdjx6mVJjB2A5HRAp4zCXF1WOmI.roa (hash: nZy4/J4/xAAVv0Nm8r/1Dh/36Nz5IhwHl0WfPkQGlFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:39:1f:c6:b7:60:df:a2:74:e0:57:ce:33:6d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
        Validity
            Not Before: Aug  4 09:01:11 2025 GMT
            Not After : Aug  5 09:01:11 2025 GMT
        Subject: CN=4427e087b1cb4fd4497878966d8079d9dcf370ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:47:cc:81:5b:18:a4:dc:a1:d2:d6:49:59:f3:
                    c3:64:87:5d:3f:6a:17:3f:1a:ea:8c:7a:30:97:bf:
                    fd:ee:02:a9:e8:cc:b8:1a:8e:94:ca:b5:91:69:07:
                    21:a8:09:a3:3a:d6:3b:66:ca:b3:9f:42:f5:f1:03:
                    73:5c:34:80:e7:bb:8d:c7:55:cc:b2:3c:09:7a:75:
                    97:f6:77:79:b0:b2:a6:a5:94:4d:b4:80:3a:e0:17:
                    9b:29:37:45:47:4b:55:ce:5c:00:55:d4:bf:1d:e7:
                    52:b2:45:5d:e8:1b:e8:4d:88:63:4e:94:dc:f0:1e:
                    31:b8:8b:b6:ec:7b:6e:45:1c:42:50:5c:4c:98:e9:
                    de:a0:4f:9b:67:80:4a:4b:c4:69:00:e2:3d:51:68:
                    c0:09:6d:18:bc:ed:96:6d:db:33:e9:dd:d4:19:d4:
                    76:44:bf:21:05:12:05:d2:d9:cd:4c:12:6c:55:e1:
                    45:f6:c1:20:b2:e0:32:f4:15:ae:77:ed:5e:bd:24:
                    24:cb:db:4b:9c:c1:73:30:cb:82:b3:15:58:da:1d:
                    d0:94:e4:b1:af:5d:20:f4:c9:74:e2:1c:1f:39:b6:
                    2d:95:10:c5:ff:c7:6a:bd:0c:c4:42:fb:79:21:8e:
                    37:c2:b7:83:2c:30:af:19:f6:91:2e:40:90:b5:eb:
                    27:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:27:E0:87:B1:CB:4F:D4:49:78:78:96:6D:80:79:D9:DC:F3:70:EF
            X509v3 Authority Key Identifier:
                keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:6d:61:e1:49:b8:71:ee:22:3f:38:6a:7e:b9:45:43:94:28:
         91:df:3c:fd:cb:d3:ef:6c:40:bf:48:1f:ba:ac:e0:57:d2:c2:
         97:cb:d9:66:f7:5f:73:19:fc:7e:54:b9:5b:8c:63:49:1c:3b:
         65:bc:bd:2a:7a:78:64:e4:a4:6d:ed:d7:bd:75:5f:53:da:e6:
         28:aa:d4:65:c9:53:fe:8e:01:1c:9a:c4:87:16:0f:54:65:cf:
         90:ef:fc:9b:22:26:74:45:54:c3:ea:ac:29:91:8c:cf:b0:56:
         d5:40:04:b0:d4:b5:74:d5:35:e5:79:46:d0:ae:c6:a2:f3:aa:
         b7:be:11:11:ab:6d:e4:4c:60:2e:a9:36:cf:bc:00:3e:9a:3f:
         de:7f:d8:aa:b8:bf:8a:a2:5a:96:a7:f6:71:4a:50:b1:f3:ef:
         33:94:91:03:97:42:f6:f2:dc:3e:ed:c9:35:79:9d:e9:15:5f:
         f0:5a:81:b4:62:8d:d8:4d:54:25:5b:1a:fe:0a:f5:ef:02:9c:
         cb:7b:86:5c:d7:1c:a3:cb:e9:d2:ce:3f:b1:2f:6b:1c:e2:97:
         0f:b3:e8:36:4c:b6:2e:15:de:8b:de:5c:9e:36:70:e9:96:c4:
         18:f5:eb:da:02:da:28:40:9c:e4:09:69:80:94:9c:e1:51:9d:
         8d:b7:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:20 2025 by rpki-client