Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File:                     jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier:          9+X6ajuAatttaY1BuOJ9Josr5rPcZiEq3KgXNQnom8Q=
Subject key identifier:   4B:38:AB:FA:FC:97:82:6A:45:E3:8E:0C:57:C7:05:DA:73:A0:93:69
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer:       /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial:       019889C5166D98471337527B2CE2A34727AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number:          1627
Signing time:             Fri 08 Aug 2025 13:00:51 +0000
Manifest this update:     Fri 08 Aug 2025 13:00:51 +0000
Manifest next update:     Sat 09 Aug 2025 13:00:51 +0000
Files and hashes:         1: T1NphBpxfH2bIKCDktHdRZTHIcY.roa (hash: jIDQlaKJTEZfvbg4vcsOnliaPcSJWC3wo/0K3CkIb7o=)
                          2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: 0Hc58y+fjkTJY5jYyf45dOB26Uc9TCNuClwokKYRj5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:c5:16:6d:98:47:13:37:52:7b:2c:e2:a3:47:27:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
        Validity
            Not Before: Aug  8 13:00:51 2025 GMT
            Not After : Aug  9 13:00:51 2025 GMT
        Subject: CN=4b38abfafc97826a45e38e0c57c705da73a09369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:ca:02:d6:82:69:33:fe:50:60:02:ed:b1:
                    22:ee:d5:5e:d3:17:0f:d4:f6:a2:b1:92:28:77:94:
                    ab:29:e6:98:ce:62:ff:e3:ae:ec:1f:17:70:bc:b0:
                    da:7a:e8:48:5e:67:2e:b9:01:57:af:45:26:64:7f:
                    80:87:b0:0c:bc:90:c6:e3:56:7e:b9:3b:19:70:21:
                    61:67:84:97:5b:b4:a4:9a:f1:b5:7c:f6:ff:bd:7d:
                    cf:37:44:8d:54:13:13:01:7b:37:77:bf:5c:82:18:
                    16:a4:78:1a:f5:89:cb:07:82:45:aa:50:23:7c:5c:
                    4f:f4:73:86:ef:23:c0:05:0d:67:33:bf:22:03:18:
                    1a:d4:dd:97:43:c5:17:a7:ed:d9:6e:97:10:51:be:
                    4a:71:fb:37:98:27:c1:f3:c0:7b:3d:ad:21:f3:c0:
                    06:ac:a6:10:c7:e9:f2:a7:78:24:4c:de:d2:d2:9e:
                    90:40:96:14:20:3c:41:81:a9:c1:93:34:c7:96:53:
                    7f:90:22:64:81:dd:b7:77:92:dc:9f:44:aa:11:82:
                    b4:40:e4:f2:e2:3d:c0:45:89:fe:92:88:d7:2b:8a:
                    a7:27:c0:b6:2b:7a:40:da:6e:e7:b5:de:9f:9f:44:
                    a6:f6:d6:b2:54:95:f2:2e:a7:2c:c2:0a:f6:ec:35:
                    87:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:38:AB:FA:FC:97:82:6A:45:E3:8E:0C:57:C7:05:DA:73:A0:93:69
            X509v3 Authority Key Identifier:
                keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e0:53:c3:44:bc:d5:60:9a:02:74:a1:8e:02:ab:09:ad:63:
         f5:31:03:d9:a1:95:5b:0a:50:be:d0:93:ae:da:a7:25:e3:cc:
         af:86:f7:4b:40:53:14:a9:a9:22:28:fa:0c:87:a5:f4:8f:5e:
         a5:fa:61:64:43:5b:07:f1:6a:44:a4:a2:81:f0:8c:2d:55:e6:
         2a:01:18:a0:32:f5:bd:84:b2:27:b1:4f:01:57:73:34:7a:fd:
         b7:62:85:e0:9c:75:53:f5:a8:88:ef:b3:9a:da:de:46:44:ae:
         13:1c:a3:70:c1:40:48:a5:77:4e:06:a4:cf:fa:4f:7a:a0:e2:
         f1:ef:53:0b:0e:bc:d1:9a:b6:df:c2:2c:73:54:8f:45:58:53:
         b3:0c:1d:86:89:18:a5:63:a2:d2:22:d9:91:33:ef:49:f9:db:
         5d:e6:d6:cc:20:3f:5e:ee:5d:4a:7e:67:7b:d7:01:38:4e:19:
         e2:b7:77:55:ac:e3:1d:c7:60:cd:91:54:6d:7f:ac:30:c2:3e:
         74:7e:40:80:3e:42:29:2e:cc:1f:0b:05:7b:9d:90:39:92:1f:
         cf:8c:90:07:4e:a8:7e:95:b7:bd:9d:90:b4:b2:a1:85:fd:9b:
         b7:fa:06:16:3a:0a:93:21:08:0a:8e:06:67:d9:29:db:e6:11:
         92:da:49:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJxRZtmEcTN1J7LOKjRyesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjQ5YmFmMTdmMDZjMzY0YTAwZjhlNjRjODkxYzUzNzI5
ZjdhMmYwHhcNMjUwODA4MTMwMDUxWhcNMjUwODA5MTMwMDUxWjAzMTEwLwYDVQQD
Eyg0YjM4YWJmYWZjOTc4MjZhNDVlMzhlMGM1N2M3MDVkYTczYTA5MzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA137KAtaCaTP+UGAC7bEi7tVe0xcP
1PaisZIod5SrKeaYzmL/467sHxdwvLDaeuhIXmcuuQFXr0UmZH+Ah7AMvJDG41Z+
uTsZcCFhZ4SXW7SkmvG1fPb/vX3PN0SNVBMTAXs3d79cghgWpHga9YnLB4JFqlAj
fFxP9HOG7yPABQ1nM78iAxga1N2XQ8UXp+3ZbpcQUb5Kcfs3mCfB88B7Pa0h88AG
rKYQx+nyp3gkTN7S0p6QQJYUIDxBganBkzTHllN/kCJkgd23d5Lcn0SqEYK0QOTy
4j3ARYn+kojXK4qnJ8C2K3pA2m7ntd6fn0Sm9tayVJXyLqcswgr27DWH9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs4q/r8l4JqReOODFfHBdpzoJNpMB8GA1UdIwQY
MBaAFI20m68X8Gw2SgD45kyJHFNyn3ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQt
ODUxNzNlNTdlYjUyLzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQtODUxNzNlNTdlYjUy
LzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeBTw0S8
1WCaAnShjgKrCa1j9TED2aGVWwpQvtCTrtqnJePMr4b3S0BTFKmpIij6DIel9I9e
pfphZENbB/FqRKSigfCMLVXmKgEYoDL1vYSyJ7FPAVdzNHr9t2KF4Jx1U/WoiO+z
mtreRkSuExyjcMFASKV3Tgakz/pPeqDi8e9TCw680Zq238Isc1SPRVhTswwdhokY
pWOi0iLZkTPvSfnbXebWzCA/Xu5dSn5ne9cBOE4Z4rd3VazjHcdgzZFUbX+sMMI+
dH5AgD5CKS7MHwsFe52QOZIfz4yQB06ofpW3vZ2QtLKhhf2bt/oGFjoKkyEICo4G
Z9kp2+YRktpJ7Q==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:47:29 2025 by rpki-client