Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
File:                     J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft (raw, json)
Hash identifier:          xhU+55zNjtrGQgSzroiUV4U81P8zx3XKIdnZ7cbjsGg=
Subject key identifier:   1F:D5:4E:D2:0C:5F:F1:4F:E7:3E:B2:16:3A:58:3B:B6:F3:6F:2C:CF
Authority key identifier: 27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB
Certificate issuer:       /CN=27d7d0d37bf0494589472189e03c193057e373ab
Certificate serial:       01989411E09DC8CEC4D05D3DCBB3CB2B78C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
Manifest number:          08DD
Signing time:             Sun 10 Aug 2025 13:00:56 +0000
Manifest this update:     Sun 10 Aug 2025 13:00:56 +0000
Manifest next update:     Mon 11 Aug 2025 13:00:56 +0000
Files and hashes:         1: APV-yd4iM5ft2_CZQSdpqn3Znl0.roa (hash: zO2jXcNxwkx67uSbTL8ewK9Q+yKE4kHcIhGP4291jJw=)
                          2: J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl (hash: PA8Ei/7llljRynYxpYJGCoGI8cxDy6SuEosE+oZWWNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:11:e0:9d:c8:ce:c4:d0:5d:3d:cb:b3:cb:2b:78:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d7d0d37bf0494589472189e03c193057e373ab
        Validity
            Not Before: Aug 10 13:00:56 2025 GMT
            Not After : Aug 11 13:00:56 2025 GMT
        Subject: CN=1fd54ed20c5ff14fe73eb2163a583bb6f36f2ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:74:8d:9e:b2:b9:bd:5d:74:74:c4:73:e4:
                    b9:e0:f3:da:18:99:ad:27:5b:a4:00:05:14:fb:43:
                    a8:37:81:bf:28:a4:aa:61:88:02:1d:bd:8a:1e:66:
                    46:e9:56:0e:a3:73:a2:e9:99:cb:65:2b:31:04:41:
                    52:a0:8a:6e:1f:db:82:d4:7e:12:df:88:85:6b:ab:
                    eb:84:4e:31:b4:47:5e:ea:9b:6e:17:e4:ac:05:37:
                    94:cf:e7:82:57:dc:35:66:53:64:77:6a:d8:16:bd:
                    e1:6c:bb:1e:b0:58:2a:15:06:0a:4c:96:1e:da:b2:
                    ba:51:d2:56:7b:10:bc:2a:8f:11:58:4f:92:ef:8e:
                    97:cd:77:d1:f2:3c:87:d3:cf:0c:68:be:e9:23:7b:
                    9c:da:a2:ed:f2:01:d3:d9:10:fd:c5:bb:13:47:6b:
                    40:b2:4d:2e:54:82:a9:68:76:3f:54:fc:10:86:d4:
                    02:5e:2b:8e:d9:b4:8f:c6:71:fb:9e:6c:02:d1:15:
                    a8:70:dd:e2:91:25:24:db:1c:6c:67:f0:bb:1b:a2:
                    93:09:f7:d0:c1:c1:0a:2e:d2:17:d0:96:aa:ce:e5:
                    d7:b4:a0:40:72:3f:74:a0:c0:31:e0:35:7c:d5:1c:
                    56:3c:48:d8:38:66:83:c9:41:90:3d:b2:bb:d8:b4:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D5:4E:D2:0C:5F:F1:4F:E7:3E:B2:16:3A:58:3B:B6:F3:6F:2C:CF
            X509v3 Authority Key Identifier:
                keyid:27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:84:1e:69:de:ac:d1:d7:2b:55:b6:18:aa:7c:97:47:b1:8a:
         86:a5:37:ed:02:74:f5:10:7f:0e:72:07:af:c4:89:f7:b5:12:
         43:1b:b7:b0:4d:a5:51:68:15:c2:0c:cf:43:42:73:e5:92:3f:
         31:c2:f1:c9:18:b4:82:44:17:ea:61:8c:a4:8e:cd:e1:10:79:
         2c:4b:c2:91:e6:d8:7d:75:83:0c:ea:46:03:b1:8b:c4:70:6f:
         77:8e:8d:ba:3a:d0:a1:3e:a3:9f:f7:a1:2b:aa:b1:0e:38:ba:
         5b:3b:b9:da:ba:84:0c:ec:f2:d1:3d:f9:95:99:3c:17:b9:9c:
         fd:e2:d9:d5:07:fe:f0:54:5e:b9:5b:52:2a:01:f9:40:0c:07:
         0f:2f:37:ca:0a:4f:94:1e:b0:19:e4:fc:cc:a0:6a:29:be:76:
         f9:0b:23:71:a6:2a:49:ab:6c:30:a2:3a:42:10:87:13:94:b8:
         e7:fb:54:e5:e7:4e:38:14:4a:89:aa:65:b8:9f:2e:a3:de:48:
         6e:ae:7a:37:48:c0:15:2a:ae:ae:74:0a:9d:d2:ef:4b:62:49:
         38:f9:80:14:50:71:84:34:09:df:2e:cd:8f:e3:84:c6:57:a5:
         e6:e7:71:c8:ff:3c:e1:55:a8:dc:9d:e8:d8:14:a4:18:90:ad:
         4e:4c:60:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:52 2025 by rpki-client