Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File:                     J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier:          jC0vnrWWDZYFt3TCct4A2cIbZmKxrqmp9tYfwQxOg9Y=
Subject key identifier:   5E:C9:39:C2:BA:25:2B:12:1A:EE:67:39:85:45:8C:2B:14:0C:7E:E0
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer:       /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial:       01988F90CE164454560A9D7AAEA9B6AD7D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number:          0C44
Signing time:             Sat 09 Aug 2025 16:01:28 +0000
Manifest this update:     Sat 09 Aug 2025 16:01:28 +0000
Manifest next update:     Sun 10 Aug 2025 16:01:28 +0000
Files and hashes:         1: CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa (hash: vD/F/679cA73k7OkjDpOttD102xB/cx2AgMSLChmbBA=)
                          2: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: oidxQJ1cDZfQTfqylpBJ8pU9XOHde+N5lXe/6TVLklQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:90:ce:16:44:54:56:0a:9d:7a:ae:a9:b6:ad:7d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
        Validity
            Not Before: Aug  9 16:01:28 2025 GMT
            Not After : Aug 10 16:01:28 2025 GMT
        Subject: CN=5ec939c2ba252b121aee673985458c2b140c7ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:22:ff:7e:c9:22:fe:c1:f4:f0:80:41:ac:
                    ac:05:05:5f:37:48:b0:5e:49:ba:52:a9:d2:ae:0a:
                    e8:2e:24:95:59:fd:00:6b:6b:fb:2c:42:23:57:a3:
                    11:f9:8b:4c:bf:af:70:7b:20:5f:37:4d:d2:6b:27:
                    8d:05:6c:a6:65:9e:00:d7:5d:4d:3d:e7:e1:3c:3c:
                    5b:9d:c5:06:c4:15:a0:b9:b9:90:0c:45:dd:c7:4f:
                    39:12:1e:67:82:e5:0b:de:56:26:02:2e:14:43:5b:
                    5a:ff:54:db:b6:83:d4:29:cf:50:8e:91:4a:3e:50:
                    de:b6:ed:86:72:ac:7b:10:7d:13:bb:87:2b:d1:6d:
                    8d:bf:cd:e7:b6:c5:69:03:1a:04:8b:52:4d:8c:5f:
                    c1:92:f8:2b:31:94:9a:f3:bd:cd:a4:e3:85:6b:8e:
                    8e:cb:04:e4:bb:88:bf:c4:f4:d2:61:b4:c3:16:39:
                    4b:10:00:70:3a:60:94:d9:9c:e1:a4:3c:32:07:44:
                    2f:a9:9b:60:bf:77:a2:2f:10:29:4a:e1:1a:ad:9e:
                    93:d3:a5:2c:5d:bc:8a:07:ed:05:eb:14:3d:3f:11:
                    fd:83:4d:d5:6f:c9:ef:43:7f:4b:fc:e2:b8:72:fd:
                    72:3d:bd:82:17:79:aa:3d:e6:fd:d3:bd:10:cf:b4:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C9:39:C2:BA:25:2B:12:1A:EE:67:39:85:45:8C:2B:14:0C:7E:E0
            X509v3 Authority Key Identifier:
                keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ca:90:73:a5:0d:38:a0:28:7d:fe:2a:e1:4c:7b:c5:dd:2e:
         ec:9c:9a:ad:c1:63:6b:e1:2d:98:53:28:43:18:e5:b4:56:65:
         db:e4:2f:d8:77:6d:b0:2b:ef:fa:d7:ae:94:6c:9a:8a:c2:b7:
         dc:14:78:35:34:4d:2c:08:37:e6:51:10:dc:ff:6d:dd:64:9e:
         d7:bc:e0:26:86:d3:67:a5:0c:2b:3c:d6:15:d0:29:78:2c:2e:
         7e:d7:23:12:3a:e9:c3:38:49:c7:91:49:99:c6:e2:cc:db:a8:
         c2:e2:e1:a6:9a:7e:7a:fe:d7:fd:0d:6f:fd:c6:ea:45:1d:f9:
         d7:3e:b0:c4:b9:0a:52:45:a5:b0:cd:87:43:81:8c:5f:52:34:
         08:34:1d:88:b7:19:cc:d8:32:60:76:9a:ee:39:6b:2c:87:b2:
         92:3f:9e:9a:d4:b5:6e:7a:a3:fb:e2:15:2e:93:ec:79:46:a1:
         a6:e2:76:73:b1:db:fc:de:87:5b:f5:87:d6:19:45:c6:1d:7b:
         07:c3:4e:1d:cb:b1:bf:2e:96:e0:06:16:0b:68:26:6f:8b:9f:
         37:7c:b9:bb:f3:51:23:ed:0d:09:2f:42:d3:8c:80:dc:8d:be:
         81:3c:24:df:06:4e:90:de:3f:11:b7:21:2e:4a:9e:7f:9e:ca:
         df:16:b0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:49:20 2025 by rpki-client