Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
File:                     Jp9PcUO0BngFy6mkD2OXMu59QuU.mft (raw, json)
Hash identifier:          +lCNDiorVyaAi9tzk2YarOXasqoUNOO3eIKeLocqw+s=
Subject key identifier:   3C:6C:94:11:87:CF:28:2B:D5:54:2F:6C:9A:6D:44:58:6A:3C:46:DF
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Certificate issuer:       /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial:       019892C84EB1DB66E863DFF8A168FF275D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
Manifest number:          1628
Signing time:             Sun 10 Aug 2025 07:00:57 +0000
Manifest this update:     Sun 10 Aug 2025 07:00:57 +0000
Manifest next update:     Mon 11 Aug 2025 07:00:57 +0000
Files and hashes:         1: 1-bEXFjd2XHBdukFCLLuD6UL4BqE.roa (hash: 1p5prwmTs6v5eahIbOF3LewhliAFt44o+dPua2cwXss=)
                          2: Jp9PcUO0BngFy6mkD2OXMu59QuU.crl (hash: idOZFfG0471nHoRGdS5UTQvq8E59xM2n3LbHI+K08OA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c8:4e:b1:db:66:e8:63:df:f8:a1:68:ff:27:5d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
        Validity
            Not Before: Aug 10 07:00:57 2025 GMT
            Not After : Aug 11 07:00:57 2025 GMT
        Subject: CN=3c6c941187cf282bd5542f6c9a6d44586a3c46df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:92:02:44:61:ad:87:4c:65:99:f1:18:c3:
                    f4:8f:36:eb:ce:5c:b6:04:e9:3f:15:0d:96:15:a5:
                    83:df:59:d3:e6:63:c1:a3:14:4b:7b:3a:79:c9:a2:
                    34:e1:ba:f9:9a:5d:0a:49:eb:bb:2f:96:f6:a8:be:
                    94:0c:8c:dd:fd:14:e0:78:ab:29:79:dd:f8:a5:60:
                    14:07:8e:ab:98:5f:ce:9d:0f:15:90:ab:b8:ad:30:
                    23:79:c0:5d:f2:46:a8:91:14:3a:e0:40:58:47:04:
                    f4:e5:c6:6b:6e:e1:7e:88:f4:6e:ff:42:e3:60:d1:
                    ea:9f:c2:e6:45:c9:9a:b0:0c:59:a2:45:d1:9d:7c:
                    21:5d:07:6d:da:0a:f9:6c:2b:4a:64:82:80:27:32:
                    81:fb:1b:b0:68:67:bf:98:e0:0e:82:2f:1d:6a:10:
                    a8:91:94:c4:8c:c4:03:5b:75:99:c5:a5:9d:46:f6:
                    34:e9:07:62:97:33:8e:8a:8a:cc:1f:c2:5e:8e:c1:
                    c8:02:51:b7:b0:77:e5:f4:33:9d:b9:fe:13:04:ac:
                    57:5d:04:6b:73:6c:6c:2a:80:18:81:01:0f:77:8a:
                    80:0a:2d:b0:f1:2a:73:d8:67:31:01:cd:9c:65:54:
                    d7:ea:d8:1d:53:e3:a4:52:d9:73:fe:71:54:23:1d:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6C:94:11:87:CF:28:2B:D5:54:2F:6C:9A:6D:44:58:6A:3C:46:DF
            X509v3 Authority Key Identifier:
                keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:0b:77:55:97:12:2c:37:27:92:24:ab:5d:f3:19:13:93:
         00:73:7d:7d:2e:3f:74:66:56:cf:31:a3:e0:46:74:47:34:65:
         f9:c5:ff:a2:50:0d:b5:39:dc:a4:40:cd:d6:dc:81:50:aa:67:
         33:f8:f3:cb:20:74:54:9d:86:9d:28:99:ce:d2:f1:d7:03:3f:
         2b:4f:1d:4b:0b:31:74:c1:8e:88:67:02:11:5f:30:37:83:e5:
         e7:00:6b:c6:28:26:37:c8:05:1a:cb:df:b0:c5:b0:ce:31:ef:
         56:6e:ec:ef:18:a2:10:6c:49:d5:e4:f7:b5:ef:3a:aa:4e:c8:
         59:be:fe:e0:43:04:23:c9:0a:6e:ad:a3:b2:6e:f6:50:33:b4:
         fe:34:a1:0b:89:db:29:3f:53:a2:2d:93:43:cb:10:13:53:a0:
         14:74:67:f1:46:84:f2:47:31:7b:e7:77:38:49:c7:30:32:e4:
         a8:e3:af:91:65:5d:0d:e3:e9:f7:c0:e6:e6:72:a5:10:7a:00:
         a9:58:d9:49:f4:4a:4b:45:32:c0:53:a0:9d:ab:0c:86:e7:bf:
         53:65:88:74:64:95:a8:87:a7:23:da:b4:b8:0d:92:16:d1:6d:
         ad:3e:d6:0b:bc:43:98:d0:ee:80:a2:a5:9d:dc:64:f4:f9:b2:
         9c:05:41:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:40 2025 by rpki-client