Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
File:                     J0hJVnNlSeqzsG4jqricpZk6gHY.mft (raw, json)
Hash identifier:          lnPw2tTL1Mz9TXU5FugQr6+/knmqp+6CFpY5KWH9n8c=
Subject key identifier:   43:C4:3B:D2:72:54:F2:4A:2B:C9:21:00:FF:D3:C7:FD:35:A3:C7:26
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       01988B7CE68016DC8D20E0811771E107E0D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
Manifest number:          1228
Signing time:             Fri 08 Aug 2025 21:01:15 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:15 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:15 +0000
Files and hashes:         1: J0hJVnNlSeqzsG4jqricpZk6gHY.crl (hash: 6NfVLb+QgWLZuaPylCgjIiWKhWU7ys5RBG7Rwm8AJRc=)
                          2: JSfSNBZp2sArMnNqgy7JPjlV3w0.roa (hash: AAxuDoIwBhXDcehYAfqhoDL4a0JHM/VmkCzff4ZSoTk=)
                          3: aHgUlmeQvXSLOAXmjY6OG9x7CHw.roa (hash: EkeJb1vk/DYNvMk3tNYmPq0HrdN72YN06ty6+3e7rPU=)
                          4: hOUd1wZ_zMaTKuCxsCn2r2bH2BU.roa (hash: bxwt1u/r3VzOjW3gEkeatdflQyeXrR7mqzyeYNfcLHY=)
                          5: tW9YcXZ53Rr1e1oEOmqCt5AR9Sc.roa (hash: O3S/RX4GnOSFqdUE+99ZJDVtp7vahAb9JLGw0JZrYQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:e6:80:16:dc:8d:20:e0:81:17:71:e1:07:e0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Aug  8 21:01:15 2025 GMT
            Not After : Aug  9 21:01:15 2025 GMT
        Subject: CN=43c43bd27254f24a2bc92100ffd3c7fd35a3c726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:85:c2:b8:ba:fb:d3:92:35:fa:2c:53:3f:f1:
                    1d:70:59:b9:4e:54:fb:53:b9:29:46:e7:00:eb:ea:
                    88:59:0f:1a:bf:67:8f:48:04:40:6c:88:48:59:18:
                    db:5f:22:c2:7c:9c:5b:29:0e:99:f2:c9:f5:38:2d:
                    b5:f8:58:5a:6c:18:6d:b4:6b:fb:54:18:93:32:ba:
                    b2:86:50:de:ce:49:41:dd:86:68:a4:34:e3:50:b9:
                    0f:45:4a:de:6b:f8:bd:68:7f:31:ff:7c:46:17:a6:
                    79:72:86:14:7c:22:c0:3b:e1:c9:d7:2d:5c:f5:bd:
                    36:4b:da:6c:29:07:1a:4e:d2:1b:83:cc:0b:06:d7:
                    cc:c4:05:71:43:e0:f6:0a:f6:f8:10:11:7d:62:fb:
                    b2:5a:96:83:5e:4b:7b:79:8a:37:f8:10:b6:ef:57:
                    6c:23:df:45:dd:db:e2:50:6a:20:b0:ea:96:5a:3e:
                    56:17:e6:4f:96:eb:1b:34:a8:80:21:7a:6f:e3:01:
                    7c:92:ba:62:12:4f:49:3e:62:89:c5:07:18:03:92:
                    ad:48:a3:41:e9:00:47:6b:a6:9a:6d:a2:de:f2:45:
                    ad:82:94:8e:a2:4c:d9:19:77:bc:8d:ee:0c:e2:c9:
                    09:b3:3a:e1:af:a4:ad:fb:0e:4a:c1:5c:95:c0:8b:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C4:3B:D2:72:54:F2:4A:2B:C9:21:00:FF:D3:C7:FD:35:A3:C7:26
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b7:07:24:14:8e:a9:aa:dd:3e:93:ec:62:84:f1:81:c1:a2:
         57:a9:19:de:0d:65:f4:d8:05:10:cf:12:50:c3:1c:04:85:17:
         48:6c:f1:37:aa:86:47:09:45:39:05:dc:8c:b7:f2:b5:96:ce:
         54:82:68:7e:4e:5d:8e:6a:58:70:e4:35:0d:9b:d1:43:8a:d9:
         c4:7e:9e:26:be:9c:8d:b4:09:01:d9:ee:cf:21:e2:6b:89:44:
         e9:a8:81:cd:5f:12:19:76:8d:dc:ce:2b:9c:08:80:98:58:ba:
         62:6e:bf:99:5f:bf:bf:b7:93:c1:bb:e4:1b:4b:9a:c7:7e:9e:
         75:f3:7b:66:70:e3:60:e5:3a:06:34:01:fe:a6:d2:87:74:bd:
         f7:f4:e2:23:6a:e6:23:c8:97:95:45:81:42:b4:63:98:c6:bf:
         ed:90:dc:5b:c0:78:54:d0:02:f3:f1:03:87:30:51:d8:6c:1c:
         5c:07:0e:fd:25:e2:c4:90:e7:16:c3:9c:40:0d:e3:02:82:6f:
         1b:11:2d:f1:50:90:8e:3c:f1:55:26:0b:5d:c8:f7:95:d2:a5:
         3c:80:29:10:a9:5a:ea:86:3d:6e:fa:07:1b:43:01:60:5f:77:
         c1:e4:71:3c:05:1d:7e:b2:c6:b2:6c:a3:13:4a:92:7d:50:01:
         4c:d0:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:35 2025 by rpki-client