Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
File:                     J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft (raw, json)
Hash identifier:          q5l6i55iqdoVsSpyujiTDWlW8C9jHsDD3c7QgjyQgG0=
Subject key identifier:   B9:61:ED:35:7B:26:98:8F:50:02:D0:54:98:3E:61:DB:97:CC:F0:CE
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Certificate issuer:       /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial:       0198756282A054F2447F776A7D91AF600ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
Manifest number:          0D03
Signing time:             Mon 04 Aug 2025 14:00:46 +0000
Manifest this update:     Mon 04 Aug 2025 14:00:46 +0000
Manifest next update:     Tue 05 Aug 2025 14:00:46 +0000
Files and hashes:         1: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl (hash: oThLlS6zBIGQUZCi1BDlIx+PFV3WKqe+OxCw3VxTyf8=)
                          2: kH84XjWCF3YsEupBc9_NB-UJ1LE.roa (hash: vFi6ltA+YLY/2jEI7t4T0lx3r1xW2YaGJ9YVTzgeHZA=)
                          3: m8b-nSkJNQaQc9Ko3VmUYZ_aR5k.roa (hash: x/jmnJNzCw/+lpmfHMz6HsStw+fWqWLA6QrXjLJpCDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:82:a0:54:f2:44:7f:77:6a:7d:91:af:60:0e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
        Validity
            Not Before: Aug  4 14:00:46 2025 GMT
            Not After : Aug  5 14:00:46 2025 GMT
        Subject: CN=b961ed357b26988f5002d054983e61db97ccf0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c8:60:2d:82:1d:31:f3:4c:8d:d5:a3:2b:1a:
                    7b:a9:e6:e1:d5:82:be:34:bc:07:54:ba:50:54:c9:
                    39:e9:04:3c:72:be:16:a0:af:d1:32:5b:85:82:f0:
                    1e:4f:ff:22:04:20:a1:a4:91:7b:f3:6e:ae:3a:d3:
                    6e:45:4e:08:b3:b6:5e:14:ef:60:2e:e2:99:90:ab:
                    ad:32:16:5f:74:a9:da:0d:5c:1d:24:f3:66:e4:48:
                    6b:0a:93:31:eb:dc:d9:f0:59:26:b6:92:90:60:12:
                    bd:79:9a:fc:c3:47:2b:4c:b6:4f:10:b5:03:1d:0c:
                    15:51:90:7d:60:bc:f8:95:66:6c:64:38:d3:89:ee:
                    b0:66:de:c6:b9:53:5a:44:3c:e6:82:bb:d4:4a:44:
                    f7:7d:28:54:67:c6:f2:8c:30:28:af:02:2c:3a:a4:
                    18:17:a5:60:04:aa:69:88:66:4c:00:8b:0e:ce:26:
                    61:d1:41:5b:27:a3:74:66:90:7f:8c:7b:6e:32:1c:
                    a2:44:4a:0a:7c:c6:27:51:53:1b:95:ff:88:ab:e6:
                    8b:f8:b8:b7:b8:e1:22:11:62:14:2e:c0:ac:2d:04:
                    c5:15:ec:2f:e8:b8:87:b5:82:0f:82:d1:eb:07:72:
                    b0:07:3b:11:2c:ab:62:3b:a0:5d:27:05:98:a4:bf:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:61:ED:35:7B:26:98:8F:50:02:D0:54:98:3E:61:DB:97:CC:F0:CE
            X509v3 Authority Key Identifier:
                keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:8a:51:d1:e6:be:d1:7f:e9:76:b7:21:39:5e:17:e4:c8:
         b3:f1:79:5d:cf:b5:45:f6:78:7c:47:ec:75:19:9e:79:83:ca:
         ac:3f:ff:12:3a:96:08:55:14:ba:e4:9c:91:43:80:f5:0a:0c:
         f1:dd:cb:ae:64:3b:c4:72:ff:83:0e:90:4d:59:98:76:de:f2:
         85:3e:a8:96:5d:dc:b8:f5:83:79:05:c8:09:1f:f1:c8:1c:ef:
         21:30:19:65:a4:ed:b9:64:45:1f:d7:62:91:39:fd:60:52:e2:
         68:86:e0:9e:24:34:2c:13:58:f6:bc:5c:98:ca:df:28:3e:eb:
         44:28:d6:a0:b8:fe:82:eb:16:ac:69:89:74:b2:de:8c:50:c9:
         bb:aa:be:32:fa:d0:36:7b:41:11:03:4c:13:53:62:4f:a4:d5:
         3b:22:65:d9:ee:9c:ef:0f:7b:87:ac:0c:df:1b:bf:40:36:ce:
         5a:69:84:69:17:ca:42:cb:9c:29:78:67:8b:c5:89:c5:53:41:
         69:df:ef:f7:ce:40:0c:2d:8b:69:41:e4:46:a3:e1:af:92:c2:
         33:de:be:a7:7f:8e:49:80:ee:99:56:63:9b:bd:63:bc:ef:dd:
         30:50:16:81:12:da:73:c1:34:42:e9:51:39:5a:5e:59:d2:55:
         ac:69:e7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:41 2025 by rpki-client