Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File:                     JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier:          crEsluOVqRu6WPf/9By/lbH75kwzy+CqtNOPWYLw5Hg=
Subject key identifier:   EB:C9:34:2B:A0:B1:8C:56:E5:C0:35:06:96:2B:A8:28:D9:51:C1:B9
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer:       /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial:       019873746DD4E87081B9EA30B40769F740F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number:          9F
Signing time:             Mon 04 Aug 2025 05:01:06 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:06 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:06 +0000
Files and hashes:         1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: ZZ6IOg9Oj5OHn8EgoUu+qVaI43iXz8mUbOiNR7R+o6A=)
                          2: tSgs3XUIsHh7rxyC6KI4dfFcjtI.roa (hash: aP/8w3eyX9ywh3RSZ1FyfaCe/EGfUTND1DeYuxP49kA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:6d:d4:e8:70:81:b9:ea:30:b4:07:69:f7:40:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
        Validity
            Not Before: Aug  4 05:01:06 2025 GMT
            Not After : Aug  5 05:01:06 2025 GMT
        Subject: CN=ebc9342ba0b18c56e5c03506962ba828d951c1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:64:32:0d:7e:2f:60:2f:72:34:b8:aa:7c:
                    25:54:56:66:ac:40:cc:4f:29:df:8e:5d:e5:4d:44:
                    f5:08:f7:04:0f:08:00:9c:7e:90:e9:37:86:36:e4:
                    f6:a4:c4:45:3c:a4:37:63:dd:c5:9b:50:92:af:c8:
                    a1:24:b6:57:f9:fa:8f:88:a3:1e:b6:7f:69:c0:74:
                    d7:34:e3:8b:1d:be:7e:a2:b9:2d:c3:a0:c9:57:3c:
                    08:c6:77:e6:a8:17:55:32:83:a2:9e:0e:7e:fb:13:
                    4e:53:10:90:6d:74:68:6c:84:26:04:eb:76:d9:c9:
                    9a:58:db:8f:01:df:95:d8:ce:d4:cc:8b:f3:66:b6:
                    97:72:a5:93:5f:75:65:0a:fe:1a:e7:fc:c9:17:1a:
                    ff:1b:21:1f:6f:7e:30:20:4d:1a:82:4d:d2:d2:7c:
                    90:c5:4f:48:14:07:60:43:3b:1d:6c:79:6f:f5:af:
                    69:19:88:26:ac:0c:a4:74:9b:e5:3d:2d:44:89:1e:
                    56:39:1b:0c:14:45:c7:f2:aa:05:10:a1:88:78:0f:
                    b7:aa:57:d9:12:a0:02:b8:ab:3d:7e:b1:5a:72:f5:
                    be:ba:2f:a5:b3:b8:f7:e1:6e:ca:c3:05:0a:f4:61:
                    d8:62:10:ef:16:96:3d:4c:4e:c3:3d:70:0f:76:cb:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C9:34:2B:A0:B1:8C:56:E5:C0:35:06:96:2B:A8:28:D9:51:C1:B9
            X509v3 Authority Key Identifier:
                keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:62:51:3a:4a:b1:08:53:30:a8:49:2d:78:02:9d:9d:44:e0:
         02:49:94:1d:b3:b8:24:1d:5c:93:27:0b:71:62:84:ab:0f:b4:
         79:39:64:cf:b4:bd:a6:61:43:75:54:e7:54:8b:39:15:74:ad:
         1d:21:2c:6c:b4:37:10:9b:1f:38:41:8e:69:e5:5f:09:73:39:
         19:68:1f:1b:b3:6a:c4:be:f6:df:56:bb:a1:da:59:ee:b7:4f:
         e1:34:3c:76:47:19:ff:33:22:41:e6:9e:9d:67:7f:f9:b9:13:
         79:1e:60:e1:70:e4:ba:5f:cd:c3:de:39:7b:6c:29:ac:5d:63:
         77:6f:c0:36:04:bb:05:ff:ab:e5:83:00:7b:fe:22:3e:e3:0a:
         e9:79:83:ac:3b:6f:86:bb:3e:a2:3c:1e:f1:e1:55:27:93:bc:
         fc:da:40:81:c3:a9:74:d2:30:41:a3:f8:33:ab:79:10:ce:53:
         21:fa:3b:76:3c:87:60:55:ae:73:eb:63:cf:20:9d:b5:5d:52:
         39:4a:bc:3b:4f:19:f9:d4:ad:dd:59:c5:a3:fc:92:23:1a:0f:
         86:a9:bd:ac:d5:50:1e:f3:89:d3:dc:00:ec:bc:56:d6:f4:bd:
         3a:e4:d4:4d:d5:c6:e7:b1:d5:ef:97:e9:8f:c3:89:ed:04:51:
         85:f3:d1:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdG3U6HCBueowtAdp90DzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MDY5ZjE4ODNkY2NjOTNhNzg2OWM0MWVjM2U5NzJmZjVm
ZDRiMDEwHhcNMjUwODA0MDUwMTA2WhcNMjUwODA1MDUwMTA2WjAzMTEwLwYDVQQD
EyhlYmM5MzQyYmEwYjE4YzU2ZTVjMDM1MDY5NjJiYTgyOGQ5NTFjMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAospkMg1+L2AvcjS4qnwlVFZmrEDM
Tynfjl3lTUT1CPcEDwgAnH6Q6TeGNuT2pMRFPKQ3Y93Fm1CSr8ihJLZX+fqPiKMe
tn9pwHTXNOOLHb5+orktw6DJVzwIxnfmqBdVMoOing5++xNOUxCQbXRobIQmBOt2
2cmaWNuPAd+V2M7UzIvzZraXcqWTX3VlCv4a5/zJFxr/GyEfb34wIE0agk3S0nyQ
xU9IFAdgQzsdbHlv9a9pGYgmrAykdJvlPS1EiR5WORsMFEXH8qoFEKGIeA+3qlfZ
EqACuKs9frFacvW+ui+ls7j34W7KwwUK9GHYYhDvFpY9TE7DPXAPdstDkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvJNCugsYxW5cA1BpYrqCjZUcG5MB8GA1UdIwQY
MBaAFCcGnxiD3MyTp4acQew+ly/1/UsBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgt
MDQ2MmI2NDg0ZDYwLzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80MmUwNzktNmY3Yy00NjhkLWIwMjgtMDQ2MmI2NDg0ZDYw
LzEvSndhZkdJUGN6Sk9uaHB4QjdENlhMX1g5U3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWJROkqx
CFMwqEkteAKdnUTgAkmUHbO4JB1ckycLcWKEqw+0eTlkz7S9pmFDdVTnVIs5FXSt
HSEsbLQ3EJsfOEGOaeVfCXM5GWgfG7NqxL7231a7odpZ7rdP4TQ8dkcZ/zMiQeae
nWd/+bkTeR5g4XDkul/Nw945e2wprF1jd2/ANgS7Bf+r5YMAe/4iPuMK6XmDrDtv
hrs+ojwe8eFVJ5O8/NpAgcOpdNIwQaP4M6t5EM5TIfo7djyHYFWuc+tjzyCdtV1S
OUq8O08Z+dSt3VnFo/ySIxoPhqm9rNVQHvOJ09wA7LxW1vS9OuTUTdXG57HV75fp
j8OJ7QRRhfPRBw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:20 2025 by rpki-client