Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
File:                     J1qrffuxUqZGrfMnOzGqXd5kod8.mft (raw, json)
Hash identifier:          1DvD4lhpgQhDBJ5Wv0B9iDQLFtEOm74gzoraaZqEdEg=
Subject key identifier:   00:BE:4F:7E:54:C2:79:E4:1A:CD:BD:F0:A4:F3:42:A0:2B:7A:78:32
Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
Certificate issuer:       /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Certificate serial:       01988BB3B04053EC17884EFB6E4D016551A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
Manifest number:          0C52
Signing time:             Fri 08 Aug 2025 22:01:05 +0000
Manifest this update:     Fri 08 Aug 2025 22:01:05 +0000
Manifest next update:     Sat 09 Aug 2025 22:01:05 +0000
Files and hashes:         1: J1qrffuxUqZGrfMnOzGqXd5kod8.crl (hash: s41OoD70pqieOm28YNSNUMLPBuAX3NPUHHdTSaxipHs=)
                          2: _BsLA-Yq0byQhwlqjwrfokOt_ao.roa (hash: nUVtATfYPG2WeBzHlW5fiB+hmlpSz5V9uTVR1MUQR8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:b0:40:53:ec:17:88:4e:fb:6e:4d:01:65:51:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
        Validity
            Not Before: Aug  8 22:01:05 2025 GMT
            Not After : Aug  9 22:01:05 2025 GMT
        Subject: CN=00be4f7e54c279e41acdbdf0a4f342a02b7a7832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9b:1b:9c:bd:b4:48:e4:2f:da:ae:a5:53:d4:
                    f3:d5:59:3d:96:74:a1:3f:73:ef:71:e9:d5:4e:c1:
                    e5:1e:ba:c2:6f:88:fd:6d:7b:e7:bf:72:8f:76:34:
                    0c:18:4e:08:02:48:25:a0:fa:ce:8e:e9:e3:58:a4:
                    92:ba:90:53:74:bd:1a:c4:26:88:3b:3f:70:43:87:
                    99:8c:78:d0:d3:16:0d:b2:ad:ca:34:68:94:c5:c2:
                    c0:fc:2d:73:81:65:fd:21:e8:f9:4c:06:21:11:fc:
                    b4:4f:35:c0:06:74:3b:8d:c1:38:47:83:82:e9:78:
                    ff:7b:68:7b:ea:b5:36:6b:f4:5a:17:32:26:ed:d3:
                    9f:2a:a1:0d:26:56:b1:11:82:04:b9:88:22:4d:d7:
                    6f:b2:48:ae:62:9a:81:1d:79:b4:4d:f4:31:cd:5b:
                    f6:08:f8:c0:9f:af:2d:d7:b3:81:8d:5a:d4:e5:5a:
                    53:bf:9f:4d:c9:7f:07:ef:22:84:40:00:8f:cb:e9:
                    dc:b2:09:65:2e:30:99:27:d7:78:64:95:3f:0d:65:
                    13:bc:f7:e9:8f:88:7b:2a:9c:83:93:75:8d:4b:e3:
                    ed:22:9a:15:91:b8:31:c7:cc:ba:bd:8f:20:1a:c3:
                    63:07:fc:6e:8f:b0:74:93:9f:5c:28:86:2a:d4:0e:
                    8c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BE:4F:7E:54:C2:79:E4:1A:CD:BD:F0:A4:F3:42:A0:2B:7A:78:32
            X509v3 Authority Key Identifier:
                keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:bf:8f:53:83:60:55:73:d0:6d:70:3b:e2:de:b1:06:af:df:
         72:cb:16:f6:a2:fb:07:24:1f:62:77:26:4f:52:5a:e0:ba:83:
         4e:b2:76:1e:dd:b6:df:1e:06:59:c6:bf:32:3d:1d:74:ba:c0:
         2c:59:1d:54:e3:bc:f2:25:10:c1:8a:67:bb:c6:9d:6d:71:8b:
         e1:e3:02:70:67:4e:29:cc:e7:ae:eb:75:bd:82:0d:54:11:35:
         be:f2:c2:cc:6b:ed:4f:06:ac:b0:ba:30:e2:57:6f:8d:35:07:
         07:75:0c:58:0e:38:ae:ea:09:07:d5:70:d0:4c:75:a4:f0:ea:
         ef:7d:ee:51:4a:2f:5c:cf:ad:46:9a:46:b8:81:3c:ec:84:7b:
         2e:1a:24:34:0a:3c:b7:09:0a:30:ad:6d:6d:d8:67:fe:8f:9d:
         2e:a0:93:06:78:e8:fe:e4:00:7d:0a:79:8d:5b:f4:9c:97:27:
         88:8e:f0:b1:75:12:7f:53:9d:28:f6:80:65:1e:20:75:af:b3:
         a5:5a:f0:73:8a:c7:d8:93:cf:61:d1:d3:b7:92:20:c8:15:6a:
         79:75:fa:6d:48:a7:81:09:61:74:b6:25:dc:39:f4:da:33:8f:
         40:d4:3b:91:f5:3c:ce:2a:7f:0e:2e:b4:fb:8d:c1:b0:5f:4d:
         cf:75:fd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:30 2025 by rpki-client