Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
File:                     J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json)
Hash identifier:          f7Gq7QJ6lGh5BU96Tj3SrDy5rhgCPY7/4AROzMkZryE=
Subject key identifier:   DB:B2:F2:A2:A2:8D:F8:57:80:FB:19:90:F8:D1:46:92:BF:D6:F5:FE
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Certificate issuer:       /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial:       01988166B3631F66779FD736537BB1E6D0BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
Manifest number:          1620
Signing time:             Wed 06 Aug 2025 22:00:48 +0000
Manifest this update:     Wed 06 Aug 2025 22:00:48 +0000
Manifest next update:     Thu 07 Aug 2025 22:00:48 +0000
Files and hashes:         1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: UqmJS+LpnoM6jTXohn7/JXRLChqNL+rcHoealPHPE4w=)
                          2: rTVHjttPuQQ_1Dt0EA11KAiXgII.roa (hash: 5V1V0+UjdPuxZIazNIUWaVHiDdBin/aDpwXhDP5JcYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:b3:63:1f:66:77:9f:d7:36:53:7b:b1:e6:d0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
        Validity
            Not Before: Aug  6 22:00:48 2025 GMT
            Not After : Aug  7 22:00:48 2025 GMT
        Subject: CN=dbb2f2a2a28df85780fb1990f8d14692bfd6f5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:48:5e:33:22:75:be:d4:8e:45:3f:33:df:
                    d7:a2:69:a6:af:ca:65:56:cf:a6:47:3f:4b:ed:14:
                    bf:b0:b5:e3:e8:1a:32:4a:02:e0:8f:38:ad:0d:66:
                    ec:ef:b1:62:26:90:9c:2d:93:f7:3c:ec:7e:f7:72:
                    74:3f:90:39:df:61:2e:a2:41:79:a4:f1:63:1b:ae:
                    53:25:18:a3:da:84:a7:98:49:b7:10:24:a3:a3:80:
                    78:c4:6e:52:9f:97:ce:57:c8:bb:cf:23:79:38:e7:
                    70:03:dd:51:27:4d:19:56:ac:83:b2:48:99:f4:b8:
                    4c:ee:26:e4:3c:23:fe:6a:b7:84:97:93:e5:fe:91:
                    3a:9e:30:5f:72:f5:9d:3c:54:e3:de:fe:6e:3a:72:
                    36:21:47:57:1e:73:9f:aa:c1:43:67:96:0d:a5:ab:
                    5e:5b:e1:b8:57:58:e3:1d:6f:ee:eb:be:af:5d:84:
                    6b:5a:a8:a7:88:49:7f:bb:9f:99:72:73:7a:1d:e3:
                    7d:d3:bd:ad:41:30:00:89:6f:79:06:53:b7:56:71:
                    b5:1d:90:43:e6:2c:ef:b1:b8:c5:cc:2c:8b:44:f9:
                    e2:da:7e:53:2e:7c:ab:6d:63:7d:69:d7:52:d9:e4:
                    cb:15:8d:e2:80:0a:f5:29:95:b3:4f:eb:69:d7:29:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B2:F2:A2:A2:8D:F8:57:80:FB:19:90:F8:D1:46:92:BF:D6:F5:FE
            X509v3 Authority Key Identifier:
                keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:91:e3:3d:d3:62:28:64:fa:87:73:a0:1b:01:85:24:64:c4:
         33:4f:66:95:01:57:04:cb:39:63:3b:17:0a:71:92:e3:fc:88:
         29:31:23:37:fa:0b:51:8e:41:6b:0b:75:15:91:42:56:c6:13:
         00:09:7b:4f:3b:5b:58:30:e0:93:0b:a0:d0:e7:a1:28:2c:4e:
         f1:c4:7b:05:e5:ee:65:92:98:2b:af:03:4b:56:9b:bf:be:1f:
         e6:e6:fe:03:b7:3b:d3:54:56:d3:6a:33:4b:41:01:33:6c:84:
         47:0b:99:8c:00:be:05:ae:45:22:32:99:66:d1:87:cc:f1:da:
         9e:f5:2e:6e:f5:5e:76:d2:c0:1d:56:f3:dd:4e:41:97:e0:7d:
         8d:9a:e2:4f:2e:f8:6c:4d:5b:de:1f:56:1b:04:a5:70:b6:e4:
         b7:d8:15:28:6c:7a:03:ef:05:6c:29:21:de:fc:3c:71:bf:f3:
         aa:0e:f4:bb:c8:72:fd:a0:bb:96:ec:3f:56:7d:26:fd:0e:cf:
         03:db:67:03:07:50:92:9b:1f:5d:d1:27:72:89:16:86:7f:5e:
         50:94:bb:f0:c1:b7:f7:ac:e7:c4:0b:3d:f0:b3:6d:c5:6d:a0:
         53:c8:c4:f3:e1:ad:e2:22:b4:41:0d:b5:53:b4:c4:bf:fb:4b:
         9d:c7:df:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:37:19 2025 by rpki-client