Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
File:                     J0iJxEELQxcvQcjBSuqJm7sq2r0.mft (raw, json)
Hash identifier:          w0s4g4hi0pGMu2d7eHz5akw3de6sQMwkB9MDTbYLuFg=
Subject key identifier:   0E:78:F9:A8:AA:DD:32:97:1A:2D:1C:6F:5D:7F:41:BB:D2:86:92:41
Authority key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
Certificate issuer:       /CN=274889c4410b43172f41c8c14aea899bbb2adabd
Certificate serial:       0198A1961D36CBCEE54B180C07F1F6748A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
Manifest number:          0C22
Signing time:             Wed 13 Aug 2025 04:00:26 +0000
Manifest this update:     Wed 13 Aug 2025 04:00:26 +0000
Manifest next update:     Thu 14 Aug 2025 04:00:26 +0000
Files and hashes:         1: J0iJxEELQxcvQcjBSuqJm7sq2r0.crl (hash: Uhc3cMfqA69jd11ciBUX9vt+3I0PdqSC37KZju8Wsq8=)
                          2: gFEXxLFUU8a__opADc1vfw8jMw8.roa (hash: GCpDj9Bn6kn9jlHLv2Vqxyqzwpl4Us46FPPhGtO7UYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:96:1d:36:cb:ce:e5:4b:18:0c:07:f1:f6:74:8a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274889c4410b43172f41c8c14aea899bbb2adabd
        Validity
            Not Before: Aug 13 04:00:26 2025 GMT
            Not After : Aug 14 04:00:26 2025 GMT
        Subject: CN=0e78f9a8aadd32971a2d1c6f5d7f41bbd2869241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:52:08:15:4f:64:45:11:14:6c:31:fa:91:
                    31:59:b6:e5:81:cd:5f:6e:eb:e9:4d:e3:fb:f7:52:
                    96:78:c9:d2:59:cf:77:57:36:79:78:9d:c2:f1:79:
                    d7:38:92:9c:79:83:2d:57:73:f5:de:d9:d5:2b:bb:
                    92:c6:dd:aa:7f:eb:48:71:0a:85:7f:2e:57:53:ec:
                    ee:ad:1d:62:3d:bf:b5:84:e6:5f:c7:e6:56:f1:f8:
                    6c:2d:a5:e8:92:77:b3:b8:90:44:36:54:25:64:40:
                    9f:20:21:75:0d:e1:ca:ae:f7:d9:a5:b9:86:a7:16:
                    45:6d:d6:fa:af:35:87:10:c0:4e:e8:b6:48:10:a9:
                    51:e4:3b:93:98:55:c0:4c:9e:b2:eb:d7:fb:a6:27:
                    cf:a8:13:99:53:c1:0e:5d:a2:56:19:fd:1d:75:7f:
                    66:6e:9b:a7:c8:8f:45:7a:4d:2b:ce:17:fc:ae:7e:
                    b0:6c:be:4e:d1:bf:78:5a:9b:a5:be:3b:60:77:33:
                    a3:cd:87:68:e8:97:77:89:6e:59:1f:80:d0:b7:6e:
                    82:e6:5c:17:b8:2b:a1:b3:69:f6:fe:53:50:04:a1:
                    22:8f:60:db:0d:c8:90:a5:11:e3:8c:2d:d1:78:c8:
                    f9:57:df:80:e4:91:aa:a1:88:8f:7f:4f:db:64:a5:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:78:F9:A8:AA:DD:32:97:1A:2D:1C:6F:5D:7F:41:BB:D2:86:92:41
            X509v3 Authority Key Identifier:
                keyid:27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6e:8a:f6:cb:7e:88:85:70:54:7c:b1:8c:ef:ac:8d:46:9d:
         8b:49:2b:2c:b6:8b:8d:8e:b2:bc:8b:f0:59:16:87:55:c1:9a:
         b4:2a:f9:86:37:1c:5f:4a:00:48:eb:4c:20:cb:92:60:fd:34:
         8e:b9:a1:15:38:98:db:32:1f:a4:9d:8f:83:a3:06:33:8e:be:
         92:68:f5:28:75:33:00:1e:16:b7:92:77:f1:77:25:05:f3:77:
         64:06:3c:9b:fd:41:ed:1b:bf:a8:32:e3:53:fb:84:ff:11:e7:
         47:70:21:df:d6:6c:f0:ab:60:22:18:9e:f5:cb:1a:2d:f9:c9:
         8f:bf:7f:62:0c:62:f1:92:ab:82:e6:0e:46:34:43:58:4b:cd:
         42:e7:4a:e8:9c:c5:0f:0d:a5:3f:16:32:db:3e:e4:8d:80:c7:
         21:39:49:d6:1e:cd:67:76:0c:ff:1b:d8:34:f5:b1:17:96:a0:
         ff:73:42:54:95:ec:03:2f:00:a1:3a:0c:65:25:e4:59:b9:f4:
         0e:42:17:8f:9a:d6:dd:6e:bf:56:f5:3e:ba:4c:a5:2a:36:c1:
         93:7f:17:c6:c6:97:91:b7:76:a6:eb:82:f6:58:04:e0:17:b8:
         c4:33:c7:52:ef:10:30:b3:1a:f4:37:89:ff:19:be:eb:74:9d:
         cf:fa:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:40 2025 by rpki-client