Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File:                     JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier:          hV4aiJ/rUa9WwyrOZM0qIM8ZMzLDH87BZn74DNWcpPM=
Subject key identifier:   10:28:BD:F6:00:97:90:A7:02:C9:AC:B2:58:B7:2B:BC:D0:9E:A8:FE
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer:       /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial:       01988C8F26C2130016BE63AAC61CFC0DC712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number:          034C
Signing time:             Sat 09 Aug 2025 02:00:48 +0000
Manifest this update:     Sat 09 Aug 2025 02:00:48 +0000
Manifest next update:     Sun 10 Aug 2025 02:00:48 +0000
Files and hashes:         1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=)
                          2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: +PLdNoywiku+FaYi44J6/jbMXNngRhnbNEvjPUMtb5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:8f:26:c2:13:00:16:be:63:aa:c6:1c:fc:0d:c7:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
        Validity
            Not Before: Aug  9 02:00:48 2025 GMT
            Not After : Aug 10 02:00:48 2025 GMT
        Subject: CN=1028bdf6009790a702c9acb258b72bbcd09ea8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:c0:1b:78:14:27:14:46:c0:a6:6d:40:b3:
                    e7:16:9a:74:80:cd:84:f7:0a:ae:ec:32:de:d9:1c:
                    4e:d7:0c:db:fc:44:9e:f3:43:94:19:da:ab:6a:e7:
                    cf:56:a6:03:21:c4:09:fc:60:af:16:35:83:dd:42:
                    fb:3e:80:fa:02:7c:5d:91:4e:e2:16:32:08:98:65:
                    da:99:cc:3f:f7:02:fc:0f:0c:70:68:f0:69:4d:b8:
                    31:e7:e1:cf:03:e2:40:e5:00:7a:5d:3d:fa:e6:32:
                    ec:b9:19:73:38:e8:52:23:a0:ea:ab:7d:29:f1:2c:
                    23:19:3b:2c:e3:f1:df:ac:95:7c:d4:3b:e1:ee:b5:
                    5c:e3:50:c3:51:9b:7f:53:76:06:23:20:86:40:db:
                    9d:cc:50:6e:b5:ac:f1:1f:3d:66:3b:7e:e6:30:26:
                    89:2b:96:69:67:f2:b2:7e:ad:7e:8c:61:6b:d8:ee:
                    f4:c2:3b:72:90:d1:51:bd:ed:60:48:3b:3e:fb:33:
                    40:62:c8:24:b2:29:c8:85:77:80:1b:56:ff:44:f4:
                    49:4e:38:b8:b0:d4:48:c3:a2:e0:53:b7:a3:0d:cd:
                    76:14:70:f1:cc:3b:ff:3c:0a:c8:9b:cb:19:bb:56:
                    cf:2c:14:2e:8e:43:cb:12:36:ca:15:c0:5c:f4:97:
                    73:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:28:BD:F6:00:97:90:A7:02:C9:AC:B2:58:B7:2B:BC:D0:9E:A8:FE
            X509v3 Authority Key Identifier:
                keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:9b:51:74:38:bf:d0:d0:bf:fa:6e:bb:00:8c:0b:10:3a:e0:
         44:7e:56:cb:c1:51:60:65:40:57:17:ae:ac:8a:5f:a5:bf:4c:
         d8:86:e9:f4:65:59:fa:38:b0:9d:4f:1c:0d:4b:21:9d:f7:b2:
         f1:8c:51:6b:0f:59:af:d8:55:97:f6:66:d9:7a:9c:3e:8c:c3:
         b1:7d:45:db:d2:fb:a6:76:9b:9e:68:17:31:6a:74:95:75:9d:
         5b:d0:0a:fb:5e:66:b4:ff:83:ca:e0:fe:44:15:de:08:f3:b8:
         88:65:24:77:6c:25:83:bd:b8:96:7f:4f:e7:f4:ae:c4:25:31:
         ac:14:48:7d:dd:0d:32:32:f5:20:f7:f9:17:05:ad:c9:99:3f:
         1e:21:e4:bd:6c:c2:9d:2e:46:b5:0e:97:a6:48:ca:91:f0:3a:
         fd:6a:6b:33:85:c4:72:79:57:28:76:b7:2c:86:8f:d6:cc:6e:
         5c:df:b8:3c:42:87:4e:b4:6d:a3:eb:e0:d8:0a:c0:fe:cf:34:
         71:fc:a2:50:5d:b9:e5:c1:b6:a9:2c:52:39:f6:35:d8:97:36:
         9b:e3:b7:09:a3:ea:57:2a:06:df:f1:08:5f:06:6b:1c:fe:0e:
         df:27:4d:73:25:cb:35:e7:74:d6:1d:7f:d7:8c:88:6e:0d:c4:
         e7:b9:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:16 2025 by rpki-client