Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File:                     jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier:          txRL/q0O2pd4t7Y+Pq6P0thDev5kjZ6lwgPcN1bGcwM=
Subject key identifier:   B0:2F:8B:CB:85:59:D5:73:3E:AB:78:85:3E:EF:97:54:5F:E4:18:D5
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer:       /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial:       01987298B0250AA5DBB94D0299194017E753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number:          1612
Signing time:             Mon 04 Aug 2025 01:01:05 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:05 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:05 +0000
Files and hashes:         1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: /zbWT1KK+mNrfc5UByskVMhpYqsv4RF2ooYSvDIkljc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:b0:25:0a:a5:db:b9:4d:02:99:19:40:17:e7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
        Validity
            Not Before: Aug  4 01:01:05 2025 GMT
            Not After : Aug  5 01:01:05 2025 GMT
        Subject: CN=b02f8bcb8559d5733eab78853eef97545fe418d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:52:53:a7:cb:1d:76:ea:3a:d0:6e:c7:42:
                    24:c7:e4:1f:64:be:a2:54:07:00:e8:2e:b7:ab:a9:
                    f9:9f:7f:ae:1a:cf:25:1b:b5:b0:bc:a5:2a:ce:c2:
                    8d:04:63:a3:c4:14:48:65:7f:2f:f1:b7:4d:91:f4:
                    fe:7f:02:76:4d:e1:3e:c0:b5:06:72:67:45:3a:54:
                    8e:e4:ac:25:81:bf:88:f3:7f:2c:05:b8:0a:57:57:
                    2b:80:b3:69:88:18:67:62:6e:f4:bd:17:c0:a1:3c:
                    0d:60:95:86:f8:ff:aa:a8:ea:82:e5:21:f2:ed:60:
                    17:34:f9:bd:07:82:aa:04:57:87:8a:11:7f:90:eb:
                    d7:d5:96:1e:dc:21:fd:50:95:28:4c:08:ea:fc:fe:
                    f8:b5:61:f6:45:d2:22:59:b0:23:fc:ce:94:f9:3d:
                    21:17:74:6f:d4:4b:ca:df:a0:6e:aa:47:bc:8e:3d:
                    9c:e6:93:6a:bd:c1:c9:33:b9:25:ea:57:c3:f4:b3:
                    bb:67:6d:b9:14:7d:05:d0:4c:8e:4f:86:32:28:0c:
                    c5:cf:b8:1b:02:55:72:ae:08:8a:e2:0d:a6:77:87:
                    fd:02:39:0d:59:ed:10:98:ab:0a:ec:31:ee:51:d2:
                    9a:9b:16:88:da:93:dd:02:ee:cf:17:d4:85:81:21:
                    2b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2F:8B:CB:85:59:D5:73:3E:AB:78:85:3E:EF:97:54:5F:E4:18:D5
            X509v3 Authority Key Identifier:
                keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:81:34:64:5d:84:a7:81:a8:ed:f8:8f:5b:d0:cf:40:9a:
         bc:49:f5:5e:c1:aa:20:43:c9:7a:35:97:39:44:d3:8e:85:e8:
         25:d2:56:2b:8e:6d:af:d0:b0:91:b1:c5:a0:7a:2f:87:c0:53:
         49:47:83:e5:e9:9b:ea:78:02:89:0e:cd:fa:7e:5d:7c:93:55:
         a5:56:9f:80:81:8d:6f:58:54:ee:22:06:e8:0a:8a:3a:ab:d7:
         a3:c3:ca:84:77:cd:2c:8a:f0:a5:e3:08:34:15:d1:6d:9a:94:
         d1:26:1f:47:75:71:7e:31:08:4d:b6:10:03:37:68:c1:24:80:
         2a:2b:09:55:e9:7f:e8:f7:ba:c6:9a:fc:0a:c9:e1:64:93:10:
         58:37:bd:92:93:fc:e0:ca:d2:c7:4b:fa:38:92:7b:3c:00:3e:
         59:cd:23:92:ac:4d:bf:53:16:00:ba:51:05:83:b1:13:fc:02:
         ed:c6:59:3d:48:ff:48:7e:6e:90:69:12:60:40:77:bc:f4:b5:
         ec:97:a5:9d:87:52:3f:d4:6a:f9:a7:75:be:dd:15:69:4a:bd:
         1e:ff:52:ea:0f:ef:52:33:f5:d1:51:12:0c:ab:f0:37:a2:90:
         1c:83:bb:15:c4:21:26:25:2c:47:f1:c3:93:a1:0c:c9:37:ed:
         18:88:a1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:29 2025 by rpki-client