Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
File:                     JkXNQMgEm-mprn8DM2q9P-CCr7k.mft (raw, json)
Hash identifier:          8ayMpCz+os2idAOXKIYetAzzONbvnjwtCDgR5rXVVUI=
Subject key identifier:   84:96:BB:60:75:42:0B:A5:3B:0E:E3:31:93:2A:4F:30:5A:4D:71:2A
Authority key identifier: 26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
Certificate issuer:       /CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Certificate serial:       019873E3788365254D04B51EF3CAEF19E665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 07:02:23 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:23 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:23 +0000
Files and hashes:         1: JkXNQMgEm-mprn8DM2q9P-CCr7k.crl (hash: A9Pnah3tyzVTsUtYMHCQ7Bt/c1DTKzbZEsjXz2WWqyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:78:83:65:25:4d:04:b5:1e:f3:ca:ef:19:e6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
        Validity
            Not Before: Aug  4 07:02:23 2025 GMT
            Not After : Aug  5 07:02:23 2025 GMT
        Subject: CN=8496bb6075420ba53b0ee331932a4f305a4d712a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:41:b2:f5:37:57:89:2f:ea:86:65:92:d4:
                    ac:f8:2e:a4:6d:f2:a9:05:cd:22:4a:70:41:71:da:
                    26:b5:e4:8a:d4:ea:62:a9:dd:be:e9:ea:50:6d:72:
                    0b:33:c4:24:d5:35:7f:b1:59:b1:81:ad:72:22:12:
                    89:43:15:62:aa:e6:9b:04:88:1b:76:a3:e6:cc:e1:
                    3d:bd:d8:a3:77:6f:b3:df:77:b8:91:bf:41:ab:76:
                    92:40:e9:47:95:3b:d9:09:09:22:a9:bd:e9:4e:36:
                    ba:a6:0d:cd:b8:2f:76:d3:e8:df:ce:09:da:21:77:
                    38:a9:4e:09:0a:dd:11:b3:78:22:2f:28:2d:c2:c8:
                    53:fb:66:90:bc:3f:5d:5e:3f:de:79:89:7a:79:47:
                    6a:6f:07:a6:0f:52:37:05:9f:c3:8e:4c:91:33:04:
                    f8:99:21:36:8e:d0:14:93:47:a5:1c:3f:76:98:83:
                    86:8e:a3:98:8d:97:81:60:45:c9:35:ae:91:df:a1:
                    b8:16:09:cb:3a:e0:40:22:0e:fb:be:6d:eb:ba:82:
                    d6:23:cb:f6:d3:e0:bb:87:c3:9c:1a:e9:40:fb:6e:
                    a0:31:97:8b:65:03:34:29:b4:bc:9d:23:bc:9a:98:
                    6e:8c:3d:b9:1b:00:10:e1:86:d1:f4:0a:d1:d2:a0:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:96:BB:60:75:42:0B:A5:3B:0E:E3:31:93:2A:4F:30:5A:4D:71:2A
            X509v3 Authority Key Identifier:
                keyid:26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e4:56:7d:79:24:b0:76:d3:d7:40:96:2a:3a:4f:dc:d1:ae:
         f6:5e:47:2b:52:ab:60:11:70:20:f3:26:d3:eb:fd:c5:cc:08:
         a8:24:d3:7a:4a:ac:24:0d:fa:3c:24:02:ab:cd:19:22:f0:cb:
         23:71:0d:ed:1b:15:92:34:54:4f:fe:3c:5a:9f:93:60:97:b5:
         e8:ea:74:7e:59:4d:d7:cd:65:e0:9c:28:15:ce:e2:d1:de:15:
         8f:88:28:6d:fe:4e:82:a5:02:c5:34:ce:0a:85:c1:89:a4:22:
         9d:87:29:de:78:0a:7f:97:07:fc:45:5e:ca:2c:69:ad:d6:a4:
         82:34:7a:fd:2e:98:17:cd:47:9a:ff:9c:20:d7:30:cb:51:66:
         9e:ab:96:4a:23:30:1c:03:5e:a3:e8:bd:c1:96:3e:c5:ab:e1:
         5c:08:15:be:46:78:6b:d0:6f:0c:7b:b5:c8:ef:30:96:fd:9c:
         29:d1:b5:6c:e3:5d:bb:41:f6:c4:51:09:8a:96:fa:01:16:98:
         81:2b:41:52:15:4e:35:e3:86:d2:86:9b:15:ee:cc:bb:f8:3a:
         d2:02:9f:a5:1a:ce:60:70:4f:8c:ae:d4:86:cb:2f:2e:05:37:
         ff:1a:6c:7f:d7:57:42:fb:cc:25:c8:0f:ee:a0:01:a9:0b:c6:
         85:bc:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:09 2025 by rpki-client