Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File:                     jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier:          MxpOb23OD5otS07Yz84mU+yl+QYmgUC+ElIaMMCjAK8=
Subject key identifier:   29:86:CF:38:5B:92:F0:B5:65:BC:1D:C0:A6:66:BB:7F:54:7A:D6:4C
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer:       /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial:       019873E3995887C12022DB08000388AED34F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number:          0A08
Signing time:             Mon 04 Aug 2025 07:02:32 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:32 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:32 +0000
Files and hashes:         1: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: OzOlRAqrTEQJdIvrU3WF0Ee3hJsHog0oXXtocngDH3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:99:58:87:c1:20:22:db:08:00:03:88:ae:d3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
        Validity
            Not Before: Aug  4 07:02:32 2025 GMT
            Not After : Aug  5 07:02:32 2025 GMT
        Subject: CN=2986cf385b92f0b565bc1dc0a666bb7f547ad64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:88:51:55:c3:3c:c9:b3:eb:31:cb:99:5c:5a:
                    7f:12:ec:c2:95:29:a8:94:26:e6:2c:0e:e0:66:91:
                    4b:db:67:b9:70:3f:a3:b0:06:b4:89:b4:f3:9a:15:
                    a4:d6:5b:aa:2f:28:57:f8:24:30:6e:e5:44:f3:6a:
                    47:a0:4c:8d:78:14:de:6d:81:5c:f3:28:68:96:01:
                    9b:07:b8:50:ea:cd:16:f7:1d:d5:88:48:ed:ba:b1:
                    c1:a8:75:b8:57:bb:a1:ac:19:ff:75:c1:04:2f:7b:
                    08:7a:28:2d:a3:40:d7:40:e7:40:73:ab:f3:e2:6e:
                    8c:bf:dc:6b:b9:69:cf:bb:e7:f0:34:e4:4a:b8:49:
                    85:0e:bb:96:98:4d:fc:b8:48:13:09:25:7b:ab:5d:
                    79:c5:e5:25:69:d7:0e:31:75:c8:7c:5e:20:db:88:
                    da:4c:fb:b9:f9:f0:4b:8d:4e:07:e2:36:fc:f6:8c:
                    9a:36:9b:8c:c4:73:22:70:5d:e2:15:33:9e:9a:f0:
                    ad:83:10:72:bd:59:07:dd:b5:bb:8b:cb:25:66:db:
                    aa:b3:74:92:4d:ae:71:80:57:e3:34:8d:05:24:14:
                    b9:9f:f4:80:c5:fd:60:a1:99:48:93:7a:68:9c:10:
                    1a:98:e5:ac:71:48:c1:34:46:9a:d6:96:de:2b:2c:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:86:CF:38:5B:92:F0:B5:65:BC:1D:C0:A6:66:BB:7F:54:7A:D6:4C
            X509v3 Authority Key Identifier:
                keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:37:0d:9a:4a:8d:7c:7e:b2:98:ac:be:55:6d:64:95:5f:15:
         40:f1:77:57:1e:fb:0e:8c:be:fa:a8:e4:17:05:80:16:f0:d0:
         57:71:2a:c3:21:f4:9f:b6:c2:59:ae:89:da:99:17:50:84:39:
         32:05:09:53:cd:2b:b7:fe:6e:90:89:4e:44:b0:d1:ec:91:2f:
         d3:56:58:9f:71:63:6a:6d:3d:94:74:a8:b4:a8:13:79:7e:f7:
         74:8f:5c:6b:ed:47:42:fd:f0:72:f9:4a:2f:29:c6:5a:0c:5d:
         3b:02:bd:e2:81:63:af:6a:14:9c:84:95:22:64:a5:2c:5c:74:
         65:88:8f:dd:8c:9e:f1:c1:5a:fd:3a:60:22:fb:ac:ec:2c:6d:
         30:d2:7c:81:9e:48:d0:29:8b:9f:e8:97:7a:d0:22:e1:1d:95:
         54:24:b6:b1:2f:c8:23:08:8e:1d:28:f8:b9:16:a1:19:05:12:
         3c:bc:f2:0c:cd:ba:84:00:ae:15:93:06:05:87:9f:08:1e:dc:
         96:54:ae:a7:84:d4:9d:f5:79:8e:16:d4:f6:a0:60:d8:37:57:
         cc:8b:32:ed:aa:f0:fe:c5:68:6e:47:24:10:50:74:ea:64:52:
         eb:bb:c5:20:6b:d9:b6:ca:cf:c9:88:8a:45:7a:1e:6a:4b:fd:
         06:a4:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:35 2025 by rpki-client