Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
File:                     jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft (raw, json)
Hash identifier:          F+/rqQ2DIHYDDxz3VdFtql/Rhu+k0P/7q/wg2KABCVw=
Subject key identifier:   E0:1F:F3:F4:56:E8:6C:69:4C:1F:F0:85:9B:F9:5F:DB:55:AE:E2:73
Authority key identifier: 8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
Certificate issuer:       /CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Certificate serial:       01988279435EE1672352451002E464B11B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
Manifest number:          0F4F
Signing time:             Thu 07 Aug 2025 03:00:41 +0000
Manifest this update:     Thu 07 Aug 2025 03:00:41 +0000
Manifest next update:     Fri 08 Aug 2025 03:00:41 +0000
Files and hashes:         1: jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl (hash: AtzNPJDisFk6jRQsQdzj8WI+0+tuV7kTJ2TEifPr99M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:79:43:5e:e1:67:23:52:45:10:02:e4:64:b1:1b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
        Validity
            Not Before: Aug  7 03:00:41 2025 GMT
            Not After : Aug  8 03:00:41 2025 GMT
        Subject: CN=e01ff3f456e86c694c1ff0859bf95fdb55aee273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:c4:bc:b9:b4:df:ce:5e:91:0b:46:41:05:
                    35:c0:98:9d:ee:c4:77:aa:46:a2:4b:7d:b3:59:2f:
                    01:da:c2:21:c0:20:a0:04:7f:a1:4f:f6:40:b2:67:
                    70:98:97:4f:bd:81:b6:9a:4f:9f:67:2b:74:f3:42:
                    70:86:f5:8e:78:b6:93:c6:47:ca:89:2e:03:00:9e:
                    70:b9:3d:e9:4d:92:7d:5a:ed:ad:1d:82:78:49:b7:
                    a4:8f:d1:61:bc:20:33:dc:97:e3:13:e3:19:11:2b:
                    a2:77:16:30:bd:a0:16:38:0f:4c:13:ab:d2:c2:07:
                    81:aa:b7:96:0e:82:0d:de:74:a4:72:94:1b:a8:c0:
                    82:b1:8c:aa:0f:1e:ce:c5:82:5a:63:d4:9a:3a:1d:
                    36:e2:ef:6f:10:40:93:76:99:97:eb:83:4d:16:15:
                    4f:8c:f5:db:3a:bd:b0:94:ea:ca:17:c8:d6:2e:63:
                    c4:a8:c7:da:6f:fe:59:ba:f0:e5:80:88:f0:a2:32:
                    f4:1c:cf:7e:06:b8:b5:6f:3d:60:b9:2f:e3:60:65:
                    f9:6d:c6:d2:a8:1d:00:94:06:a5:ab:0c:c3:cf:c6:
                    89:63:58:5c:c2:de:db:42:64:e7:ca:aa:0c:5b:0e:
                    2a:09:07:f1:f6:83:76:66:1d:88:0e:39:08:95:07:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1F:F3:F4:56:E8:6C:69:4C:1F:F0:85:9B:F9:5F:DB:55:AE:E2:73
            X509v3 Authority Key Identifier:
                keyid:8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:c5:16:80:bd:64:93:8f:73:2b:b8:45:cb:01:ad:c6:04:
         e5:a7:9a:89:b2:74:0a:0a:4d:fb:a0:fa:68:16:b8:30:01:3d:
         58:5a:68:bb:9a:3f:77:f1:39:19:e0:a3:d0:91:bd:c5:81:79:
         13:87:e0:0e:33:30:f8:68:d3:cf:ef:b9:2d:3d:78:87:2c:ee:
         c4:17:84:29:0b:50:2c:12:ca:47:ef:fe:4c:f1:4b:a0:ca:09:
         65:c0:1d:2c:21:4a:56:19:64:4e:85:22:47:a9:b2:5f:90:e8:
         f3:17:de:01:78:46:ae:9d:ed:f2:85:de:7a:fa:d9:3f:be:19:
         a3:27:72:ab:38:3b:68:3d:ca:64:f9:25:d4:59:f1:64:e5:ba:
         a6:ad:c2:d2:aa:39:c1:54:bc:89:36:eb:74:47:41:7e:16:ac:
         2d:d7:6f:ae:21:24:c0:a8:46:7b:44:2c:91:f6:4c:18:fd:f5:
         88:bc:09:09:11:a1:18:00:aa:e1:a1:9a:90:1e:dc:2f:fa:70:
         c4:32:74:c3:9f:52:74:b0:20:4c:e5:17:1f:da:39:de:7b:d1:
         1b:06:c7:61:7a:d9:2d:5f:07:9b:a1:14:48:dd:e8:c3:9c:ff:
         fe:58:bb:be:02:0d:61:d0:5a:83:1f:0c:7d:01:3b:02:44:b5:
         a2:c6:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:34 2025 by rpki-client