Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File:                     iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier:          3T9JT3sEzda8ET/YQEV+YLcwiqzLPZxf+Htk3pNwQNc=
Subject key identifier:   73:CE:9B:40:7F:26:70:73:A1:18:37:B9:C7:C0:30:74:96:8B:47:DE
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer:       /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial:       01988B0EA5D1F3025AE08B9C1260FA917F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number:          0610
Signing time:             Fri 08 Aug 2025 19:00:49 +0000
Manifest this update:     Fri 08 Aug 2025 19:00:49 +0000
Manifest next update:     Sat 09 Aug 2025 19:00:49 +0000
Files and hashes:         1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: PLLm1xOC2pAnWR0qEaxnSZPhydy9x7UMeZ0FWOVIT8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:a5:d1:f3:02:5a:e0:8b:9c:12:60:fa:91:7f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
        Validity
            Not Before: Aug  8 19:00:49 2025 GMT
            Not After : Aug  9 19:00:49 2025 GMT
        Subject: CN=73ce9b407f267073a11837b9c7c03074968b47de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:42:5c:8f:3d:cc:8e:79:63:80:8b:5e:ce:
                    14:28:d2:d3:37:d7:0d:d6:c7:b2:73:a7:92:34:fd:
                    79:dd:fe:5c:4b:3d:7a:39:36:b8:18:38:a4:c8:b3:
                    13:72:07:4d:a1:84:4c:b7:61:a4:b2:c9:fa:28:d6:
                    c8:17:4b:f5:fe:10:6a:02:68:71:08:f6:62:cc:e1:
                    e6:6b:ea:70:2f:39:77:08:a3:13:cb:44:9b:4b:28:
                    21:2e:dd:2c:11:2a:a1:3b:a1:f6:fc:ae:34:6f:17:
                    88:b9:aa:67:62:81:42:62:68:3e:86:e5:e5:9f:81:
                    c8:0e:22:23:83:66:40:e0:eb:d7:bf:a1:e0:9b:27:
                    99:48:a4:55:5c:41:cc:f3:f7:ce:57:69:0a:fb:31:
                    e9:1c:e3:d3:9e:c3:d6:1d:32:64:a3:6f:aa:e6:31:
                    c8:46:08:12:8c:a2:69:d8:5b:3b:8e:1e:5f:60:fe:
                    6d:e7:07:3c:05:ae:48:bd:76:f6:16:9c:ad:b1:44:
                    78:5d:9f:be:97:37:a1:9c:10:8e:d1:a4:2a:cf:48:
                    ac:a8:9e:77:7a:fe:42:a4:0e:2b:3b:f8:dd:3f:4b:
                    43:04:07:fb:f5:c9:21:c8:55:69:73:b2:ef:2e:fc:
                    27:9a:b7:82:3f:5b:3c:af:5a:b2:bc:ac:c7:2c:55:
                    dc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CE:9B:40:7F:26:70:73:A1:18:37:B9:C7:C0:30:74:96:8B:47:DE
            X509v3 Authority Key Identifier:
                keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d6:54:2e:97:b7:9b:6a:49:70:df:56:16:1e:7f:6c:71:a5:
         99:46:58:3e:53:6a:e6:9e:1e:49:41:29:b1:26:41:b1:49:1a:
         00:d5:d8:57:88:dc:76:81:ca:53:bf:2d:8a:6b:81:fe:92:e5:
         6c:71:52:7b:ac:02:c4:fd:d3:9a:f2:12:18:31:03:05:8f:7e:
         bd:ae:d0:88:90:8b:ee:de:a4:95:f3:eb:b9:d5:08:bb:df:b4:
         12:40:d3:26:31:2d:5f:32:53:3a:08:2d:3b:68:bf:4e:7a:0d:
         35:aa:36:b1:1a:f8:93:14:4a:3f:55:f2:d9:db:59:3d:5d:26:
         77:22:91:38:3d:89:50:55:b4:50:71:73:38:7f:63:60:a2:51:
         4e:07:bf:73:86:9c:8d:45:cb:50:6c:a3:60:ae:e4:75:bf:71:
         ea:6a:b1:8b:ae:ae:7e:d9:57:58:70:52:71:6b:c9:ce:33:e4:
         2c:50:83:ba:b2:e7:dd:7d:3b:be:80:2c:54:c6:65:8b:05:d0:
         fd:c3:23:7e:44:13:fb:f7:ce:6c:4a:91:48:a3:9b:1b:b9:1e:
         88:4a:7d:10:46:d9:04:41:b6:80:74:5f:1d:fb:ff:ac:bf:e6:
         28:4d:7b:71:a6:fd:5a:85:57:35:64:7d:68:72:13:96:82:20:
         4b:94:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:38 2025 by rpki-client