Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File:                     jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier:          LoNKvfhb42fip1MSNdVhUPDGA64jKY3h0L89tjhW2M0=
Subject key identifier:   A8:1A:FB:07:0E:26:2C:03:EE:BD:9F:CF:32:9C:64:39:25:66:97:13
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer:       /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial:       019875D0D48065A42A8676A748917B287A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 16:01:16 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:16 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:16 +0000
Files and hashes:         1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: F40frCrq+Cmwvz9o2S1im6oWMCIiaLjDEp6RLGWaWyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:d4:80:65:a4:2a:86:76:a7:48:91:7b:28:7a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
        Validity
            Not Before: Aug  4 16:01:16 2025 GMT
            Not After : Aug  5 16:01:16 2025 GMT
        Subject: CN=a81afb070e262c03eebd9fcf329c643925669713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:a1:a2:ea:ef:a6:75:2b:72:85:0e:43:1e:
                    13:06:ca:73:d6:2e:f3:4b:45:ff:92:6c:c3:d3:8f:
                    5b:32:6c:d3:5c:df:ed:d7:45:37:9c:3a:ba:86:9e:
                    22:98:62:3c:73:53:2f:cb:13:22:87:07:0f:23:e2:
                    17:f0:1d:02:d0:55:33:20:5c:e8:f4:11:79:dd:f3:
                    83:ac:ff:45:f4:a6:e3:95:d8:9f:4e:55:60:43:af:
                    da:ef:ef:fc:0c:f1:15:1d:58:03:69:f4:eb:c0:c1:
                    ff:42:a7:a6:6e:12:d3:d4:15:6b:08:91:94:df:74:
                    b6:17:5a:da:6b:dc:3a:2c:bd:ab:42:9b:bc:ca:e1:
                    35:30:16:4f:b0:15:ae:5e:43:75:b2:9a:ae:07:63:
                    52:66:cb:39:25:bd:8a:a0:b4:be:31:5c:8f:2a:58:
                    ea:5c:7d:fc:31:2f:90:cb:c1:8b:93:6c:68:9b:f5:
                    7c:57:cc:fd:f0:57:ed:6d:4a:4b:a5:d1:8f:3f:a1:
                    d9:18:d1:c2:44:21:df:4e:be:b3:be:90:82:47:28:
                    44:8f:c3:08:61:b9:93:e1:ec:f6:e9:92:31:38:b6:
                    36:70:e4:76:e8:00:d7:c1:c1:1c:37:e1:be:51:01:
                    76:63:e6:4d:44:8b:a5:b1:f0:05:d8:93:2d:2a:4c:
                    25:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1A:FB:07:0E:26:2C:03:EE:BD:9F:CF:32:9C:64:39:25:66:97:13
            X509v3 Authority Key Identifier:
                keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:bc:bf:66:82:bb:87:cb:2e:e1:0e:04:25:56:87:7d:42:71:
         b5:6c:92:b0:c3:fb:81:81:5b:bf:f3:a8:c1:e2:39:37:74:8d:
         5d:82:5a:58:58:4e:f8:94:bd:57:fe:c6:0d:97:61:2a:75:7f:
         97:a5:8f:d8:b4:52:b4:96:1c:18:54:c3:c2:cd:8e:10:58:43:
         71:26:92:8f:ee:d1:09:2b:45:0a:e5:69:c6:c7:9b:69:ea:17:
         c5:9f:f2:35:0c:54:5f:a3:8b:82:79:9e:85:66:0c:1e:03:9e:
         2c:82:4c:0f:d4:aa:0e:c1:62:df:78:62:8a:45:e6:f1:b2:cf:
         1b:38:4a:aa:3b:0a:7f:cf:6c:ab:57:9c:fc:61:3d:2d:31:66:
         b6:d1:ea:30:76:78:c7:4f:0c:71:69:b4:ee:4b:73:b2:34:54:
         c3:c2:ac:be:94:da:d4:8d:00:5a:a1:df:02:c1:6c:22:7c:6b:
         56:7e:16:db:16:f1:1b:ec:ad:64:04:75:a6:96:2f:00:c4:80:
         ef:6b:51:f7:4a:b8:35:90:39:71:30:d5:02:26:51:94:b3:92:
         23:5d:51:7c:8e:b6:f4:78:7a:50:c1:78:07:4d:d2:a6:4a:03:
         b6:a7:8f:e6:18:3b:66:9c:d9:3e:b5:13:0e:0e:d9:da:8b:97:
         19:46:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:56:09 2025 by rpki-client