Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
File:                     JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json)
Hash identifier:          1d2lDwsliISU93fYIuEpcJtSRWg/ybZPPJk7EjI7mRw=
Subject key identifier:   8E:13:0D:A8:DC:CF:D2:E1:70:A3:01:9B:73:F3:7D:9B:14:B4:74:DA
Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
Certificate issuer:       /CN=26066b6b6c13603501aa256fcdc3740df77801dd
Certificate serial:       019882B07E4F406718C372E4800C87C5AF11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
Manifest number:          0A71
Signing time:             Thu 07 Aug 2025 04:01:01 +0000
Manifest this update:     Thu 07 Aug 2025 04:01:01 +0000
Manifest next update:     Fri 08 Aug 2025 04:01:01 +0000
Files and hashes:         1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: Vbbu9aVVvmf/n6sdqccc6QU5wT0YOjmi48MHQxBvyPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b0:7e:4f:40:67:18:c3:72:e4:80:0c:87:c5:af:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd
        Validity
            Not Before: Aug  7 04:01:01 2025 GMT
            Not After : Aug  8 04:01:01 2025 GMT
        Subject: CN=8e130da8dccfd2e170a3019b73f37d9b14b474da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:25:62:f3:a5:6c:ca:07:9f:e6:c1:57:2a:
                    0e:62:6e:26:55:a9:b7:03:37:e9:4f:eb:46:06:e3:
                    7e:f2:bf:c5:da:3f:68:4a:fc:29:3d:7d:36:55:cb:
                    18:56:d9:4e:1c:ac:82:a8:70:e7:7f:b7:a2:01:d4:
                    1c:e9:6c:d7:17:4f:eb:ce:b7:bd:cc:8a:ad:3e:b7:
                    fc:f9:9a:86:6b:66:5c:ed:8f:e7:0a:0e:85:78:58:
                    b4:fc:54:61:d6:3f:90:9b:b2:fa:e8:e3:87:f5:2a:
                    75:d9:22:17:9c:41:9b:ea:b3:9c:cb:48:19:f3:7e:
                    86:bb:4f:01:cf:65:81:a5:54:5e:7f:82:6e:a0:7b:
                    c3:4b:a6:57:a8:06:70:05:c7:e1:d0:34:3d:ea:f5:
                    53:d1:62:23:11:ae:6a:cc:b7:7b:40:51:a5:37:94:
                    f1:64:9b:db:1e:cf:c4:6b:45:d0:3c:b0:5a:a1:d9:
                    08:63:bb:64:ad:c2:47:ba:69:3c:6d:81:44:f2:3d:
                    33:a1:8f:53:e0:aa:d0:86:52:c0:9c:7b:a1:b8:da:
                    58:b2:06:89:64:a1:e4:d0:56:fe:4c:f9:81:a7:9a:
                    7a:36:f9:b3:96:6c:4b:6a:6c:3d:44:07:14:a0:d9:
                    a6:18:4f:b6:11:87:7f:1d:42:6c:db:fd:6d:88:77:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:13:0D:A8:DC:CF:D2:E1:70:A3:01:9B:73:F3:7D:9B:14:B4:74:DA
            X509v3 Authority Key Identifier:
                keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:f6:ac:9f:c5:6c:00:ab:7a:59:71:62:27:9d:54:bd:fc:
         e4:c3:6c:61:8d:9d:b6:ac:77:a9:c2:48:2b:0a:8b:8e:49:14:
         84:1b:12:f3:dc:d2:49:3c:96:e6:6b:14:03:be:4c:2a:24:15:
         cd:31:8f:9d:63:b7:e0:95:48:93:e5:ef:79:a5:df:4f:05:1d:
         b7:cc:7f:44:53:7b:c2:f0:82:32:9f:c9:75:fb:f6:f7:10:b7:
         25:6d:53:c2:48:b4:9b:3e:66:3d:d0:7d:e2:86:4d:2e:be:c2:
         c1:52:ea:65:09:2c:2f:1f:d9:0f:e3:7e:ad:1f:56:e6:b1:0b:
         00:cb:e8:70:10:ab:7b:8b:43:bb:c6:f3:4a:53:9b:63:0e:87:
         9a:00:18:7e:9a:27:79:5d:5e:b5:99:30:fd:22:4a:2f:92:3f:
         37:e7:eb:df:25:1b:60:e2:7f:9f:e5:55:09:13:7e:61:12:ae:
         81:bc:e3:5b:62:c3:fd:b2:f8:48:90:82:5c:e1:1f:04:21:08:
         42:1c:c3:50:98:10:5a:22:6f:d5:c3:ea:5d:7b:0e:c8:56:f5:
         f3:f6:02:20:a0:cb:e1:19:31:a7:1e:cb:b0:7f:87:33:26:5f:
         c8:cf:40:cd:15:ca:48:5e:9e:d4:c8:bf:db:e3:38:84:b7:dd:
         2b:83:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:38:08 2025 by rpki-client