Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
File:                     j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft (raw, json)
Hash identifier:          q9w0mjDB5KxxTQd0cItN2LOiAIhhnPL7ti5XjI8d74A=
Subject key identifier:   12:61:AE:B6:3D:E8:5D:DA:66:40:13:A4:3D:45:AB:11:41:F9:FA:AB
Authority key identifier: 8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
Certificate issuer:       /CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Certificate serial:       01987B9D8DA3A7205C9714569A3935D8B59B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
Manifest number:          0C48
Signing time:             Tue 05 Aug 2025 19:02:59 +0000
Manifest this update:     Tue 05 Aug 2025 19:02:59 +0000
Manifest next update:     Wed 06 Aug 2025 19:02:59 +0000
Files and hashes:         1: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl (hash: D6bG3aP/7FWGIwPHe28um1RAVXTAsTeLs/GW4pGPS8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9d:8d:a3:a7:20:5c:97:14:56:9a:39:35:d8:b5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
        Validity
            Not Before: Aug  5 19:02:59 2025 GMT
            Not After : Aug  6 19:02:59 2025 GMT
        Subject: CN=1261aeb63de85dda664013a43d45ab1141f9faab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:02:2b:39:d0:15:8b:c5:81:5f:48:4d:68:
                    e6:07:1a:a5:b3:f5:8a:f0:4a:19:99:99:36:0a:ec:
                    28:50:9c:9f:a8:91:c5:38:5d:a4:05:88:e0:20:a8:
                    25:82:96:af:5a:c4:86:76:3f:f0:ef:2e:49:35:26:
                    37:27:ee:ab:c4:9c:4d:f6:31:b8:7f:66:50:7f:70:
                    a3:0e:3e:32:5d:8d:c6:cf:14:2c:9e:ad:37:f0:ff:
                    9c:8a:1f:48:0b:6a:1b:2f:a2:13:db:9e:34:04:e2:
                    20:a9:ec:f5:60:19:fe:a3:a4:7e:1e:df:c6:69:b2:
                    a1:c2:0a:3a:18:cc:5c:a2:62:68:49:dc:0d:7f:11:
                    51:3b:c9:ac:83:6f:d3:4d:2e:cb:20:b8:ef:01:eb:
                    a3:5b:d4:52:35:2e:cf:86:b6:31:fa:69:3d:fb:e2:
                    47:67:2e:ea:44:8e:71:2b:26:4e:37:9f:c5:9e:a5:
                    c5:7c:a5:3a:73:9e:b0:0c:a0:58:45:d8:cf:d1:bc:
                    31:8f:63:e2:f9:5d:95:c0:51:99:0f:4c:da:f3:d4:
                    14:f8:29:6b:4b:81:3a:e4:22:ce:1e:0b:d2:4e:83:
                    b4:75:e1:a4:ab:eb:7f:18:a2:13:46:3a:e9:0d:e4:
                    04:83:ba:31:3e:6f:cf:fb:48:73:0c:4d:25:73:4f:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:61:AE:B6:3D:E8:5D:DA:66:40:13:A4:3D:45:AB:11:41:F9:FA:AB
            X509v3 Authority Key Identifier:
                keyid:8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f7:70:31:90:10:1f:8f:ce:16:26:c2:5b:8a:c4:3e:89:92:
         2c:db:8e:8e:49:3e:b3:80:be:34:c2:14:b8:79:50:fe:c5:62:
         06:b3:a0:76:4d:95:1e:b1:63:68:36:98:e9:f8:4c:f8:32:be:
         cc:29:f2:89:55:93:17:2e:e6:37:9d:e1:05:6c:c7:73:eb:c7:
         e9:a4:7d:49:02:cd:d0:d2:71:3c:73:57:b5:55:00:e2:3e:b2:
         33:19:46:ce:3f:7b:6d:e3:e9:1c:f4:45:29:6a:26:fa:44:15:
         64:7b:cd:83:b8:9d:75:0f:b5:54:ab:1e:db:de:c3:4a:04:ca:
         15:92:0f:dd:d4:a4:6b:3e:74:e3:ad:89:22:04:65:9f:e0:b6:
         f0:50:d2:4f:09:df:de:16:6b:80:d4:b4:20:a3:a2:bb:00:85:
         54:51:49:27:65:0a:21:b2:4b:b9:53:ab:6d:44:6a:80:27:b6:
         e9:f3:4d:66:72:0c:76:3a:8f:68:09:b3:51:e6:13:01:44:62:
         26:2e:64:fd:d7:c4:aa:3b:0f:3d:c6:d2:0f:a3:f8:79:f4:d8:
         45:ac:79:a4:f0:5f:3a:f1:db:8e:9a:b0:19:a6:10:fa:6a:af:
         37:28:9d:5c:4b:ba:c6:bd:2a:28:8b:a6:9a:3c:92:a3:39:4f:
         41:88:0c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:18 2025 by rpki-client