Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File:                     J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier:          wB1ASe9urBZN5LDvBBBmZIMZVmjSXodYapOxVdlL7zQ=
Subject key identifier:   73:D3:AB:22:FC:62:3A:DC:AE:55:EC:EA:FB:65:4E:EA:8A:B5:7A:8F
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer:       /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial:       019874BDD1B113EBE369E9C2476F2BBD2F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number:          11E8
Signing time:             Mon 04 Aug 2025 11:00:53 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:53 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:53 +0000
Files and hashes:         1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: oJc2/zEMrwaXjM/T970zxPL2459C6qQHT5b9+XfJCmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:d1:b1:13:eb:e3:69:e9:c2:47:6f:2b:bd:2f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
        Validity
            Not Before: Aug  4 11:00:53 2025 GMT
            Not After : Aug  5 11:00:53 2025 GMT
        Subject: CN=73d3ab22fc623adcae55eceafb654eea8ab57a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7e:22:49:71:ad:1e:9c:a2:f2:b4:81:b7:1b:
                    e2:84:cd:ec:8e:a1:94:12:0f:93:e2:88:17:e8:43:
                    b1:f0:ad:03:43:33:f5:80:2d:a4:d0:68:18:ea:56:
                    87:fa:52:26:ea:04:4b:a2:db:f1:ae:27:f6:8b:a8:
                    24:11:c5:05:c9:f8:89:57:b6:0e:a9:bf:d7:72:85:
                    c4:5c:be:4a:a0:d8:f8:11:2d:33:62:18:ee:29:fb:
                    cb:02:ee:25:ca:3a:e0:99:5b:11:62:db:99:a7:2d:
                    5d:6d:d6:6b:be:cd:2f:82:45:bf:96:1c:8d:d5:d8:
                    f0:46:56:cb:aa:5a:a1:e5:e9:97:8e:15:b4:27:9b:
                    c6:61:5c:b1:3f:c9:fc:58:02:c0:a1:66:f2:fe:7d:
                    12:9c:13:e2:c4:3f:3c:f0:f5:b7:6d:02:ab:c2:80:
                    ad:af:21:e6:18:f0:e7:5d:40:d7:5b:cd:2c:84:72:
                    27:a3:39:dd:8c:33:e5:c3:0e:69:b9:ce:b8:ce:5e:
                    6b:7c:03:60:37:91:f5:0e:4b:8a:fb:82:f3:8f:77:
                    54:e9:e7:b1:26:d3:77:fc:ab:11:a3:88:b2:ae:e1:
                    b4:06:8e:eb:56:06:a6:43:72:b4:a7:e4:f6:fc:19:
                    cc:66:6f:e2:1b:21:73:ae:2a:28:21:6e:77:5a:e0:
                    5c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D3:AB:22:FC:62:3A:DC:AE:55:EC:EA:FB:65:4E:EA:8A:B5:7A:8F
            X509v3 Authority Key Identifier:
                keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f0:41:48:a0:d6:63:b8:a8:9f:21:33:5c:cc:8d:b8:f6:c4:
         a7:84:0b:43:fc:18:cb:57:b2:0f:eb:48:00:3c:cd:6f:9d:1f:
         12:ae:85:35:71:bb:a9:09:eb:17:74:7d:07:a4:91:4b:4f:fd:
         54:3e:db:d4:90:64:9b:92:b5:4b:c2:e2:9a:3d:7e:6f:b7:a9:
         4e:c5:d6:58:18:64:fc:37:16:95:8d:24:5b:5d:8d:0f:c3:bb:
         ed:cb:26:6a:c9:f9:96:34:3b:d7:a8:72:2a:d0:7b:bf:60:c5:
         e0:5f:c9:dc:da:53:00:6a:b2:10:48:9a:5e:31:3f:90:34:6d:
         97:8a:92:42:5f:c9:5e:11:c7:98:c2:3e:5e:20:56:fa:c8:fe:
         01:43:42:68:e0:ce:e7:64:7b:ce:e2:9e:f4:5f:44:2b:59:eb:
         b0:6a:da:22:d6:88:62:35:a4:d3:b8:a0:92:da:12:07:7a:21:
         c4:c2:d9:2b:37:d2:52:e0:d9:ba:73:29:07:d5:f3:04:d2:63:
         09:50:82:89:85:ea:c6:f1:62:46:cd:d5:aa:21:a1:09:44:54:
         81:8b:70:4c:7d:50:f6:4c:46:97:4a:6e:6f:44:64:b6:03:12:
         8c:cc:79:be:76:85:15:07:29:48:d2:2a:a7:0a:02:2e:16:b5:
         cf:80:ea:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:48 2025 by rpki-client