Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
File:                     JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft (raw, json)
Hash identifier:          bXDIM/KKMolOr+jso50HwKoEjBJv1H5YYNc4s+qnJdw=
Subject key identifier:   6E:D0:C9:97:4E:8F:0C:13:94:97:9D:1B:8E:FC:9B:A3:F6:1C:CC:9F
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Certificate issuer:       /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial:       01987E667C912438FC12A807FA77105B00A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
Manifest number:          0365
Signing time:             Wed 06 Aug 2025 08:01:42 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:42 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:42 +0000
Files and hashes:         1: JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl (hash: x5vheXtQuezuIu02P8GMlPT2ybMZrgS6Nwa0dFzkVb0=)
                          2: iqsUTfguaYVXgXe8Vuc2DqYtis4.roa (hash: 7sUhJ+4DrqI1GXlkga4LbUKQ6fX31R18iQCPmLz2YM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:7c:91:24:38:fc:12:a8:07:fa:77:10:5b:00:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
        Validity
            Not Before: Aug  6 08:01:42 2025 GMT
            Not After : Aug  7 08:01:42 2025 GMT
        Subject: CN=6ed0c9974e8f0c1394979d1b8efc9ba3f61ccc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:72:51:98:21:ed:81:55:43:f3:01:3d:ef:ba:
                    16:3d:92:62:7c:cf:16:a2:bd:ca:64:6a:9c:23:ea:
                    8f:05:88:46:ab:4e:c8:7c:6e:d8:82:19:6f:8b:2e:
                    b7:68:ef:e7:29:2b:81:4d:15:0e:af:b0:e0:73:d5:
                    1c:48:06:ee:85:81:36:17:38:64:e7:b4:53:cb:17:
                    5a:54:91:bc:00:e7:a4:04:43:1e:32:29:45:1b:10:
                    b6:04:6a:68:64:8a:e9:58:59:4a:cf:95:75:54:ee:
                    f8:af:47:a3:e8:71:84:b2:e4:6d:9d:9f:96:1a:01:
                    7e:96:86:26:7f:78:80:26:a5:f6:61:a6:eb:b1:47:
                    0f:ab:4e:53:78:6e:19:cf:6e:00:9a:af:a3:28:2f:
                    6a:af:48:74:54:c9:3f:66:aa:9d:b7:02:b8:6d:a1:
                    cf:db:cf:9e:0a:76:72:4d:76:2e:a3:e9:c1:7d:48:
                    e1:2b:a8:92:8f:0f:f6:65:e4:71:92:2e:b8:bf:26:
                    06:1c:75:57:89:7e:55:20:3e:87:8b:27:41:1c:de:
                    09:44:01:56:b9:9d:a6:9d:5e:68:da:92:f7:7c:3d:
                    b7:4b:56:bd:e8:3b:b8:2e:94:bf:ca:40:db:b0:51:
                    be:03:dc:6c:be:d3:95:fd:92:0b:6d:36:fc:a6:6c:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D0:C9:97:4E:8F:0C:13:94:97:9D:1B:8E:FC:9B:A3:F6:1C:CC:9F
            X509v3 Authority Key Identifier:
                keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:dc:68:c6:eb:54:0d:01:ee:30:37:06:32:58:c8:e7:51:ad:
         7a:bf:dd:f9:c2:8a:0c:ac:53:f1:ed:b2:ff:a1:37:f0:3b:55:
         b2:62:a6:3c:4a:77:ae:a7:82:7d:c2:59:94:20:bd:e8:97:42:
         12:64:d3:75:f1:93:35:9d:67:1f:a5:13:93:2c:e3:03:aa:33:
         be:46:e8:ee:63:36:f3:1d:4f:12:bf:17:16:f8:81:12:ef:86:
         b9:0c:7c:ce:7b:39:f1:ab:1d:93:b6:38:e0:df:d2:e5:0c:11:
         c4:d9:74:2b:4d:e3:73:e5:48:18:5e:0a:21:ef:85:5d:39:ba:
         b6:2a:5f:c6:90:f9:e9:87:8e:d5:59:15:6e:55:83:f2:92:06:
         0a:ce:fa:43:29:d8:79:d7:e2:b2:4b:63:b7:d4:4f:97:d5:03:
         b1:5f:98:da:9f:bc:62:ec:e0:36:d1:2f:36:34:9d:7a:0d:a7:
         a0:08:15:f7:47:72:58:91:8e:2e:d6:4a:49:fe:28:64:8b:5d:
         33:51:30:8b:ee:eb:64:6c:14:3e:31:31:ae:ca:d5:85:7e:08:
         cb:4b:30:d5:82:b0:e1:10:90:d3:62:43:1f:74:dd:b6:ec:88:
         01:a4:75:65:64:25:28:70:93:a9:28:d7:3e:2d:bf:91:de:27:
         89:68:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:34 2025 by rpki-client