Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File:                     jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier:          chqgxM3CApWSc2eeCEh3cSkFuuwDiP7+dJN7/kJqsU8=
Subject key identifier:   A4:EA:E0:91:93:D1:A6:65:80:C8:71:79:32:AD:59:1E:17:3F:3A:AE
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer:       /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial:       0198820BAA06EC6651B9E8AF93513ECDB76F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number:          0455
Signing time:             Thu 07 Aug 2025 01:00:59 +0000
Manifest this update:     Thu 07 Aug 2025 01:00:59 +0000
Manifest next update:     Fri 08 Aug 2025 01:00:59 +0000
Files and hashes:         1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: gQPSF4X69FSJw/cYpEbr9TO6K2Y8hzGKinJdjAmWCZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:aa:06:ec:66:51:b9:e8:af:93:51:3e:cd:b7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
        Validity
            Not Before: Aug  7 01:00:59 2025 GMT
            Not After : Aug  8 01:00:59 2025 GMT
        Subject: CN=a4eae09193d1a66580c8717932ad591e173f3aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:75:ab:54:16:04:47:53:8a:d0:a4:28:47:
                    21:43:d6:5e:66:9f:1d:71:37:cc:49:5b:41:3b:41:
                    4d:0c:b5:36:28:a8:55:a4:7d:a0:d4:bd:71:6f:02:
                    4c:b0:5c:1f:6a:91:07:68:0f:d7:c4:6e:e6:3b:35:
                    c9:a6:b3:4c:05:99:5a:44:b3:4b:00:6e:56:80:cf:
                    aa:32:3d:f9:17:5b:c7:4d:cf:60:0c:3b:73:29:ac:
                    5e:0e:00:4d:fd:88:df:f4:0b:c1:a6:bc:dd:8c:2b:
                    0f:e0:c4:80:55:f1:eb:ab:16:4e:cb:3f:5b:ec:09:
                    a3:9a:75:df:3e:50:c6:89:cd:20:82:61:0b:3a:0c:
                    c4:01:38:f1:29:5c:52:71:a5:00:24:67:0c:2d:75:
                    61:b0:be:15:8a:df:76:bf:53:bb:9b:7f:01:ff:0b:
                    90:95:da:41:2c:4e:f7:23:ae:50:03:31:18:a5:13:
                    78:47:14:0d:85:17:08:22:8d:6e:6d:6b:69:bb:bd:
                    2e:11:62:d8:81:fa:a7:06:52:6d:f3:06:6e:ac:02:
                    12:a7:83:db:47:79:f9:43:cc:d3:46:d2:6e:81:48:
                    14:26:7a:d3:4b:7c:80:3b:b0:1b:5c:4c:c2:83:82:
                    15:be:43:71:ce:47:63:b1:0c:9b:c6:c0:27:9a:cd:
                    34:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EA:E0:91:93:D1:A6:65:80:C8:71:79:32:AD:59:1E:17:3F:3A:AE
            X509v3 Authority Key Identifier:
                keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:bd:38:40:e7:e6:75:af:8f:25:66:07:d7:d0:77:a3:90:
         a7:08:1d:02:77:cc:dd:8a:5e:e6:91:2a:3c:7f:96:10:21:06:
         90:b0:fe:37:48:5f:23:99:e0:e0:4a:94:e6:94:01:1c:b8:c9:
         42:61:04:0e:5c:2b:33:d3:9a:ef:3d:29:e1:d4:06:47:90:63:
         b8:a8:53:cb:1b:da:a2:47:94:45:3e:cd:0a:b5:4b:4e:e9:40:
         87:b0:81:25:1f:86:68:c2:e2:c3:50:d5:68:8d:16:b1:dc:d6:
         60:8a:2c:42:11:0e:c6:3f:e3:78:dd:95:e7:47:c5:31:6d:b3:
         bf:b8:d8:1e:77:5e:1f:53:05:7e:cd:e2:f9:d2:25:ee:fd:b0:
         9c:4d:99:d5:c3:ed:e2:4e:f3:c7:59:5e:53:19:1f:49:4c:4b:
         64:41:74:63:c3:db:1b:6c:e4:94:a2:99:55:f8:67:5d:57:5b:
         c3:6c:ee:9e:fa:b3:d0:a1:1e:b2:96:87:e4:c0:cb:34:91:c7:
         e5:29:9c:50:91:1d:9b:29:5b:7a:2b:63:b7:4b:00:fb:a2:7f:
         48:03:c5:39:e5:b7:44:61:f7:ed:14:20:8f:e5:16:dc:bd:72:
         68:85:32:9d:29:a8:ce:02:7e:0d:c6:9f:21:b4:89:b3:5e:f9:
         5e:e2:4e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:34:18 2025 by rpki-client