Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File:                     jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier:          akAs1hHfZFzCItDkIbyLeOnjVaV1202wdRMpBUHFK24=
Subject key identifier:   91:51:AB:C3:AC:71:A7:C5:D5:71:2D:B4:D0:10:62:6D:A4:CC:89:1F
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer:       /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial:       0197778A6BACE1EE6ADEE1279F80335DFBE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number:          03CB
Signing time:             Mon 16 Jun 2025 07:00:49 +0000
Manifest this update:     Mon 16 Jun 2025 07:00:49 +0000
Manifest next update:     Tue 17 Jun 2025 07:00:49 +0000
Files and hashes:         1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: +7yrDEp4lz5y2FkHVBhT3Tl6KJT2GHvdq2YYu8BjmJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:8a:6b:ac:e1:ee:6a:de:e1:27:9f:80:33:5d:fb:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
        Validity
            Not Before: Jun 16 07:00:49 2025 GMT
            Not After : Jun 17 07:00:49 2025 GMT
        Subject: CN=9151abc3ac71a7c5d5712db4d010626da4cc891f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:20:a3:6d:02:9e:03:8d:17:fc:9e:aa:a1:
                    2f:e8:b1:6f:35:55:df:68:83:92:58:8c:bd:ff:5c:
                    74:a2:0c:2b:56:69:5a:63:96:5f:2e:98:cc:16:c5:
                    09:79:e5:a0:b9:65:1a:d4:45:6a:e1:31:35:c3:e4:
                    af:49:a2:cc:b2:f7:22:70:5e:ce:f2:e8:54:b0:8a:
                    f5:56:c5:13:33:5b:82:d6:1c:94:a2:53:e4:1c:d0:
                    10:d7:9a:ec:ee:52:7b:0d:58:07:96:c6:d7:79:be:
                    89:c9:74:72:c1:b3:f3:2b:81:93:d7:9f:80:1c:28:
                    9f:ae:f0:67:4e:79:9a:3b:8f:cd:90:a5:93:c7:c8:
                    93:7f:54:e0:ec:93:46:d8:b9:85:7b:5c:fc:75:f0:
                    e6:31:4f:0c:11:3c:2e:0e:dc:e6:c7:05:d2:16:5a:
                    7c:44:7f:7e:bb:92:4e:c3:d5:d4:75:e0:0f:ef:0a:
                    ef:d7:0c:8f:01:19:ae:fb:59:ad:be:af:82:29:c3:
                    f4:8f:39:cb:08:27:7f:73:af:4d:80:4c:65:e6:0b:
                    b8:51:81:e1:be:94:d9:72:86:78:ba:43:5e:ac:66:
                    c2:54:50:4c:03:09:1e:09:9e:d3:54:08:75:72:5c:
                    9f:b9:73:12:6e:c8:e1:fa:06:8c:bc:c3:61:37:91:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:51:AB:C3:AC:71:A7:C5:D5:71:2D:B4:D0:10:62:6D:A4:CC:89:1F
            X509v3 Authority Key Identifier:
                keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:49:db:de:27:43:07:02:4e:61:68:a6:ee:df:89:0b:21:92:
         f6:95:8d:46:5b:92:29:83:cb:a5:77:63:e5:b8:cb:0b:62:5d:
         13:84:cc:da:65:54:71:1d:14:3c:54:da:75:e2:f7:4d:66:01:
         5e:e7:9c:48:05:71:d2:ca:31:8c:e1:1f:ac:e6:28:7e:63:57:
         ef:5b:0a:61:fd:7d:0f:bf:01:df:84:6c:24:0a:d2:cc:d0:42:
         3e:b3:01:93:5f:73:10:c1:10:6d:97:83:76:e8:57:e1:42:b6:
         88:c3:e3:ea:76:65:25:59:be:b9:76:14:b8:f9:b8:6b:c8:be:
         43:9f:6c:14:85:2c:5a:f3:d4:63:6d:ce:24:2b:14:c6:b2:e5:
         03:2d:d7:ed:16:4a:c6:ea:53:03:9d:e2:0b:06:7c:6b:f4:4a:
         f5:29:38:4b:e2:1e:90:2b:78:84:25:4c:a6:46:e6:f8:84:a0:
         db:44:0d:69:7c:11:0e:24:92:cb:c5:37:71:f2:20:e3:36:19:
         24:94:01:f5:9a:1a:81:15:a0:14:f5:7d:6c:86:b8:30:bd:13:
         c3:5b:3f:0c:6d:72:51:d5:ae:0a:57:72:8a:9e:b3:d9:a3:b2:
         9d:19:d2:e2:29:70:23:18:9a:33:9c:4f:c1:2d:58:d8:a8:ad:
         36:ad:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:49:02 2025 by rpki-client