Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
File:                     jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json)
Hash identifier:          NHO3HHC6gskFW2l3NXTJ6ihJcwe0ctFq0w7230K/2Ds=
Subject key identifier:   FF:28:D9:AC:AD:74:B6:40:43:03:64:33:2F:9F:A8:70:B4:BB:23:A7
Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
Certificate issuer:       /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Certificate serial:       019874193A2BB65494CFCD20B5D5C94EC92B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
Manifest number:          054F
Signing time:             Mon 04 Aug 2025 08:01:06 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:06 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:06 +0000
Files and hashes:         1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: VPPDxccUnnKQL9opYsJdASA2uL1rdjapuMKNm4rIHFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:3a:2b:b6:54:94:cf:cd:20:b5:d5:c9:4e:c9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
        Validity
            Not Before: Aug  4 08:01:06 2025 GMT
            Not After : Aug  5 08:01:06 2025 GMT
        Subject: CN=ff28d9acad74b640430364332f9fa870b4bb23a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:eb:cb:2b:a1:1a:d7:1a:5a:97:ec:41:da:67:
                    88:dc:e5:19:78:66:ff:37:f6:6b:ab:61:7c:6f:37:
                    f2:f3:46:7d:3b:de:4e:d8:8c:e4:4c:83:44:dc:73:
                    be:c5:a5:1b:54:c3:0a:ae:4e:ba:35:51:72:29:ef:
                    d9:17:bf:e3:0e:b8:87:54:4d:cb:b8:04:4c:52:61:
                    21:c7:0b:76:25:ec:02:d6:cd:99:31:4b:ab:4e:2b:
                    a9:bb:15:32:48:1f:ed:00:77:78:32:5d:ef:12:fb:
                    8b:4d:6d:76:8d:61:bd:d3:a1:1e:5d:2a:5c:33:f1:
                    b1:f6:c5:6b:9f:1c:99:e4:93:8e:58:21:02:aa:04:
                    48:42:f3:5c:d3:13:f4:eb:6b:7d:0b:c2:80:70:41:
                    6f:ee:41:22:d9:3b:17:99:b3:a4:1c:23:93:2d:e8:
                    d6:de:26:ec:75:ea:20:8b:09:09:8b:eb:f4:af:08:
                    8a:63:ad:74:9c:78:4f:15:da:50:f9:14:1d:10:c0:
                    b1:d1:6b:d1:31:e5:cd:a4:ae:60:12:dc:f5:f3:d6:
                    e1:36:61:08:c0:46:6b:05:a1:ac:de:8a:04:38:0e:
                    94:df:d1:ed:8d:c4:04:b3:80:84:72:f7:8b:69:10:
                    18:d1:a7:8b:2f:7b:2a:97:7b:54:4d:82:4c:9f:6e:
                    60:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:28:D9:AC:AD:74:B6:40:43:03:64:33:2F:9F:A8:70:B4:BB:23:A7
            X509v3 Authority Key Identifier:
                keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:ec:28:21:35:51:f5:4f:e9:fc:da:26:63:45:94:e3:ca:
         4c:a4:8d:0c:0e:d4:56:53:d6:25:59:01:d5:a7:9b:c0:22:de:
         92:bf:a1:9d:9f:a0:a6:90:eb:e9:7a:88:ef:57:98:5f:59:81:
         48:8d:5f:23:f8:b7:a5:06:cd:f2:75:e3:11:3c:ad:f4:76:eb:
         54:3f:2b:eb:a6:6a:c4:d1:17:22:82:ab:51:45:d8:65:86:b2:
         ea:a6:0c:c5:17:97:ab:da:9b:78:47:ba:41:3f:cc:87:e1:ff:
         17:52:f9:17:3a:ed:2d:a2:39:70:36:e7:f8:e6:9b:46:f0:60:
         6d:1b:9c:67:65:5a:88:48:84:6a:e2:2b:81:00:e9:35:a7:69:
         b3:39:9a:8f:12:98:28:1d:19:9d:47:82:1c:96:da:9e:a2:c1:
         21:ef:8e:3c:fc:d5:7f:0e:f1:e6:da:70:d4:0e:2a:b5:26:2f:
         9f:07:a8:0c:e9:29:50:91:04:67:ef:e2:83:44:81:7e:47:f4:
         41:08:72:bd:12:a9:89:3b:63:26:2d:9b:5f:dd:ac:d8:20:18:
         35:99:73:7d:9b:d6:fc:0e:2f:b6:f9:95:a1:89:fb:ee:0e:50:
         7f:c6:77:f5:a7:9e:0c:44:6d:b5:fe:79:30:87:1d:78:d6:f5:
         a4:07:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:43 2025 by rpki-client