Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File:                     jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier:          DL/VE+nb7hCTevv/2/IXmh5CIrkpX3DVh6n1KIOrdvk=
Subject key identifier:   60:46:AF:49:EC:14:74:A4:76:A7:8A:5D:FB:48:47:C0:E3:9E:06:55
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer:       /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial:       0198A15F2A29119DB50CC5A83A3F9874F45D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number:          0736
Signing time:             Wed 13 Aug 2025 03:00:24 +0000
Manifest this update:     Wed 13 Aug 2025 03:00:24 +0000
Manifest next update:     Thu 14 Aug 2025 03:00:24 +0000
Files and hashes:         1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: FxhnUy+P+d8YJNX9CSnsx1ccAC+w8qo9BIIsfznGh1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:5f:2a:29:11:9d:b5:0c:c5:a8:3a:3f:98:74:f4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
        Validity
            Not Before: Aug 13 03:00:24 2025 GMT
            Not After : Aug 14 03:00:24 2025 GMT
        Subject: CN=6046af49ec1474a476a78a5dfb4847c0e39e0655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:dd:a9:a5:da:8d:2f:bb:c7:7f:58:8c:76:
                    26:dc:c1:21:da:20:04:59:d9:07:7a:50:71:c8:77:
                    47:74:a0:82:c4:0d:e5:08:e3:4f:59:cf:dd:0e:c0:
                    98:87:05:6e:20:2d:32:6e:ee:97:38:10:f0:c6:72:
                    b4:07:05:b1:28:76:8b:57:c1:cb:27:fc:3f:a4:61:
                    e0:80:2d:0c:24:0f:b0:d0:5f:ea:e1:aa:d8:72:bd:
                    a1:0e:d2:3b:f3:18:1c:e6:c6:95:af:a6:15:a2:4d:
                    94:ef:53:b7:52:5d:11:7b:a9:12:fd:42:48:88:44:
                    6c:4a:09:08:93:f9:18:5a:fe:2a:72:17:f5:2d:e7:
                    c1:42:eb:22:d1:df:36:68:37:74:27:a7:6a:48:88:
                    67:c3:c7:59:19:a7:f7:7a:40:d9:25:49:ba:b4:9c:
                    70:06:28:04:5e:16:7a:e6:4c:66:e1:92:e6:71:8f:
                    68:97:c6:1b:9b:64:c6:7d:64:cf:66:d6:29:06:64:
                    fc:a3:59:c1:0b:4c:79:b1:ce:79:4b:c1:47:c0:95:
                    e9:0a:ff:14:25:08:08:b9:7a:46:3f:f9:eb:01:92:
                    b6:66:a8:e2:72:88:60:ea:ed:fd:7f:2c:85:76:89:
                    52:6e:b9:e2:50:1e:0f:fd:d5:85:5b:c1:f8:48:9e:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:46:AF:49:EC:14:74:A4:76:A7:8A:5D:FB:48:47:C0:E3:9E:06:55
            X509v3 Authority Key Identifier:
                keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:53:ac:58:98:d1:15:12:32:04:14:67:8b:09:b3:60:b8:0e:
         e8:6d:3e:d1:1d:57:89:42:cc:9f:04:78:ef:01:34:a2:ba:8b:
         d0:c8:35:f9:f2:2c:dd:4d:a8:94:c8:2f:12:b2:8a:e2:06:fb:
         5a:d5:14:36:df:70:89:92:e8:d5:a7:0b:ff:80:7a:c3:73:03:
         d4:44:7e:dd:a2:c5:a3:ab:e1:ba:ad:c9:67:bd:7a:7d:19:63:
         21:9c:bd:83:95:fd:75:14:5a:7c:e3:8b:b6:d4:48:5d:06:b8:
         94:7c:ed:f2:5a:01:e0:3b:5e:7e:94:67:62:b5:26:d5:50:d8:
         3f:c9:5c:96:97:7d:c3:8e:62:4e:b4:b0:77:9e:4a:37:ff:e1:
         1c:8b:96:bc:c7:07:ed:0e:cb:03:14:aa:04:3a:20:ff:29:ac:
         b4:11:66:c3:b6:7e:65:6f:c3:61:a3:87:84:8c:17:02:98:64:
         35:b2:4c:81:0b:6e:8b:b7:1c:82:2c:03:e1:70:db:dc:9b:bd:
         6e:90:63:7b:f9:9a:1c:37:fd:4b:38:37:dc:28:90:ed:e2:4e:
         76:57:db:f4:bb:b2:75:25:e2:e1:52:52:8e:62:56:65:ad:29:
         fb:85:c9:7b:37:3d:4b:ff:7e:ae:f3:ff:18:df:e2:48:d0:1f:
         e2:ba:b9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:34:58 2025 by rpki-client