Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
File:                     jsIqh2Rb03Xm2yqguBbooGEOelY.mft (raw, json)
Hash identifier:          7ZKCLJnbjZUiarqpZtslbY9axlJYgXm53jX9Tmezc5I=
Subject key identifier:   17:C0:41:73:F1:70:93:CA:EB:AD:77:4B:91:A8:A4:7E:4A:31:58:56
Authority key identifier: 8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
Certificate issuer:       /CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Certificate serial:       01988A69FF16F0A8475F6D2C1A9D3840F09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
Manifest number:          06BB
Signing time:             Fri 08 Aug 2025 16:00:58 +0000
Manifest this update:     Fri 08 Aug 2025 16:00:58 +0000
Manifest next update:     Sat 09 Aug 2025 16:00:58 +0000
Files and hashes:         1: jsIqh2Rb03Xm2yqguBbooGEOelY.crl (hash: 8Jt/k2CelHY3sGzocHSdgUtBMr8IQyb6pvHNzYuXepw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:69:ff:16:f0:a8:47:5f:6d:2c:1a:9d:38:40:f0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
        Validity
            Not Before: Aug  8 16:00:58 2025 GMT
            Not After : Aug  9 16:00:58 2025 GMT
        Subject: CN=17c04173f17093caebad774b91a8a47e4a315856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:e4:31:30:32:42:c5:26:25:15:10:f5:84:
                    fa:32:f6:88:d1:a8:73:39:af:91:ea:58:fa:07:bc:
                    b2:19:f1:ce:0a:39:c5:2d:12:b0:af:b3:4d:40:d4:
                    0f:63:95:29:4e:73:37:ff:1d:75:11:b5:59:25:75:
                    8a:2f:c1:7c:65:5a:dd:10:cf:42:ba:f1:a1:83:51:
                    c3:d7:20:79:24:d0:8d:88:2f:6b:c7:b8:e6:39:fb:
                    ca:6c:40:6e:66:17:02:d5:dd:b0:b4:f7:6f:5c:83:
                    7a:d6:dd:29:b6:dd:20:2b:3a:7c:cd:06:b9:d9:94:
                    45:19:0c:1a:9a:49:f1:92:fd:98:07:d2:dc:ca:94:
                    f4:f9:94:2f:69:a7:70:de:f3:96:37:4d:d6:db:a5:
                    6e:aa:ed:1c:ea:a0:e6:b1:61:bf:09:b4:65:c0:aa:
                    0c:71:4a:68:64:d9:cf:a4:17:13:2e:c3:45:1b:5f:
                    b4:fb:26:2c:8c:6a:dc:9f:a2:05:a3:ae:24:da:49:
                    6c:58:0b:f4:52:21:ca:cb:14:64:63:98:65:56:48:
                    b3:13:91:5d:76:cc:0b:a0:fc:ca:e1:45:28:85:e0:
                    1e:30:ba:b6:34:1e:9e:f2:28:6b:6c:b6:77:50:49:
                    dd:93:3a:25:3d:a6:d7:27:ee:84:48:3d:4c:b9:07:
                    b4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C0:41:73:F1:70:93:CA:EB:AD:77:4B:91:A8:A4:7E:4A:31:58:56
            X509v3 Authority Key Identifier:
                keyid:8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:da:39:f8:13:8a:94:a3:ee:22:73:a4:5f:5a:d3:1e:57:
         7f:58:8b:ad:1b:1b:86:ed:c1:57:35:d6:5b:6b:81:6a:bd:b4:
         e9:61:9f:0a:93:ca:28:5f:e6:9d:5b:37:9f:dc:5e:5b:ba:0b:
         78:50:66:3f:b6:5e:86:64:74:b0:be:c8:33:82:6e:92:e1:83:
         37:fb:fb:fe:aa:fd:db:e0:c4:e9:c0:4b:48:13:7a:26:e3:55:
         fe:ae:2f:fd:f6:83:ed:49:44:f0:33:6f:de:84:91:6e:b7:7c:
         01:20:08:77:8f:b9:84:1a:f3:0a:b6:09:5f:4f:ad:17:12:6b:
         f6:26:7f:a5:26:54:65:66:cb:7e:ed:06:7b:6e:a3:65:f5:69:
         78:8d:33:a7:37:15:cb:7e:24:af:64:5a:ce:bd:e9:93:88:a5:
         d5:93:8f:fd:91:91:32:49:6f:f4:09:c6:91:f3:c0:e1:0d:8d:
         44:85:66:db:36:f3:21:ec:98:8a:a1:11:12:28:1a:e9:64:55:
         73:f7:34:0a:4a:2e:6d:3e:15:a7:ee:cd:ec:bc:19:c6:f6:ea:
         bc:6a:22:ac:d6:53:83:fc:d9:5f:68:a0:f0:70:66:06:b8:f7:
         81:0c:d1:15:9b:16:72:a8:ac:6e:8e:d5:a8:3f:8e:78:42:11:
         76:4b:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:13 2025 by rpki-client