Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
File:                     Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json)
Hash identifier:          FNmjG0nL+sL1VwncL7j4yqva6DX5v422RgYLd5E/VjU=
Subject key identifier:   5A:9B:7E:D8:3B:C1:7C:DF:CF:64:1F:75:85:22:A1:1A:D4:B9:33:43
Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Certificate issuer:       /CN=267d0cc5bd86d568366657aef0310d493a7176e4
Certificate serial:       01988D340AC00BFE16D2FC202F94876371C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
Manifest number:          1620
Signing time:             Sat 09 Aug 2025 05:00:54 +0000
Manifest this update:     Sat 09 Aug 2025 05:00:54 +0000
Manifest next update:     Sun 10 Aug 2025 05:00:54 +0000
Files and hashes:         1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: gHq8/05pz3sz7SQ9EbSxaMxWeVwTnCdUk2aYM+egQq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:34:0a:c0:0b:fe:16:d2:fc:20:2f:94:87:63:71:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4
        Validity
            Not Before: Aug  9 05:00:54 2025 GMT
            Not After : Aug 10 05:00:54 2025 GMT
        Subject: CN=5a9b7ed83bc17cdfcf641f758522a11ad4b93343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:10:fb:47:bd:8c:4a:61:fb:81:ce:01:03:7a:
                    3f:bf:be:33:c9:8c:f8:3d:98:23:c3:22:01:d0:21:
                    06:c9:3f:b1:a5:31:79:bb:3d:72:ba:dd:fd:02:24:
                    79:a4:03:98:03:87:4e:32:e8:90:39:02:c6:2a:3d:
                    27:98:b3:ae:9d:ad:a4:4a:16:9d:ca:1e:35:a1:5e:
                    c6:5a:8b:2b:d4:08:83:dd:2c:ad:cb:0a:bd:82:06:
                    ca:9b:dc:72:3c:ab:d7:dd:b9:da:d2:4d:0d:93:f6:
                    04:99:c1:ee:6e:ca:bd:70:f9:e7:11:58:f3:db:98:
                    c2:d2:ed:b0:9e:89:b3:cc:5d:a2:d9:9d:4c:ac:60:
                    2a:92:d1:2f:86:5e:59:3a:05:10:f4:32:2f:d0:10:
                    b1:43:8b:c7:95:a1:ec:19:2b:31:9e:79:7b:93:d4:
                    ef:78:1d:a3:da:40:31:84:a8:96:89:d9:98:41:cb:
                    ab:13:11:f2:57:08:1d:b5:3a:bb:ab:7c:35:53:da:
                    18:e6:12:23:d0:73:d3:8b:25:9c:9c:4e:fe:83:6a:
                    cf:82:f8:d0:48:d6:f3:00:67:af:25:79:29:f2:b8:
                    25:f7:85:1d:0c:e3:a1:0f:f6:d2:41:04:f2:77:2a:
                    c1:ef:f6:34:45:a7:25:37:61:7b:42:8c:4c:ec:a0:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9B:7E:D8:3B:C1:7C:DF:CF:64:1F:75:85:22:A1:1A:D4:B9:33:43
            X509v3 Authority Key Identifier:
                keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:21:cc:6a:9d:84:90:82:19:87:4e:21:9a:0a:67:de:d3:e5:
         f8:fc:ef:95:fe:8b:40:26:bf:08:8e:c6:49:c6:30:a1:63:49:
         23:6f:b7:da:ea:8e:10:d2:d8:f7:8f:4e:48:10:64:74:e6:57:
         53:c7:48:f8:51:7b:d1:f8:3a:e8:24:a9:15:1a:aa:a9:79:2f:
         99:a2:e8:e6:a5:ce:67:43:07:d8:1d:d1:60:2a:21:b8:0b:cc:
         3c:06:f0:c2:a2:92:74:d4:b7:95:78:77:c6:cd:cd:96:5a:a6:
         8a:c5:a4:d0:c6:82:cf:30:3b:9c:4d:e1:5a:b2:27:67:ab:1f:
         bf:cd:8e:65:4a:08:5a:61:eb:39:7c:91:32:72:7d:06:c6:4a:
         7e:11:36:5e:87:8c:4a:81:b7:cb:36:82:11:d9:63:d6:4b:9b:
         e7:50:37:9e:91:1c:4b:cf:27:de:ad:e7:51:87:59:4c:c7:56:
         06:31:9d:12:9e:71:2c:e6:0c:87:8a:f7:8c:c0:a3:65:02:6b:
         ee:24:d6:e0:e7:02:a4:e4:53:94:a8:5b:3d:89:e6:8d:28:fc:
         02:43:81:ee:fa:19:d5:b2:30:c4:e8:9a:3b:54:c3:b3:31:a5:
         4f:bf:25:d9:11:96:f1:c1:d0:30:bc:78:49:74:59:21:6f:ce:
         c6:43:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:58 2025 by rpki-client