Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
File:                     j7ev7MJi-jz8WRYejpeLYo4_E2E.mft (raw, json)
Hash identifier:          1pLIEo2cW3JwkSIolc4MH+VKpHkfUJs1INrgqCikDRo=
Subject key identifier:   9A:47:08:6A:4F:71:70:FA:6F:24:91:50:72:61:24:8D:C5:33:3F:EB
Authority key identifier: 8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
Certificate issuer:       /CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Certificate serial:       019873E2E281E4FF06E9F5834D3F2E66AB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 07:01:45 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:45 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:45 +0000
Files and hashes:         1: j7ev7MJi-jz8WRYejpeLYo4_E2E.crl (hash: Q5feTXDMkUrKkLeURZcEEls2JqMLI/9tFi2S7myEwCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:e2:81:e4:ff:06:e9:f5:83:4d:3f:2e:66:ab:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
        Validity
            Not Before: Aug  4 07:01:45 2025 GMT
            Not After : Aug  5 07:01:45 2025 GMT
        Subject: CN=9a47086a4f7170fa6f2491507261248dc5333feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:14:ff:8b:5e:60:1a:95:83:5b:56:85:fd:
                    b3:a1:97:d2:78:c4:4a:58:60:e2:8b:3f:10:8b:4f:
                    c6:d2:8c:2d:cf:68:98:3a:5f:cf:2e:3c:df:ae:f1:
                    ed:75:50:67:75:0f:a9:6c:42:5a:9f:00:f5:89:5b:
                    83:e6:6a:fc:b1:cd:8d:16:9b:90:4f:5d:ba:48:4f:
                    5e:e3:3c:73:d6:ae:11:49:6f:ed:24:3f:45:49:af:
                    c5:8a:fd:d2:84:3b:06:25:00:85:52:b5:1c:78:71:
                    16:f4:07:b0:e6:de:9e:b5:90:01:71:3c:55:89:d3:
                    a8:92:7f:75:e6:ca:5b:13:12:75:bf:4c:a6:0e:ae:
                    8e:b3:3a:3f:8e:52:00:1b:fa:fc:5e:eb:85:b6:44:
                    de:ea:31:e5:f2:b7:70:a0:d0:5f:41:27:1e:4c:69:
                    42:9c:2d:60:9d:d4:21:41:6a:e7:0c:da:19:4c:df:
                    cb:a3:e2:e7:c5:fa:ff:16:f8:45:43:8c:d3:c7:68:
                    95:0a:06:a0:48:95:3f:65:0e:c6:d1:46:39:72:d8:
                    10:ef:e7:96:48:09:2d:2c:3b:c9:d4:2e:a8:04:21:
                    f6:6c:4b:9d:75:9b:3f:72:05:81:a3:cb:a5:4d:c9:
                    d9:e4:13:b5:67:af:48:0a:2e:42:ae:e7:fc:0b:8c:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:47:08:6A:4F:71:70:FA:6F:24:91:50:72:61:24:8D:C5:33:3F:EB
            X509v3 Authority Key Identifier:
                keyid:8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5f:87:9f:ed:8a:7f:e3:85:c1:6c:ea:e0:cf:fe:7a:c4:ad:
         26:c8:84:07:27:08:4b:be:ba:b8:d8:22:7b:a4:1c:ef:54:62:
         0f:7d:80:61:71:20:37:8e:58:da:32:9c:0e:1f:02:bd:b7:18:
         07:9d:1d:66:12:77:02:3f:9f:81:cb:80:8e:32:b8:00:d8:4f:
         30:31:90:23:66:88:fe:dd:44:d1:93:b4:f8:52:dc:a1:86:b1:
         91:56:f6:17:df:85:1c:b7:dd:44:d9:1d:5d:95:39:b3:63:f3:
         37:0f:e0:a1:4d:7d:b8:8c:9b:62:fa:df:a3:5d:c7:d4:83:9c:
         13:6c:0d:83:07:5c:a0:f9:0c:1c:b0:46:df:ca:28:50:b6:43:
         29:4c:e7:a6:08:a8:4f:8a:f1:ba:ab:6c:37:a4:54:af:7a:06:
         7e:f6:aa:f4:ba:a0:52:09:15:cd:0e:11:d8:e4:bc:b1:65:9a:
         ff:ed:0b:e1:9d:7e:ae:db:1e:96:d0:56:b5:2b:1e:e4:40:4c:
         e4:6e:90:4b:db:2a:4a:89:01:81:6e:fd:81:52:09:b5:0e:7d:
         3f:18:ee:5e:9d:9f:cf:fb:c7:76:77:01:a0:4f:31:d5:1e:12:
         8c:ce:56:a0:e4:a0:e4:cb:cf:cf:d7:dc:1a:c1:b1:06:ef:e4:
         d9:49:88:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:38 2025 by rpki-client