Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File:                     jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier:          2cY7mvyN+Cr3i06fIxHIWhPrlyOgzW8+97/duQ/Ygrs=
Subject key identifier:   6D:7F:8B:E2:97:EC:B7:92:4B:6C:DD:7F:18:CC:51:14:33:5E:53:EB
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer:       /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial:       019883F9F34B110ED10C6F96564DEBE31B0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number:          1622
Signing time:             Thu 07 Aug 2025 10:00:52 +0000
Manifest this update:     Thu 07 Aug 2025 10:00:52 +0000
Manifest next update:     Fri 08 Aug 2025 10:00:52 +0000
Files and hashes:         1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: q4dnjtBIZw+Wb6A3WAA5Sj1W4NHhzIZ/FsMJ/KhKIiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:f9:f3:4b:11:0e:d1:0c:6f:96:56:4d:eb:e3:1b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
        Validity
            Not Before: Aug  7 10:00:52 2025 GMT
            Not After : Aug  8 10:00:52 2025 GMT
        Subject: CN=6d7f8be297ecb7924b6cdd7f18cc5114335e53eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f5:50:99:fa:46:c6:5b:7b:20:a6:f5:c8:f7:
                    b6:b5:ac:a7:6f:28:2f:ae:70:0a:0e:56:08:de:1e:
                    39:8c:76:20:c7:e6:bc:b1:9e:78:0b:52:bc:e6:75:
                    49:12:ff:62:b7:2f:b0:2e:a2:f1:94:b7:38:d1:c1:
                    b5:16:c5:85:8a:dc:95:f2:35:e3:98:db:08:3c:30:
                    7c:71:7c:83:ac:b7:85:db:b1:db:4c:08:a3:d6:f1:
                    a6:bf:96:64:8f:c7:7e:d6:06:33:59:4a:cf:08:f5:
                    25:e2:c8:93:f1:43:91:0b:91:8e:1d:0a:4e:e1:e0:
                    79:3b:90:54:2c:63:5b:4a:ed:73:38:8f:a7:30:2e:
                    6b:1e:71:61:89:75:6b:76:89:af:36:4d:18:b1:62:
                    3b:6b:e8:31:d3:76:3a:24:68:cc:33:43:9c:16:49:
                    49:69:cf:44:f5:05:b2:72:d8:4c:08:a3:b2:d6:9b:
                    a6:b8:03:d7:bb:e9:bb:62:b1:9e:89:47:0b:e5:51:
                    6e:59:c0:8a:93:d6:6c:d6:ae:14:31:b8:c2:16:be:
                    f6:75:b8:d8:af:1e:7f:31:66:ba:16:ce:50:53:3c:
                    3d:99:39:1a:58:70:49:d4:58:32:25:db:83:66:92:
                    d2:7a:5a:cc:da:b1:4d:bd:66:5a:fd:ea:31:46:eb:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7F:8B:E2:97:EC:B7:92:4B:6C:DD:7F:18:CC:51:14:33:5E:53:EB
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ea:c0:1f:80:0e:39:3f:36:0a:c6:ac:a2:ab:38:4c:5b:2a:
         10:b5:d3:4f:c6:18:04:96:d5:57:f4:4f:b5:d5:5e:22:5e:d0:
         4b:38:9e:94:31:77:69:ed:2e:1a:70:91:56:3c:e3:88:1c:7b:
         37:fb:6a:13:cf:72:d2:6b:1d:96:2b:5d:67:80:06:a4:cb:80:
         60:36:3c:cb:ab:7d:cd:fd:39:39:75:94:d1:22:33:8b:f2:e7:
         d4:4e:e6:cd:1e:0c:a4:33:ce:10:3d:ce:0e:df:91:fc:c7:82:
         55:ff:9b:3c:ea:97:a1:a3:63:ca:4f:ed:10:f4:fb:d9:62:5f:
         be:78:5f:15:d7:9a:67:68:ec:b1:c7:83:9a:eb:04:ad:6f:1f:
         20:1d:96:fe:5a:67:df:a8:d9:e1:f0:f3:a8:18:38:18:4a:92:
         cd:a5:12:4e:7f:81:ec:b4:70:73:08:43:75:d5:4d:bb:6b:94:
         a9:fc:a0:db:c2:9b:7f:8d:b0:d4:d7:bd:23:bb:70:41:59:b9:
         73:3a:3f:af:a8:f8:c6:d5:4c:f8:0d:3d:d4:71:78:d3:e8:35:
         1b:91:0c:b2:59:fa:4a:f6:bf:04:a8:d4:43:1f:f4:4a:8d:30:
         5a:d0:df:37:e0:43:d8:02:6d:9b:0e:c6:0c:45:68:4d:c1:ad:
         e2:f5:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:39:31 2025 by rpki-client