Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File:                     jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier:          k8YR/MQLHw5qzXVbwKJMB//NbhSi0ojGNLT6SgfI9+Y=
Subject key identifier:   4F:2F:DB:D9:B2:F5:89:86:9B:6F:0D:87:28:14:2E:78:C9:DC:7B:EC
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer:       /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial:       019873E2E5397E96C13471DBEA725DDCA135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number:          05C1
Signing time:             Mon 04 Aug 2025 07:01:46 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:46 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:46 +0000
Files and hashes:         1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: TFYN+taXIFL4zJoejXE1n1xujdefy6VHRl+ZwxgtYOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:e5:39:7e:96:c1:34:71:db:ea:72:5d:dc:a1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
        Validity
            Not Before: Aug  4 07:01:46 2025 GMT
            Not After : Aug  5 07:01:46 2025 GMT
        Subject: CN=4f2fdbd9b2f589869b6f0d8728142e78c9dc7bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:4b:53:4d:6d:d9:a7:a5:58:a7:32:68:79:
                    76:58:db:82:e9:df:2c:03:78:c6:e0:fd:60:09:04:
                    33:58:3f:e2:34:3b:3a:cd:47:93:aa:2b:b2:55:d6:
                    5b:41:5d:f3:2b:47:cd:77:e3:b7:46:4f:bd:93:e8:
                    84:a1:5e:cf:2a:7c:cc:83:8e:ce:bb:59:be:94:64:
                    b0:dc:18:a2:a8:36:54:6a:f7:6a:fe:fb:5e:e2:8e:
                    2f:b9:c3:75:5e:18:dc:b9:53:01:c2:47:db:f1:4d:
                    92:90:1f:d7:4f:4e:a4:e5:34:34:28:de:e3:e0:c9:
                    5f:62:54:2a:02:35:a7:34:b8:ec:25:31:7a:aa:89:
                    37:49:61:e8:11:13:ea:b9:78:49:29:e6:87:2e:94:
                    17:bb:a0:1a:5c:25:4a:f1:eb:fd:00:9a:f2:a2:46:
                    b9:6d:4e:54:51:45:b9:04:34:76:ed:06:9d:57:20:
                    96:fe:e4:76:f9:2e:4d:fb:64:7b:93:14:a2:bd:e2:
                    ba:a2:66:69:d8:92:82:8b:e9:e4:c1:38:eb:8a:07:
                    a9:c4:99:0c:90:8c:b9:19:95:2c:a4:f7:d0:da:0c:
                    5f:48:39:94:0e:d7:f4:21:37:ce:5d:95:84:36:03:
                    89:c1:bd:9f:36:74:68:e6:00:61:51:69:26:a8:dd:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2F:DB:D9:B2:F5:89:86:9B:6F:0D:87:28:14:2E:78:C9:DC:7B:EC
            X509v3 Authority Key Identifier:
                keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4a:ec:53:e9:36:41:5f:aa:6b:ac:21:96:46:17:d7:00:96:
         0f:5b:e2:d5:8a:fd:8d:cf:ed:56:42:1e:19:6a:85:b0:0f:96:
         0f:2e:e6:f0:dc:87:4b:ea:f3:89:b5:7a:e4:f6:b6:8e:65:02:
         2c:02:0a:e9:9a:6d:b1:1a:42:5c:ac:ed:59:26:75:02:69:3f:
         9f:9d:5b:92:f0:be:5e:5b:4f:07:58:ba:0b:98:5c:97:67:eb:
         ef:d8:88:39:28:92:3d:5f:9c:3a:08:64:93:f6:aa:2d:56:53:
         65:c8:66:0a:3a:c3:ac:ad:e9:eb:15:40:ce:f8:17:09:cf:d5:
         2d:1e:89:e4:0a:46:39:4e:e2:58:98:4b:c7:71:5f:c4:5a:b6:
         06:a8:d7:03:8b:80:b7:9a:39:a7:68:fb:63:64:5f:88:b0:26:
         90:4b:8b:4c:e5:91:ef:6c:fb:e9:27:40:7b:0a:fc:af:65:fb:
         af:22:82:70:93:42:be:a9:25:d2:2a:21:c8:8c:5c:ef:87:6f:
         a0:3c:44:db:18:b5:f9:9c:d9:ed:7b:69:f8:56:02:7c:df:a6:
         70:7d:86:2f:12:41:91:a6:a9:26:52:5e:86:4d:d2:c5:a3:e9:
         2b:a8:76:d0:34:f6:d9:94:8b:7c:2a:a2:f5:9e:6f:3d:74:99:
         64:7b:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:26 2025 by rpki-client