Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File:                     cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier:          5Mo9SlTldBCaWZeOHAB665wysaQe8ZkksTGrRsJatB0=
Subject key identifier:   18:0B:F9:1F:26:45:DE:D6:B5:53:20:24:E7:29:BB:5E:74:58:01:CD
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer:       /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial:       01987D1C78F4FDE829C30C4F6D14364FDCD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number:          0AF1
Signing time:             Wed 06 Aug 2025 02:01:14 +0000
Manifest this update:     Wed 06 Aug 2025 02:01:14 +0000
Manifest next update:     Thu 07 Aug 2025 02:01:14 +0000
Files and hashes:         1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: QCisUa6OOC+owT/6N62gfYx61Z49vEBjEAo+MxqJsnw=)
                          2: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (hash: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:78:f4:fd:e8:29:c3:0c:4f:6d:14:36:4f:dc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
        Validity
            Not Before: Aug  6 02:01:14 2025 GMT
            Not After : Aug  7 02:01:14 2025 GMT
        Subject: CN=180bf91f2645ded6b5532024e729bb5e745801cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:dc:60:38:b7:37:27:91:ae:ae:b8:8a:a1:
                    11:31:47:83:f7:9b:28:9a:1f:53:63:10:f0:fb:aa:
                    aa:2b:87:b9:6e:44:a0:a0:65:ad:c2:a4:08:bc:f4:
                    58:35:58:b1:fc:4a:12:04:1a:ec:a5:aa:f0:1f:70:
                    dc:8d:1d:e1:0b:b2:0e:6f:46:c4:b7:d6:e7:64:50:
                    e6:5f:f8:8d:bb:57:7b:36:ea:64:d5:03:13:2d:3f:
                    4b:9b:54:0b:96:6f:47:e5:55:46:be:ca:e9:85:2d:
                    36:df:74:99:16:69:d5:11:cd:48:2e:6a:f0:6d:f9:
                    10:02:2c:fe:26:31:30:b0:4a:78:34:2e:0f:ab:18:
                    76:20:d5:d9:59:4e:7f:10:93:03:0e:52:fe:f7:4b:
                    85:96:7f:f5:28:01:89:a6:fe:b0:6f:ec:7d:2b:9e:
                    72:3a:83:b1:1c:e0:27:a2:56:bf:ec:96:cf:8b:e8:
                    e6:8e:2d:34:bf:08:0b:e9:06:82:26:12:25:b1:07:
                    11:b2:0d:e4:c0:13:3c:ef:5f:62:ae:fc:67:c7:94:
                    98:0a:b2:b8:a1:8c:e0:a4:b3:9c:3e:b4:2c:d6:45:
                    b0:75:3b:ce:e9:e4:b7:f2:0a:03:1d:c9:7d:d3:20:
                    ae:9e:b3:d4:c9:e5:44:d0:7b:0d:d0:e4:3b:3c:81:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0B:F9:1F:26:45:DE:D6:B5:53:20:24:E7:29:BB:5E:74:58:01:CD
            X509v3 Authority Key Identifier:
                keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:02:df:78:7f:dc:df:50:92:d7:e0:4b:bd:a8:81:91:c6:0b:
         f3:f8:d7:2d:b8:e9:8d:d0:30:22:80:9e:56:34:74:1b:cc:7e:
         8d:cb:3d:5b:3b:43:4b:ae:00:36:0f:36:02:20:ad:8d:43:5b:
         3b:ec:94:14:9a:db:07:ff:aa:c3:3a:44:58:51:c3:61:01:88:
         c8:f4:ce:ad:fc:5a:7f:c1:98:cf:a6:f0:26:83:f1:b9:c7:4c:
         f4:f6:7b:c4:f4:ea:84:14:26:64:c3:71:d8:8c:79:72:3f:2b:
         1b:f5:02:33:f2:db:d4:3e:17:b3:e2:3e:14:3f:81:65:08:84:
         b8:06:62:45:0b:83:38:dd:b3:c0:7d:9a:53:29:61:78:30:47:
         8c:bf:85:a1:ee:15:1a:ee:fa:40:aa:ae:56:3c:67:3e:04:ab:
         9e:7a:0f:1f:0f:1b:7a:d5:10:61:a9:9d:3d:98:0b:70:9e:27:
         f8:03:6d:72:b4:30:6c:24:5b:1b:c7:43:77:11:c8:cb:de:65:
         7f:0d:47:52:97:33:72:7e:8a:7d:83:7e:63:f7:14:e4:f1:5e:
         80:87:55:02:e0:75:eb:be:0f:23:0e:f6:84:f8:77:1a:69:43:
         17:34:2a:26:e5:d6:24:c0:5c:c2:23:3b:e4:c3:40:85:9f:0e:
         86:97:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:22 2025 by rpki-client