Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
File:                     jvSnYgy-f8xHKj2gKckLX72UUZw.mft (raw, json)
Hash identifier:          Y1B3KxbkDXnys5pgA/qoINQiN9y8PGBpSiIYnnvvDT8=
Subject key identifier:   B7:52:74:7E:88:5D:25:D8:B9:DF:40:04:B2:6B:2C:85:44:26:6C:AC
Authority key identifier: 8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
Certificate issuer:       /CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Certificate serial:       019A4EF5C9D9601605EC87D592978A29F09E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
Manifest number:          07FC
Signing time:             Tue 04 Nov 2025 13:02:02 +0000
Manifest this update:     Tue 04 Nov 2025 13:02:02 +0000
Manifest next update:     Wed 05 Nov 2025 13:02:02 +0000
Files and hashes:         1: jvSnYgy-f8xHKj2gKckLX72UUZw.crl (hash: ip93E1IVEO/hQl6U+LujqkvJvGrLozKki1ZOPb7+a3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:c9:d9:60:16:05:ec:87:d5:92:97:8a:29:f0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
        Validity
            Not Before: Nov  4 13:02:02 2025 GMT
            Not After : Nov  5 13:02:02 2025 GMT
        Subject: CN=b752747e885d25d8b9df4004b26b2c8544266cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:7d:7a:6a:87:f5:39:8b:a1:23:16:16:51:
                    fb:46:3d:04:f9:74:2b:23:06:e6:ae:2c:b2:05:71:
                    7a:33:6f:16:f0:d3:cf:40:23:66:0a:61:17:fd:6b:
                    59:f1:2e:1e:2a:ed:59:8f:5b:36:4e:72:e8:2d:1c:
                    8e:a7:af:2d:0e:b7:7c:b2:f8:00:23:78:7e:0b:be:
                    7e:b7:c9:92:8b:58:95:f2:b4:41:b2:f0:1f:39:2f:
                    f2:0f:f8:d8:18:f7:cf:f7:a1:37:f2:ad:9d:2a:98:
                    c5:96:ff:ae:49:80:97:11:7e:4c:82:e6:37:02:47:
                    26:3e:08:69:b8:75:46:a9:eb:4e:58:66:b8:22:8e:
                    c0:f5:69:bb:63:96:23:ef:71:b9:2e:f1:b0:00:a3:
                    ca:a0:b1:44:12:2f:43:6f:78:4a:0e:79:18:c4:2a:
                    fd:9f:3f:27:4c:2d:23:b5:56:29:86:db:d9:14:be:
                    18:6b:e1:cb:b8:89:1a:e2:76:ba:5d:48:aa:bd:f8:
                    c5:b3:f7:9b:60:9e:42:5e:69:b2:01:9c:24:6b:25:
                    a7:01:76:1d:64:7a:2c:0d:06:fa:29:5e:53:a9:ce:
                    f5:bd:4e:e0:07:95:f0:17:ba:df:84:4b:ef:b5:35:
                    e8:5c:13:b8:14:a1:dc:f7:c3:2f:f8:de:e6:c9:e2:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:52:74:7E:88:5D:25:D8:B9:DF:40:04:B2:6B:2C:85:44:26:6C:AC
            X509v3 Authority Key Identifier:
                keyid:8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:01:e0:50:d8:f1:14:e9:9b:40:cb:f0:2a:21:db:da:ef:58:
         d3:76:9b:51:7b:07:9a:dc:91:81:cc:60:3b:51:24:ad:82:64:
         98:b0:6e:a7:c2:95:7d:ec:36:14:97:01:7d:6c:38:54:c4:18:
         1e:ca:74:7b:ed:db:e4:59:09:a5:59:8c:44:32:e4:99:3d:06:
         49:75:2c:f9:77:b5:38:e1:02:25:71:61:ec:1e:9d:c7:bc:0d:
         0b:3b:73:92:e0:b7:2a:d3:38:14:c5:99:79:38:56:46:5a:41:
         89:ba:18:b0:76:97:ec:fc:8c:8c:31:0f:d8:e2:f5:50:db:ee:
         86:c5:59:6c:e7:30:b4:14:ee:1a:e6:ad:3f:73:34:a4:22:bb:
         a5:22:98:92:62:46:4d:37:c1:13:d6:3f:8a:6b:03:6e:66:c2:
         1b:d6:e4:5c:40:8d:11:33:1c:f0:18:22:63:47:b9:11:19:a5:
         ca:9c:4e:d0:2f:98:a5:8a:91:49:97:85:09:2d:05:39:c0:ed:
         98:5c:19:f3:76:e2:fa:75:4e:14:83:d8:27:c6:68:fd:b1:68:
         bd:30:09:01:09:71:23:e1:52:10:df:1a:a6:8b:4c:c7:35:51:
         d5:e7:70:e9:d8:ad:9f:11:aa:a7:fe:a8:f1:0f:29:f4:a6:57:
         10:e6:12:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:09:11 2025 by rpki-client