Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
File:                     rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json)
Hash identifier:          pYyAwrP5yR6o+Qxiab6w3XI67Z2TZrpQOMXQA6dFUfE=
Subject key identifier:   19:BB:8F:98:FE:09:65:EB:53:0E:A0:46:F7:2F:D3:D6:04:F4:DB:1D
Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Certificate issuer:       /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Certificate serial:       019769CE919AE2F2C13E7F01459DC0608B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
Manifest number:          0F09
Signing time:             Fri 13 Jun 2025 15:00:34 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:34 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:34 +0000
Files and hashes:         1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: Obcessjb3SbVknI9jvUgH7lBSDKKXfWTmUEXuMOTO8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:91:9a:e2:f2:c1:3e:7f:01:45:9d:c0:60:8b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
        Validity
            Not Before: Jun 13 15:00:34 2025 GMT
            Not After : Jun 14 15:00:34 2025 GMT
        Subject: CN=19bb8f98fe0965eb530ea046f72fd3d604f4db1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ed:34:b1:70:0f:d6:0f:e8:84:d7:75:6a:c8:
                    a5:d6:77:b7:99:7c:3d:25:f4:cc:d8:46:e7:ab:f6:
                    59:f8:f7:98:b2:80:4b:ce:f9:27:71:4e:9d:55:59:
                    c6:4a:9e:c6:49:06:e6:fa:c4:d3:88:72:bd:5e:a3:
                    b6:bf:58:3a:69:3a:58:1c:8b:dc:3f:cb:e0:67:0f:
                    3d:6e:49:17:d3:d6:20:41:be:c3:cf:53:26:42:e3:
                    31:f3:6d:d8:cb:d2:b1:41:11:13:2d:ce:be:27:fe:
                    1d:08:09:4f:ce:e5:79:5c:99:bc:19:b0:8d:50:08:
                    ea:3d:83:26:b4:32:4b:47:55:4e:b9:f3:6e:96:34:
                    09:c3:86:8d:4d:a3:4c:7b:71:f9:2b:35:2d:3a:0b:
                    cd:dc:9e:b9:e8:ef:25:f3:15:2b:b2:11:56:0a:cf:
                    b2:f9:8a:04:e9:4c:9a:19:79:f4:e4:49:0c:3d:9d:
                    75:31:1d:26:c3:7d:c4:4b:2f:c0:15:bd:68:ff:fb:
                    b8:1d:c8:c7:44:18:34:4b:d7:32:01:20:7d:59:f8:
                    02:78:88:f8:ce:0e:4f:bd:b8:55:ec:32:e2:0c:5c:
                    81:2c:27:4c:36:7c:f0:22:ef:25:fb:dc:77:a0:aa:
                    af:7b:27:dd:0a:e6:e5:96:54:ac:d2:fa:0a:d6:2b:
                    c8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BB:8F:98:FE:09:65:EB:53:0E:A0:46:F7:2F:D3:D6:04:F4:DB:1D
            X509v3 Authority Key Identifier:
                keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8b:12:ac:1b:9a:fa:ff:f7:ee:90:7a:81:49:eb:9a:a6:6e:
         9c:bc:06:29:7b:bc:f9:8a:90:0a:2a:48:38:eb:20:ca:df:73:
         9c:93:88:4b:f5:f2:b6:5b:f0:9a:31:ac:8e:fc:37:c8:25:8e:
         89:3a:9a:e1:c6:65:bf:df:90:65:2f:9a:b8:c3:e9:b2:96:e5:
         2a:a3:0e:13:28:ee:5e:55:79:ed:f6:7b:99:bb:cd:17:17:e8:
         42:17:ad:98:05:e5:eb:e1:45:1a:9d:a7:73:b9:93:5a:9e:e1:
         41:9e:87:cb:46:6a:16:a9:75:48:fd:38:5e:54:ff:a3:c9:8e:
         e0:d6:fd:52:c7:88:9c:da:01:65:d1:71:70:a6:90:71:b8:a4:
         07:d3:ef:53:ef:27:26:ca:46:f7:fc:60:df:89:34:cb:02:94:
         16:e7:a9:95:d3:fb:db:3d:bc:6a:e4:30:6c:c5:ec:f9:07:f7:
         ed:85:0a:92:b2:08:c0:7d:6a:53:a6:f6:bc:3d:2e:7e:15:6e:
         46:fa:18:e6:d1:37:09:bc:e1:91:85:55:d5:8b:67:c0:0b:91:
         16:6c:7d:35:0f:a0:0f:2b:e0:6f:80:23:e9:25:8f:3c:c8:53:
         75:c3:bd:37:69:d8:04:d8:46:d2:cd:72:f9:a8:ec:c5:a5:96:
         57:84:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:33 2025 by rpki-client