Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File:                     jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier:          UTC465TTGtNgi3t7QK646IweX1oW0TCz3kukIqc4CQk=
Subject key identifier:   CF:5D:CC:9A:7C:74:35:3E:3F:B3:74:4A:92:61:47:4C:0C:FD:2A:96
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer:       /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial:       0197C802A87EDDFDD7912ED81A0276508364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number:          0D92
Signing time:             Tue 01 Jul 2025 22:01:46 +0000
Manifest this update:     Tue 01 Jul 2025 22:01:46 +0000
Manifest next update:     Wed 02 Jul 2025 22:01:46 +0000
Files and hashes:         1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: Hn6bDpKNxbrAauGd+Koz7IYOP8OYhBQp8Lofg2clFxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:02:a8:7e:dd:fd:d7:91:2e:d8:1a:02:76:50:83:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
        Validity
            Not Before: Jul  1 22:01:46 2025 GMT
            Not After : Jul  2 22:01:46 2025 GMT
        Subject: CN=cf5dcc9a7c74353e3fb3744a9261474c0cfd2a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:f2:f0:62:b9:0d:12:6d:9a:75:31:93:43:
                    05:0d:81:8f:a2:e7:61:f1:c5:4b:99:2e:59:e4:b7:
                    16:47:5e:06:13:99:53:7c:d0:d4:db:8f:98:e6:7e:
                    ca:f5:29:d8:2e:2a:ff:c0:65:4f:f7:84:0a:8f:ff:
                    ea:1b:ca:e8:91:82:ac:f3:78:9c:03:35:f3:a3:cb:
                    08:92:5f:d2:35:f3:04:fb:52:82:88:3d:10:48:7a:
                    6b:61:a2:03:4b:ff:d3:f3:5c:04:df:d4:b8:29:ca:
                    e6:8e:38:b7:38:16:e6:73:35:00:07:a0:5d:58:27:
                    1c:fb:8b:d3:a9:bc:33:39:b4:60:a4:24:58:97:98:
                    d4:64:93:e1:f6:b7:02:6c:00:24:f8:13:98:c3:e4:
                    33:a3:d8:3c:61:21:34:f6:4d:f6:ed:fa:54:ca:e6:
                    54:f5:27:e7:49:d5:fd:11:b8:e1:7b:e7:e6:8c:91:
                    b6:28:2f:9f:a9:c3:c0:99:31:3e:6c:3f:d9:a9:9c:
                    4e:ca:bb:c1:1e:b7:e9:ec:44:27:56:02:2a:a4:92:
                    54:7a:47:85:6f:08:c6:b0:bf:fb:f0:ea:7a:ae:98:
                    49:82:61:5f:a5:b1:80:4d:86:f7:50:e1:dc:9d:ea:
                    31:90:3e:0c:dd:d1:ed:db:de:47:0b:0a:b5:07:bc:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5D:CC:9A:7C:74:35:3E:3F:B3:74:4A:92:61:47:4C:0C:FD:2A:96
            X509v3 Authority Key Identifier:
                keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2f:5b:48:f3:7e:c7:74:89:23:a0:c2:6c:eb:f1:b6:df:29:
         3d:ec:45:4c:a2:dc:18:cf:e1:54:5a:4d:e5:32:f5:0e:2d:a8:
         1a:26:59:62:07:5f:eb:56:1c:4d:98:87:dd:34:96:26:a0:c7:
         4b:51:3e:08:26:a6:b5:dd:fc:87:d4:71:3b:65:0c:60:6c:0e:
         66:fb:b5:cd:bf:74:fd:8e:3e:dd:20:6e:c3:54:fa:c2:17:22:
         44:b0:a3:9b:d6:7a:ba:11:45:6e:79:32:9c:0f:8b:94:cf:43:
         05:85:e9:57:8c:0b:e2:b6:ce:3d:b9:6c:3e:c3:34:cf:64:ca:
         67:bd:00:f7:1b:14:5f:f1:3f:7e:bb:ec:41:01:70:58:0b:dc:
         ca:f7:c0:8e:f5:90:c4:09:6c:e0:44:b0:a5:c1:46:66:f8:5b:
         55:42:7d:82:94:e9:f2:1c:0c:b3:56:d0:76:7c:ee:b2:d8:7b:
         16:ba:be:2f:26:c9:74:55:23:ba:8b:d9:dc:c2:5c:99:a0:d6:
         71:2c:d3:2e:bc:23:e6:ad:00:37:3e:c6:68:13:a3:9e:6e:fd:
         b0:6a:5f:d0:01:f3:5b:14:62:0c:6c:aa:6b:d5:e4:6b:e5:a6:
         db:2d:b4:cc:c9:9b:a5:2e:56:32:d9:38:0c:be:c7:7a:b1:46:
         2b:96:8c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:10:41 2025 by rpki-client