Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
File:                     Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft (raw, json)
Hash identifier:          wcLOUbejZ6+OlOgxn74ZTy4zdE1HsrV0uVysdKD/ei8=
Subject key identifier:   07:A2:E3:21:59:D6:7A:EA:2D:7B:6C:97:7B:1C:B2:D7:07:18:49:80
Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
Certificate issuer:       /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Certificate serial:       0198D47405F763C6DDE6C4C54968B2851851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 01:03:50 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:50 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:50 +0000
Files and hashes:         1: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl (hash: Xa6FTuYCg4S6FK++G/PjJf7dvwpR75IKpxsO0tcKVaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:05:f7:63:c6:dd:e6:c4:c5:49:68:b2:85:18:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
        Validity
            Not Before: Aug 23 01:03:50 2025 GMT
            Not After : Aug 24 01:03:50 2025 GMT
        Subject: CN=07a2e32159d67aea2d7b6c977b1cb2d707184980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:e3:98:4c:af:1a:90:ca:51:5e:b1:2b:a2:
                    39:29:54:18:12:24:e6:c2:3d:c7:e5:bf:8d:aa:99:
                    c7:cf:87:f2:a0:a5:ab:17:53:97:c4:98:8a:e2:81:
                    40:86:17:41:18:e5:5b:f7:87:8b:e4:84:5d:f7:6d:
                    ca:de:5d:d1:b2:25:67:82:4f:58:d7:f1:ae:c8:34:
                    96:4d:9b:7a:23:a8:3d:1d:c1:52:2b:99:85:8a:92:
                    1e:94:53:39:ca:ad:a1:77:d5:0e:50:a1:98:12:a0:
                    43:dc:2e:cb:d4:9d:94:d0:31:3c:0b:9b:8f:81:7b:
                    06:a2:30:c2:0d:f8:a5:23:09:8a:43:ee:96:50:d8:
                    5d:fd:bf:55:d0:83:1a:5c:49:cf:b8:b4:b4:c4:3d:
                    7d:18:85:ba:94:8c:ff:32:04:3d:18:aa:30:51:e5:
                    e7:3f:7b:2a:9b:10:d5:cb:a6:b3:21:d2:a3:ae:9a:
                    fc:af:41:8e:a5:a7:88:f0:d1:e1:6b:e4:98:a0:1e:
                    e4:99:2b:3f:d2:66:aa:4c:00:6d:3f:6e:e3:6e:b5:
                    68:cf:79:92:da:bb:49:0c:09:b3:4d:1c:b0:e1:24:
                    77:31:77:98:59:8e:f7:2a:c2:40:ec:a3:9d:af:e2:
                    34:4c:33:d4:21:da:e1:b5:9f:f4:3d:84:93:1f:3e:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A2:E3:21:59:D6:7A:EA:2D:7B:6C:97:7B:1C:B2:D7:07:18:49:80
            X509v3 Authority Key Identifier:
                keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:37:5f:f7:ee:41:21:0c:6e:cd:55:e9:cd:38:a6:e5:17:02:
         cb:02:a1:d6:88:29:7f:60:c2:40:28:ca:70:a3:ec:48:75:a2:
         66:31:27:f1:50:ad:a4:e9:71:28:a7:c9:67:68:4f:8f:c7:9c:
         13:8a:57:1c:e4:a1:71:ea:fd:ec:4c:64:2c:ab:3c:01:b3:c7:
         18:05:4b:cc:fe:3c:d2:bd:7c:1f:3d:d4:91:ee:5a:50:ce:1f:
         69:81:39:bb:0a:9d:03:48:e5:f0:d6:ae:c9:54:e8:37:c9:84:
         d3:6a:67:5a:f5:52:2f:45:aa:da:63:83:1f:d4:1a:da:86:b4:
         b8:62:c7:73:ad:c3:06:d3:58:45:84:1f:14:de:11:23:a0:37:
         d1:5f:7b:06:10:6e:e8:db:45:2c:b2:89:cb:35:9c:8f:f5:9b:
         1d:a8:bf:88:aa:01:cb:39:04:7e:14:1e:3b:43:fd:12:78:d8:
         e3:04:0d:e4:b3:71:a6:01:06:9c:f3:05:51:66:7d:8a:3a:ca:
         1f:55:46:20:ac:1f:fe:26:4e:61:af:a6:97:cc:6c:4b:99:d4:
         f8:18:7d:3f:43:d4:14:b0:e4:3a:85:9b:5c:bc:8b:f5:84:02:
         69:45:cd:b3:03:1b:5e:ca:f2:5c:1d:dc:54:97:66:12:fc:5d:
         20:6e:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:02 2025 by rpki-client