Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File:                     j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier:          H21afNyUVLObHOodiNvW5o04FZhlQ0WkunIFXATRcdI=
Subject key identifier:   E2:14:93:F5:6F:CB:FC:60:1A:46:3C:8B:94:35:E3:78:E0:11:93:E9
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer:       /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial:       0197B745700431D7516023811EEC1F7601EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 16:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:10 +0000
Files and hashes:         1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: IflhYdfEbp4aDnFtmDUUzyzRCAHB4tvKymh0/drbe6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:70:04:31:d7:51:60:23:81:1e:ec:1f:76:01:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
        Validity
            Not Before: Jun 28 16:01:10 2025 GMT
            Not After : Jun 29 16:01:10 2025 GMT
        Subject: CN=e21493f56fcbfc601a463c8b9435e378e01193e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:da:a8:8a:19:6a:01:37:2d:10:25:af:26:
                    37:47:4e:04:31:3e:4d:02:b2:b5:d5:11:98:88:43:
                    3d:8f:0a:46:24:f2:61:90:2c:d3:2b:f4:4e:e0:d7:
                    26:b5:84:92:9f:68:5f:b4:7f:74:93:84:99:47:fe:
                    0d:12:95:4b:19:ef:40:79:66:93:90:dc:28:35:49:
                    52:7c:49:6c:ec:27:16:cb:cf:95:e9:82:8b:55:05:
                    4f:cd:ac:50:ca:6f:eb:c4:40:9a:5f:11:f9:ed:d1:
                    73:8f:ac:0b:c8:b9:2d:cb:a6:a8:02:e4:2b:18:08:
                    22:96:3f:6f:06:85:dd:f1:e6:7f:cf:3b:6a:92:ce:
                    f4:f6:a0:45:3b:7a:88:05:93:5b:4e:6d:c2:3e:73:
                    63:b8:2b:88:57:dc:69:6b:a8:a9:94:3b:f4:d1:83:
                    f3:63:61:41:57:8e:07:0a:06:e1:db:91:05:aa:1e:
                    f3:4d:98:13:a9:1e:75:b9:0e:6d:03:46:a0:2f:19:
                    d1:4f:15:20:d1:94:03:b5:ea:67:dd:06:a4:e9:e8:
                    38:8f:be:96:8a:3a:c3:66:0d:aa:a4:73:62:54:77:
                    28:4a:87:2f:94:bb:d6:a8:54:e4:3a:05:ca:ec:ce:
                    f8:19:ef:39:f9:05:62:c9:03:7d:33:bb:e7:c2:83:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:14:93:F5:6F:CB:FC:60:1A:46:3C:8B:94:35:E3:78:E0:11:93:E9
            X509v3 Authority Key Identifier:
                keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9e:33:e2:82:dd:32:51:50:61:d7:97:d1:94:33:26:ba:99:
         f8:e2:88:73:9b:2f:9a:3a:13:7b:8e:89:5f:ac:08:f0:d0:ff:
         55:76:8c:67:a9:30:c2:bc:e7:1d:ac:d2:98:bc:97:e9:bb:d6:
         29:28:5c:7e:34:2e:93:d7:71:c2:97:31:6d:4d:25:e1:b4:66:
         85:1a:f8:89:67:84:c4:c5:aa:31:eb:e5:f7:ef:b7:95:03:50:
         72:62:96:03:70:be:79:6d:9a:04:82:3f:64:9d:20:a2:3d:4a:
         e4:00:2b:01:78:51:09:bf:6d:92:0c:7a:c5:a7:8f:c0:d3:15:
         81:07:b5:44:be:3f:81:8b:c5:f9:1a:53:14:1f:a7:64:5b:bb:
         f1:ff:2e:8e:54:50:09:0d:f1:7f:40:f8:4f:77:46:1f:3a:73:
         da:ee:b7:09:45:09:55:6b:cd:de:87:1d:f4:5e:83:ad:b4:7a:
         7a:be:5c:95:7e:d9:2a:b7:14:03:a0:8b:fd:69:fb:f0:34:32:
         af:b7:7c:a8:54:2c:ee:a9:1e:d8:79:5a:b5:ee:11:9a:c9:ed:
         8f:ba:a9:55:5d:98:94:83:28:a5:37:8d:fc:ce:b2:06:39:52:
         68:03:09:0b:f4:26:fc:55:d0:54:90:98:dc:09:85:27:0d:5e:
         ad:51:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:12 2025 by rpki-client