Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File:                     JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier:          tdTjohlTy1VsXvAhGsWnSbbMgRsJ1rlAYHMQzEz3Rg4=
Subject key identifier:   4F:95:41:7E:B8:A1:7E:D7:3F:BF:13:FA:68:7E:AC:18:CF:12:3C:5A
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer:       /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial:       019D28F1F5666EAB039B504117733313E347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 07:00:38 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:38 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:38 +0000
Files and hashes:         1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: 1boaCJXAsKap3mRP4k10hSaTBFUn2AkyOwt98f643Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f1:f5:66:6e:ab:03:9b:50:41:17:73:33:13:e3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
        Validity
            Not Before: Mar 26 07:00:38 2026 GMT
            Not After : Mar 27 07:00:38 2026 GMT
        Subject: CN=4f95417eb8a17ed73fbf13fa687eac18cf123c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b0:84:45:61:b0:61:ba:0d:1b:31:ae:3f:85:
                    8b:7d:dc:a4:d1:4d:a9:b1:f1:7d:3a:21:b3:ad:f2:
                    33:5c:94:a8:bf:5b:55:28:51:a4:d2:ac:b2:c7:ca:
                    c0:f9:f9:1c:60:28:ad:56:14:c9:23:3f:8d:4b:24:
                    1e:d1:4e:f9:a3:5f:d4:14:6a:ec:61:1a:27:c4:b2:
                    55:2e:55:3f:92:ff:f6:84:b4:c7:78:3e:1f:00:95:
                    59:1d:dd:ab:9f:f2:b3:8d:06:bb:39:76:75:25:24:
                    27:6a:83:fc:d0:17:df:f1:27:d3:eb:e8:31:32:a9:
                    7f:31:b7:87:51:ef:4c:80:f0:6b:fc:e7:d3:63:4d:
                    1a:1a:3d:ab:f7:dc:bc:6a:97:23:4c:4b:f7:73:c4:
                    a6:31:0a:c6:63:0e:32:2b:dc:36:d3:1d:98:03:4c:
                    9c:fb:42:a3:b0:ef:f6:c6:cc:26:30:6d:40:ef:33:
                    96:74:25:67:13:c6:7d:47:d5:70:36:b5:95:13:6a:
                    c2:1d:50:32:2c:13:3d:37:5d:30:4f:ef:b8:9a:36:
                    77:f8:b1:77:d7:95:bd:f8:8b:c1:70:6e:40:6a:11:
                    3a:e8:43:39:e9:11:86:04:ef:a8:6d:a6:bf:88:7e:
                    94:ed:b0:74:22:4c:58:56:01:b8:9a:88:8b:bb:50:
                    6f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:95:41:7E:B8:A1:7E:D7:3F:BF:13:FA:68:7E:AC:18:CF:12:3C:5A
            X509v3 Authority Key Identifier:
                keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:11:49:ba:9a:f8:9d:44:88:a4:f4:ed:1a:8a:d4:ff:1c:93:
         60:db:3e:8f:33:7e:39:eb:cd:1f:91:e8:f2:d2:96:95:ff:18:
         d0:36:bb:60:03:55:83:03:70:76:a4:01:95:30:20:5a:2d:e0:
         d0:09:ba:58:ef:00:d9:5e:74:c5:a4:b0:de:26:62:22:80:33:
         4f:70:59:b3:72:9a:4e:c9:e9:49:d4:0d:f8:00:61:cd:66:be:
         96:5e:4b:88:7c:26:af:2c:14:1f:f7:b4:4e:53:1e:05:db:4e:
         87:ef:08:34:72:96:4f:21:57:4e:65:16:50:09:46:27:16:27:
         b1:d0:9b:6b:7a:2d:23:29:37:a1:26:0e:14:ed:c1:14:85:ea:
         ac:17:b8:fc:18:cc:86:69:08:e1:97:b0:b5:41:1f:6e:26:3e:
         e8:f7:e0:20:ed:10:80:df:91:f6:0c:12:1a:c7:db:d2:42:dc:
         27:51:0f:ca:42:cc:bf:dc:70:6b:3f:2e:b8:58:70:87:7b:56:
         20:3c:fd:c0:df:3e:b2:d0:5c:4a:95:76:93:5e:e5:3c:d8:0b:
         ea:c7:fc:2a:f7:62:87:dd:fb:8e:54:23:ac:b7:bd:2c:88:79:
         85:ed:f2:80:81:d2:99:c4:06:90:85:66:cf:73:12:aa:87:e1:
         a8:d0:29:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----