Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File:                     jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier:          YzULzNxUWC2Te1f43hcJRe8vgvlCneDbxAowmjuUJxA=
Subject key identifier:   BF:B3:46:20:9B:D7:BD:A0:FB:44:4E:9A:03:05:9C:8B:4D:D1:B3:CD
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer:       /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial:       0197B6A04A9D107E6C239591BE842F3B5ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 13:00:47 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:47 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:47 +0000
Files and hashes:         1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: /9jJm0Qr7gvIrJoDZjeRpGw6wd0z1pydapdqSBWYxLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:4a:9d:10:7e:6c:23:95:91:be:84:2f:3b:5e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
        Validity
            Not Before: Jun 28 13:00:47 2025 GMT
            Not After : Jun 29 13:00:47 2025 GMT
        Subject: CN=bfb346209bd7bda0fb444e9a03059c8b4dd1b3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:31:2c:b8:2b:02:6d:f2:c5:c7:9c:2d:14:
                    7d:31:d0:9b:40:70:f7:b2:7d:21:21:1a:2a:7a:65:
                    77:93:d2:75:be:b4:e3:f4:c9:d3:dc:45:db:01:a8:
                    50:6f:9b:86:a4:aa:a7:49:9a:f6:3f:00:4a:9c:ed:
                    e5:59:93:3f:58:ad:b1:c0:e3:f2:55:76:8f:ad:ce:
                    ef:97:d5:53:d5:e3:d8:c8:9c:e2:3f:58:85:1f:9c:
                    97:61:72:3e:b3:a5:28:33:5e:35:8b:27:ba:02:3a:
                    d5:1d:20:ee:2c:5b:6f:cf:29:ca:ac:3d:b0:9a:05:
                    40:7a:be:1d:1b:d4:f9:80:3a:bb:d7:15:4a:48:90:
                    aa:c4:19:fd:24:50:48:f3:96:be:39:5e:8a:4c:06:
                    ee:fd:78:fd:98:2b:03:df:22:ab:fe:5e:7c:5b:80:
                    a5:37:c3:75:4f:43:70:1f:34:7a:9c:21:71:13:dd:
                    cb:ac:ec:c1:45:dc:a0:73:5f:30:b2:c2:44:21:7c:
                    3a:c1:2a:01:85:44:ca:e9:e5:d9:21:fc:3c:04:35:
                    66:5a:e4:77:60:7a:58:c9:de:a1:6e:5c:a2:d5:4d:
                    3d:ff:b2:73:2d:59:4a:54:0e:91:55:32:6a:15:11:
                    de:df:2e:0d:d0:31:89:3b:a1:1b:f1:ca:6b:ce:c9:
                    78:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B3:46:20:9B:D7:BD:A0:FB:44:4E:9A:03:05:9C:8B:4D:D1:B3:CD
            X509v3 Authority Key Identifier:
                keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0d:19:6c:87:6e:5a:c2:13:f3:13:74:d5:f3:98:e9:66:f5:
         28:09:c5:5d:ac:15:d4:9c:15:d6:85:76:ac:1b:6e:bb:67:4b:
         3e:24:32:14:a3:1a:6d:16:b7:d8:ba:fb:36:66:97:40:84:be:
         59:14:06:c0:ce:aa:7d:88:8c:e7:1c:34:7d:2b:6f:ae:88:3e:
         ca:56:f2:bf:43:ba:11:42:be:65:62:e5:2a:31:c1:d7:c4:70:
         07:9f:33:bd:bb:cf:6b:0b:9c:dc:23:e2:e6:98:36:a0:45:3e:
         53:f3:5d:cc:b1:39:7b:db:a4:9d:a8:e2:60:f2:0b:c6:e8:77:
         21:71:0e:69:a4:ef:ee:5c:f1:90:33:39:9a:bb:64:ab:e1:0c:
         8b:a4:ad:d6:a0:b9:41:50:3a:5f:de:f9:2a:e4:07:39:9f:4b:
         8c:ad:54:97:6e:9f:46:e2:fd:8c:43:7d:7e:cd:a8:a8:3a:ec:
         12:c2:fd:3d:1e:48:ca:06:0a:f3:78:61:99:fb:d0:ea:af:b0:
         24:e1:c2:6f:8c:b6:c7:f0:35:d0:9a:23:89:f5:fd:1a:46:f2:
         cd:15:de:8c:8d:c1:b3:4b:6a:a5:7d:f0:0d:d6:0b:fe:e1:76:
         cd:0c:e7:8c:95:dd:d8:09:05:b5:da:91:a3:7f:7d:7f:6c:58:
         71:d4:eb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:32 2025 by rpki-client