Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
File:                     jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json)
Hash identifier:          oweeIv5pyEjze54nU1HiFhX3SOuvhZo/z2tz7kHlQyM=
Subject key identifier:   66:96:7E:98:19:6E:52:DA:1E:F3:40:0A:3F:7D:B0:54:5A:9C:D8:2A
Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
Certificate issuer:       /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Certificate serial:       0197C42552A99ED63159AD6B35782B629522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
Manifest number:          0433
Signing time:             Tue 01 Jul 2025 04:01:09 +0000
Manifest this update:     Tue 01 Jul 2025 04:01:09 +0000
Manifest next update:     Wed 02 Jul 2025 04:01:09 +0000
Files and hashes:         1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: w0Md7tBlpBkyUWbxKIbTwuGe3nt3K+I3atz8XkRshHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:25:52:a9:9e:d6:31:59:ad:6b:35:78:2b:62:95:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
        Validity
            Not Before: Jul  1 04:01:09 2025 GMT
            Not After : Jul  2 04:01:09 2025 GMT
        Subject: CN=66967e98196e52da1ef3400a3f7db0545a9cd82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:58:07:b2:cb:0a:a5:26:e3:9f:c7:c6:9b:a6:
                    2e:8a:ad:f9:68:2d:af:fd:2f:9c:46:9d:5a:4d:e7:
                    57:79:35:47:4c:0b:7d:f6:13:e3:24:3c:62:57:3a:
                    50:ee:9e:a4:82:3a:63:cb:ce:e7:ce:cf:55:ea:87:
                    4e:50:ac:0c:6d:29:20:cc:52:10:bc:78:01:53:82:
                    d3:91:82:0e:62:64:85:16:3e:21:1f:7c:97:26:4d:
                    fb:86:d7:61:44:6c:bd:ee:27:e5:0a:fd:85:18:2f:
                    75:69:ec:c5:3f:b5:b0:40:3a:34:fa:1b:19:61:3a:
                    ab:4f:73:73:bf:e3:e3:87:9a:ed:cf:32:8a:f3:5b:
                    72:36:9b:3b:77:01:24:13:a3:e9:68:59:a3:d6:55:
                    19:83:d6:ee:2a:6c:6f:98:fb:c4:31:02:00:bd:f2:
                    a8:2e:3c:e5:60:bf:f7:3a:a5:5c:0d:56:30:f5:ac:
                    f9:61:2f:46:d9:c5:84:2f:7f:2c:3b:d6:6d:b8:87:
                    35:74:1f:c0:b4:f5:e6:0d:3f:68:8a:98:42:91:cd:
                    ef:72:ef:5a:c5:7b:37:ab:b3:4d:3c:86:e4:99:01:
                    e1:7d:d9:ad:59:27:7d:be:5b:b8:67:18:ec:4b:b1:
                    dd:33:28:a5:2c:9a:9f:46:d0:91:1b:d1:4e:09:90:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:96:7E:98:19:6E:52:DA:1E:F3:40:0A:3F:7D:B0:54:5A:9C:D8:2A
            X509v3 Authority Key Identifier:
                keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e5:cd:d5:34:9a:a2:64:a3:68:dc:1a:27:75:df:55:b6:ca:
         6b:ba:11:0c:4f:f2:67:8b:6d:1a:8a:4a:d9:db:3b:3d:b9:47:
         2e:4c:85:ca:b3:32:d0:71:84:69:3a:a4:87:cf:be:f9:9e:5a:
         7b:9d:55:f7:bf:35:25:6e:72:51:3d:77:71:67:5a:fc:e6:3d:
         6d:4f:e0:88:68:f2:c2:a0:21:b2:01:6e:0e:05:a5:75:3f:20:
         c6:54:e8:5c:aa:fd:c2:25:d9:f6:78:b8:6b:20:75:ed:db:b5:
         d0:0a:d8:cf:26:5f:72:3f:5b:8a:d7:11:ac:88:bc:e1:aa:04:
         80:4a:7f:f7:fa:f5:b8:de:f3:0d:d1:08:cb:e0:c3:e7:08:55:
         ea:c9:7c:d4:97:c3:cd:a3:63:99:bd:08:b4:0b:cb:c8:3c:44:
         64:f1:52:8c:36:c6:9b:16:0f:79:e3:14:b0:66:66:ac:1c:28:
         86:c2:7f:8a:a2:a7:e4:c2:a6:65:49:a0:58:22:59:49:a7:77:
         88:37:2a:44:cf:40:5f:ce:e4:b3:2e:89:cf:21:8f:80:26:32:
         dc:24:19:bc:85:72:72:a8:ef:c9:71:2d:2d:e0:25:be:ae:af:
         53:48:f3:14:e0:33:3c:ab:98:6c:b7:6d:53:26:67:85:fb:33:
         43:6e:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:53:22 2025 by rpki-client