Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
File:                     J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft (raw, json)
Hash identifier:          PcQdzvsGm51L2GQZVSHWK5IsclVzSWP7uQAb2Qmwf98=
Subject key identifier:   92:C0:E1:6E:F9:A4:2C:6D:42:67:07:FC:27:C9:6B:23:7C:1E:C2:29
Authority key identifier: 27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E
Certificate issuer:       /CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
Certificate serial:       0198D660F874EEEE244E0D01F45A4D3DE193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
Manifest number:          1328
Signing time:             Sat 23 Aug 2025 10:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:15 +0000
Files and hashes:         1: J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl (hash: t+NVrwDIv8TrV5GHrmJ5RUIoeBylyhh/b/C3E8HQOzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:f8:74:ee:ee:24:4e:0d:01:f4:5a:4d:3d:e1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
        Validity
            Not Before: Aug 23 10:02:15 2025 GMT
            Not After : Aug 24 10:02:15 2025 GMT
        Subject: CN=92c0e16ef9a42c6d426707fc27c96b237c1ec229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:b2:1a:5e:9d:44:d1:1b:62:d1:2c:37:a9:
                    00:3d:da:3d:12:a6:24:8b:22:c3:ea:56:0f:95:20:
                    c0:29:90:10:45:29:da:15:55:d4:17:9b:25:fb:2d:
                    a3:76:fd:18:dc:b7:57:ae:3d:1d:09:ba:15:a7:67:
                    d2:b7:28:2d:b3:64:f4:16:1a:1e:ed:d3:74:bf:51:
                    9c:36:c7:5c:73:54:10:07:1c:d2:2a:bb:47:a9:e2:
                    ec:d4:34:49:38:f4:7d:b3:ff:4e:c5:9e:87:7c:1e:
                    63:8c:09:47:4f:08:77:c3:6a:4a:3f:b4:93:69:7a:
                    d3:6d:9b:64:cb:67:7b:78:cc:25:66:18:25:f5:f5:
                    27:05:ca:c2:53:d2:d1:1b:3b:bc:4c:f4:36:99:ba:
                    48:ce:c1:fb:ab:96:f3:73:70:52:30:4a:43:28:65:
                    40:ef:39:1b:c8:ed:21:14:7e:0b:44:22:d1:58:c2:
                    c0:42:c9:7e:dd:ac:e7:b4:14:e6:51:de:11:72:3f:
                    14:b3:71:3a:0a:4b:25:11:bf:14:54:76:e3:73:40:
                    a6:94:45:34:f8:ed:e3:6e:b7:a7:f4:c7:b8:ac:e6:
                    da:f7:e6:e7:c1:df:11:54:df:45:04:f1:d8:4c:5d:
                    c4:a9:a4:aa:38:d0:b6:50:3d:38:7a:84:34:5d:f2:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C0:E1:6E:F9:A4:2C:6D:42:67:07:FC:27:C9:6B:23:7C:1E:C2:29
            X509v3 Authority Key Identifier:
                keyid:27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:72:48:fc:30:69:9c:c4:fa:89:65:8e:40:e0:17:ed:7c:8d:
         b5:1e:27:2b:9e:ce:f8:b5:86:5c:8e:66:e3:4f:2c:11:3a:bd:
         18:ab:08:0f:85:c1:17:65:a1:7a:2b:7b:be:47:07:89:4e:99:
         a2:46:83:4e:b0:54:e2:37:6e:37:77:63:ae:69:79:a5:91:19:
         0f:e0:47:77:fb:b9:82:35:3d:d6:61:c8:2a:76:a5:1c:4c:49:
         1f:1d:a8:b2:b7:5d:a3:16:38:1d:b1:d6:09:dc:ac:0e:36:a2:
         f8:eb:7f:2c:93:bf:2b:21:ba:b2:09:af:d4:4d:76:72:0d:b9:
         6e:f7:72:96:e0:17:09:72:34:ca:6e:9d:74:8c:f9:58:07:f3:
         f6:8f:dd:03:ba:9e:46:83:b3:de:01:f8:b7:1d:96:f2:65:17:
         90:f8:3e:08:02:8e:86:62:a6:0e:02:17:ec:3f:a0:d8:ee:3e:
         2f:99:a8:07:2e:c7:6f:15:0f:cd:f5:ea:95:59:a9:2e:df:30:
         03:98:f6:20:be:d5:00:cd:18:8f:19:ef:69:f6:ca:bb:5c:16:
         8e:af:54:57:f5:2f:1c:21:00:50:e2:b4:2a:1e:e1:7a:c3:78:
         c0:1e:e2:6d:4d:79:64:39:dd:48:2f:2d:c5:bf:7a:3c:4d:11:
         02:2f:de:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:19 2025 by rpki-client