Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
File:                     A_JvJX_M8HUxzX5_6EFhtP9emmM.mft (raw, json)
Hash identifier:          0v+XbMcv30NupB2HWfnFDlFLwanr0rfit1JQpBy6+Kw=
Subject key identifier:   47:86:32:10:31:6C:EC:91:D6:E7:18:D0:01:06:15:BA:DF:1C:17:6D
Authority key identifier: 03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63
Certificate issuer:       /CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
Certificate serial:       0198D65F54A212077E8934B4ACFBBF7EE999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
Manifest number:          0BF9
Signing time:             Sat 23 Aug 2025 10:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:28 +0000
Files and hashes:         1: A_JvJX_M8HUxzX5_6EFhtP9emmM.crl (hash: fMdSnhFQgnhJxVIPmwajSj9lnWPTESHitui7BBZf2RI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:54:a2:12:07:7e:89:34:b4:ac:fb:bf:7e:e9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f26f257fccf07531cd7e7fe84161b4ff5e9a63
        Validity
            Not Before: Aug 23 10:00:28 2025 GMT
            Not After : Aug 24 10:00:28 2025 GMT
        Subject: CN=47863210316cec91d6e718d0010615badf1c176d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:14:f2:bf:3f:70:c7:37:ec:f6:40:45:e2:
                    d4:01:f5:82:3d:03:0c:d0:f6:7d:e3:1c:c6:4c:5e:
                    3b:67:47:89:38:31:0a:42:7e:6d:83:fe:1d:90:26:
                    73:b1:cd:17:e9:85:42:73:11:c4:91:14:c9:67:d0:
                    88:54:77:24:21:37:0a:fc:4d:a8:76:a1:26:e9:1f:
                    34:87:18:e0:3f:35:30:b4:96:7e:78:49:35:7b:4d:
                    ed:4a:42:dc:22:fa:fc:1d:73:b8:a9:71:f4:68:e4:
                    37:84:cb:f0:52:c5:4a:60:c4:84:da:c0:18:c9:7e:
                    15:75:23:a9:9c:af:4a:7b:e3:17:51:18:0f:f1:ee:
                    41:f0:2c:48:9f:ff:8c:c5:f0:8d:27:82:8e:f7:62:
                    c0:95:e4:2e:12:34:18:9c:bc:b8:5f:bd:de:a9:70:
                    80:6b:89:bd:69:22:4f:23:72:45:57:3a:f6:44:97:
                    5a:bc:5c:04:ab:73:86:f1:cd:16:50:d9:57:20:5b:
                    c1:f4:d6:c9:90:e8:22:6f:bf:a8:dd:26:d3:81:c2:
                    38:71:a0:de:ac:47:d1:69:4f:cd:16:0e:7f:ad:51:
                    74:02:fd:8a:1d:e8:66:61:75:14:1b:fc:be:ae:7b:
                    8c:85:a8:91:40:fb:47:be:35:6a:7f:5e:7b:02:53:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:86:32:10:31:6C:EC:91:D6:E7:18:D0:01:06:15:BA:DF:1C:17:6D
            X509v3 Authority Key Identifier:
                keyid:03:F2:6F:25:7F:CC:F0:75:31:CD:7E:7F:E8:41:61:B4:FF:5E:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_JvJX_M8HUxzX5_6EFhtP9emmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5417e4-d0b8-4304-ab26-4a9940e00366/1/A_JvJX_M8HUxzX5_6EFhtP9emmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:cc:23:d9:84:2d:d6:19:b1:80:e7:8c:50:b2:56:66:e7:c0:
         35:85:b0:30:12:af:c9:45:83:c5:36:0b:6b:ca:08:3c:1d:a5:
         41:2e:4d:ed:51:90:12:78:a5:f7:0e:11:5c:60:0c:ff:2c:7f:
         79:bc:a0:0d:e4:1d:05:45:83:82:e7:c2:37:e6:d6:7e:81:0e:
         5d:75:96:00:8b:97:b2:79:41:df:d4:69:55:86:17:33:2d:57:
         26:b4:b7:86:67:39:0c:08:0d:5d:23:5e:ed:74:1d:2f:56:0f:
         31:e7:eb:2b:41:8b:4d:fb:26:22:19:24:b9:c8:ea:0b:d2:70:
         fb:9b:f2:d8:6e:25:df:6c:74:01:c5:9f:d2:1c:b3:f9:63:fc:
         6f:52:23:93:3a:85:df:2b:00:71:26:74:ac:f5:b6:bb:56:45:
         f6:72:f8:2e:c7:1e:19:43:d6:b1:ac:49:21:dd:17:78:0c:ad:
         8e:cc:63:26:db:e1:89:75:0f:08:20:1e:f7:7e:d9:8a:f3:7a:
         25:c7:5a:ef:bb:8d:b4:a0:a1:4b:2b:88:b8:17:82:1f:9c:b7:
         2b:7e:cc:27:b9:83:1a:8b:ee:d3:38:db:2f:26:b8:d0:72:27:
         09:ea:04:16:05:97:b4:65:29:d8:cd:61:77:03:d2:fd:1a:92:
         f7:47:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:04 2025 by rpki-client