Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
File:                     J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json)
Hash identifier:          vG+Ps5LKzM2em2uY5exTcRr+yyoplzLNWjrrNRPQ1Vw=
Subject key identifier:   7D:FF:B3:58:E9:9C:D9:0C:CB:5B:72:44:D8:02:4E:ED:4E:66:76:0E
Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14
Certificate issuer:       /CN=27b56eb25b05a08826c2648fff1acf36b494d814
Certificate serial:       0198D54DCEDD30686C0D84E88F4050BFB8B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
Manifest number:          0305
Signing time:             Sat 23 Aug 2025 05:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:42 +0000
Files and hashes:         1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: hi/8N+GPs7YlMUi0ANENrV4BU9aWqzGfT0pIdsWOEz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:ce:dd:30:68:6c:0d:84:e8:8f:40:50:bf:b8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814
        Validity
            Not Before: Aug 23 05:01:42 2025 GMT
            Not After : Aug 24 05:01:42 2025 GMT
        Subject: CN=7dffb358e99cd90ccb5b7244d8024eed4e66760e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:6c:1c:5d:87:aa:6b:9d:f0:f7:71:cf:3f:
                    dd:e8:66:f5:7b:06:80:ae:78:a8:18:30:a9:68:15:
                    0f:18:69:a5:ab:d8:d7:ea:76:3e:03:c3:3c:f3:73:
                    36:97:fe:65:ac:7e:19:56:54:c4:a0:2e:46:19:f9:
                    5c:c0:77:c3:1a:ad:16:ff:4e:e2:e3:f8:eb:94:84:
                    1a:5c:27:8b:b5:43:e8:53:ea:8d:ab:22:bf:bf:57:
                    3d:94:9b:f2:de:50:cc:96:23:97:65:f7:39:8a:ed:
                    e4:41:b0:d1:ea:d0:96:b6:59:21:55:e8:6c:b1:85:
                    23:5b:35:c5:3a:21:0f:64:f0:6f:ff:08:65:5b:96:
                    36:ef:32:56:fa:d9:5e:60:6c:29:d6:dd:ea:82:96:
                    46:74:e7:18:12:8b:80:1a:8d:0a:f5:fe:0f:8a:23:
                    d5:aa:d9:a7:d7:d5:51:3a:1f:1b:07:00:9f:fa:02:
                    35:e9:88:20:40:53:38:af:90:3d:98:a5:39:f4:d0:
                    c0:6d:69:df:45:a8:bc:7c:8d:9b:de:3f:1f:a3:e9:
                    ac:96:e4:67:bb:48:a4:71:9a:e1:88:aa:f5:66:e6:
                    ba:bc:37:82:26:9c:dd:09:77:84:61:56:9a:30:bd:
                    d4:3b:6d:0b:25:e3:79:6f:0a:73:80:c1:ff:e4:dd:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FF:B3:58:E9:9C:D9:0C:CB:5B:72:44:D8:02:4E:ED:4E:66:76:0E
            X509v3 Authority Key Identifier:
                keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e8:16:c2:f9:19:14:3c:bc:4e:1b:9a:4b:0d:d3:61:b4:dd:
         f5:ed:fb:d6:15:be:70:d5:09:90:3b:0e:30:b5:77:97:08:6d:
         96:c6:74:5c:29:7c:dd:a3:ac:b0:e2:59:da:a2:93:37:53:38:
         2c:5c:da:78:6b:00:be:f5:bc:8c:c2:b7:5d:a3:ed:60:fc:fd:
         41:ab:71:1f:b1:b2:a4:ce:df:fc:59:61:71:ab:33:4c:f7:54:
         73:ca:21:c8:87:b9:5e:67:f3:7f:21:58:a6:84:68:94:26:dc:
         63:e8:43:e8:41:73:4e:13:a1:f4:0d:2b:40:b4:db:72:7b:95:
         b2:1e:95:69:08:63:b4:f1:c5:93:7f:02:cc:11:6e:8c:e2:8f:
         29:d4:8a:7c:17:69:87:1d:c7:82:2e:47:c8:3f:2a:38:4b:05:
         6e:8d:a2:47:07:55:c3:cb:34:f6:3e:1f:a2:55:7b:e4:3d:02:
         8a:2d:33:dc:3d:4a:3e:b1:b0:9d:b3:4c:d1:34:ca:d2:8f:bf:
         14:4a:27:4c:c4:04:fb:55:a7:79:ac:ab:de:cf:fa:ac:7b:a7:
         48:5b:49:24:94:ee:a9:56:4f:6a:cd:42:e5:c7:0b:6c:7e:a5:
         c9:6e:b5:6b:c1:b0:b1:e4:95:84:7e:e4:81:de:91:6e:6c:c6:
         0a:bc:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:16 2025 by rpki-client