Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
File:                     JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft (raw, json)
Hash identifier:          x0csOMeb5rTBteOVJK5S+AWVWGLSeE5MzVdul7IyGno=
Subject key identifier:   79:81:BC:C3:50:75:16:26:0F:73:29:D9:17:64:FC:CA:5B:E2:60:30
Authority key identifier: 24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35
Certificate issuer:       /CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
Certificate serial:       0197B5FBFD33A97591687136E5227B205F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
Manifest number:          074B
Signing time:             Sat 28 Jun 2025 10:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:19 +0000
Files and hashes:         1: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl (hash: +6bF2u9lkDU0gZaSgQ1JP3xhn+Nv8Z+20r8YSkOak8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:fd:33:a9:75:91:68:71:36:e5:22:7b:20:5f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
        Validity
            Not Before: Jun 28 10:01:19 2025 GMT
            Not After : Jun 29 10:01:19 2025 GMT
        Subject: CN=7981bcc3507516260f7329d91764fcca5be26030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:55:10:1d:a8:39:05:1d:6a:c8:2a:1c:21:
                    34:74:69:82:6e:5a:77:4d:a9:08:25:cf:d6:78:14:
                    b8:66:41:2d:d1:d0:a9:b1:16:c0:b6:3f:83:d3:5a:
                    30:49:9f:8e:2b:a4:eb:16:7c:19:f9:4d:61:2c:60:
                    94:1e:bc:e7:56:5d:5f:54:e4:23:a7:5f:1a:9c:58:
                    f7:cc:40:61:36:05:0b:7d:74:ff:76:25:83:91:bb:
                    a9:df:26:87:63:9f:bc:ff:09:e5:1a:34:51:7b:8f:
                    d0:9c:a3:18:80:6e:68:cc:a6:0c:8b:c2:71:b8:a7:
                    fd:33:83:45:f1:83:55:02:16:20:f9:0d:17:be:b6:
                    dd:87:93:fe:c4:d1:70:56:67:1a:32:97:5f:fa:84:
                    71:d2:65:d4:f6:f8:1c:dc:fb:35:c4:7c:2e:b0:a1:
                    07:41:da:a0:fd:16:fd:9c:85:55:55:b4:d0:5a:2e:
                    c1:27:58:f3:c2:64:13:9a:72:5a:b5:ff:88:2b:8e:
                    a0:df:72:ee:41:1f:83:7c:62:e1:2d:db:21:18:15:
                    dd:17:94:96:12:c1:b4:03:2a:01:19:30:f1:72:bb:
                    19:13:86:ae:64:36:28:bf:ee:3c:b6:fc:c8:1c:38:
                    9e:79:f0:52:cc:68:ca:a7:ae:db:b5:a7:e4:e5:fa:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:81:BC:C3:50:75:16:26:0F:73:29:D9:17:64:FC:CA:5B:E2:60:30
            X509v3 Authority Key Identifier:
                keyid:24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b3:aa:d0:02:42:b4:09:69:d4:70:7e:c0:2e:65:c0:d2:80:
         6b:fd:5d:67:5e:f8:52:34:7a:2d:21:d0:85:29:40:34:c4:12:
         c2:8b:8f:35:7b:80:85:0f:c1:cd:dc:70:1d:23:ab:9c:47:36:
         49:c4:f1:19:0f:09:05:29:3d:0d:43:24:e2:4f:d3:0b:fc:35:
         ac:c0:1d:9f:28:d8:89:5a:36:07:70:d8:ba:f1:fd:f5:1f:39:
         26:c6:65:f7:cf:0b:c6:2e:bb:87:4b:dc:59:f8:ad:96:48:96:
         a0:b1:c7:54:7a:48:6f:24:e8:0e:33:d1:d9:cd:c8:c0:35:08:
         1c:b6:cb:52:f2:60:c5:b2:5b:6e:41:53:19:bd:28:1e:26:33:
         d5:b0:98:a0:bd:69:fe:bd:e2:3f:b2:d6:f1:a0:5a:68:e3:0d:
         de:ae:60:79:14:2e:fe:c2:cf:20:09:8d:bf:ae:d0:a1:13:7b:
         bd:d5:ac:87:a0:7f:c1:20:44:bb:16:18:dd:25:40:3e:33:90:
         30:ea:73:81:c2:07:52:61:e0:4e:d5:63:31:33:b0:64:25:15:
         32:84:34:7e:42:63:64:8d:a7:ed:8d:85:a2:d2:6d:a1:8a:6a:
         d5:21:64:6e:59:c4:c1:8f:08:be:7c:ff:31:ca:4d:55:02:e0:
         07:b4:80:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:24 2025 by rpki-client