Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
File:                     JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft (raw, json)
Hash identifier:          R5H4ywRYu0MJ3PU+plGufFuhFFkJTiyNwPoPiQbqESI=
Subject key identifier:   17:C1:46:92:DA:B0:D0:73:D6:90:FA:C4:64:99:E2:2A:EA:13:36:CE
Authority key identifier: 24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35
Certificate issuer:       /CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
Certificate serial:       0198D5BBC7F13D1C26999AF35786C53B1BA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
Manifest number:          07E0
Signing time:             Sat 23 Aug 2025 07:01:50 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:50 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:50 +0000
Files and hashes:         1: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl (hash: jljRWPnrltzDvhhrQFjgkQhCYh6THkexD4LqOkbeOAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:c7:f1:3d:1c:26:99:9a:f3:57:86:c5:3b:1b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
        Validity
            Not Before: Aug 23 07:01:50 2025 GMT
            Not After : Aug 24 07:01:50 2025 GMT
        Subject: CN=17c14692dab0d073d690fac46499e22aea1336ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:98:b7:ee:c6:fe:8b:ef:f3:25:1f:8c:26:1e:
                    e8:7e:4e:21:9a:d6:20:d9:9b:ba:f9:c1:28:2e:2f:
                    82:10:d9:c1:5c:0a:1b:ba:b0:70:40:62:7d:26:2b:
                    8a:64:6b:d2:44:4f:60:d2:30:59:3b:57:88:aa:37:
                    47:1c:48:82:b1:27:ba:24:38:f2:92:fa:14:df:3f:
                    56:2e:b5:9c:f0:3a:bb:14:aa:9f:ce:e1:4e:40:98:
                    10:c2:bc:20:c4:1a:96:26:ac:0b:49:ce:f7:4b:81:
                    b4:9b:c9:51:84:9f:f8:ed:ed:3b:60:ec:97:42:54:
                    da:f0:24:17:60:35:54:bd:ba:05:15:ab:7a:9a:28:
                    8b:da:05:0b:f5:f5:72:eb:97:91:61:40:e2:d4:72:
                    7b:29:0f:4c:1b:f7:4b:7a:69:94:04:4f:8f:f2:14:
                    26:d1:71:a2:fc:07:6a:9f:9e:d0:54:8b:c7:63:e4:
                    a0:4e:b3:c5:1b:ef:f7:ed:c8:9e:63:9b:b5:16:8a:
                    a7:52:42:6a:b9:65:e5:9c:33:4c:89:b9:2d:dd:5a:
                    93:16:08:27:8c:9b:b0:8b:b4:23:15:7c:a9:c8:ec:
                    26:e1:b3:18:98:1a:1e:b7:37:89:b5:53:b8:47:ea:
                    45:98:ba:42:34:65:cc:f3:7f:aa:55:d4:f0:96:3a:
                    49:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C1:46:92:DA:B0:D0:73:D6:90:FA:C4:64:99:E2:2A:EA:13:36:CE
            X509v3 Authority Key Identifier:
                keyid:24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:17:95:92:f1:01:9d:29:18:8f:17:dc:96:c2:cc:e4:58:
         76:c3:bf:74:e0:f0:2d:f4:c2:68:e8:d9:8c:1a:ae:10:fa:9d:
         a1:ae:58:c4:cd:c1:01:24:b7:29:a1:41:c7:4b:9d:84:f9:af:
         69:22:cf:88:b3:9f:55:e9:1f:ff:ec:c3:aa:68:6b:75:79:c0:
         2c:68:2f:f6:b1:69:23:fb:cd:12:26:d8:a2:c4:a4:f0:a9:59:
         1b:54:3f:12:6c:a9:c0:71:3b:ac:ed:f2:5b:47:76:7d:e1:b2:
         1c:f7:c4:8a:4e:3d:48:f6:eb:81:e5:ab:2d:e6:02:89:34:a3:
         27:9e:b6:4c:c4:a0:69:0d:e3:15:be:2d:d7:64:1d:d3:32:43:
         90:66:4b:77:77:4f:85:6e:91:7e:16:5f:a3:ca:9d:3d:7e:00:
         d0:ed:df:fb:0f:5e:ef:e2:6a:e6:0b:16:51:da:49:f4:c9:44:
         7e:a5:8e:81:2b:fe:d6:46:04:f9:3e:73:84:f1:3d:65:1e:21:
         7f:79:cf:8d:eb:58:b1:d4:76:f0:b1:e1:ae:91:41:1d:e4:84:
         0e:8a:9a:4d:66:ef:4a:a7:40:03:7d:51:e3:a6:a7:f9:ab:f4:
         1a:b5:a6:b0:d5:c6:5c:c0:59:98:ce:c2:31:67:f7:e4:79:5c:
         c5:3e:a4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:18 2025 by rpki-client