Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File:                     jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier:          LmbN318kG+ceUMuRkBUdfGkshHxJGeR9s+f/YnukeWg=
Subject key identifier:   26:DF:8A:65:F7:45:0E:58:9E:EB:1E:90:69:AD:01:59:3F:26:0F:22
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer:       /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial:       0197B9A1E2FE1FDCD3AE467511082F1C475B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number:          06BE
Signing time:             Sun 29 Jun 2025 03:01:23 +0000
Manifest this update:     Sun 29 Jun 2025 03:01:23 +0000
Manifest next update:     Mon 30 Jun 2025 03:01:23 +0000
Files and hashes:         1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: 6xOypYieT2kzr+HkEHq8bkjsgOonRBefGpi8yThvQyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:a1:e2:fe:1f:dc:d3:ae:46:75:11:08:2f:1c:47:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
        Validity
            Not Before: Jun 29 03:01:23 2025 GMT
            Not After : Jun 30 03:01:23 2025 GMT
        Subject: CN=26df8a65f7450e589eeb1e9069ad01593f260f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:b6:80:cb:c1:3e:c9:94:10:76:aa:6a:8b:
                    e4:b8:a6:b5:f9:b0:5e:b9:b0:9c:09:c1:be:f0:60:
                    6d:12:ae:c4:78:ad:70:17:57:9a:15:5b:eb:fa:cc:
                    01:f3:10:5e:19:9e:ac:96:82:b2:80:ce:ab:dc:17:
                    58:be:d7:21:45:ec:60:8a:13:95:95:6a:16:ea:05:
                    1c:f7:1e:aa:04:18:27:5b:eb:b2:e0:63:d7:b8:71:
                    07:9c:ec:ac:92:52:9e:94:79:03:0e:11:a1:0e:57:
                    df:38:ee:5d:0c:60:77:c2:9d:2e:b7:3a:7c:04:56:
                    54:e2:ca:6a:4e:ae:fa:2b:24:44:5b:43:a1:59:5e:
                    1a:72:9e:61:e7:ae:ce:be:ba:50:7d:47:ce:ca:c0:
                    0b:c7:64:50:80:3e:52:99:f5:9b:60:fc:d8:15:d4:
                    71:5f:c1:8d:69:b1:57:95:7b:84:41:47:fa:a4:ac:
                    56:39:96:a4:dd:75:e6:bc:e1:97:a5:71:96:f3:31:
                    ce:65:81:f6:56:49:9d:8b:4f:f1:55:74:53:13:96:
                    07:c1:b4:91:89:18:4b:7f:cd:69:d3:17:77:4a:7a:
                    08:b8:eb:b2:de:2a:10:4d:be:4b:2d:f8:3e:c3:43:
                    5d:f0:11:4d:75:80:f8:45:65:5d:0a:20:7c:8a:4e:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DF:8A:65:F7:45:0E:58:9E:EB:1E:90:69:AD:01:59:3F:26:0F:22
            X509v3 Authority Key Identifier:
                keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:84:df:25:a2:d1:ef:70:19:39:e6:54:f2:b9:8b:57:0f:b7:
         27:53:6a:7c:5a:c1:69:c8:b1:ad:35:2d:3b:17:fa:44:92:51:
         55:5e:2a:2e:16:16:fa:76:8f:d6:8d:78:9b:a3:da:b2:88:90:
         04:56:b9:48:97:ae:62:aa:35:eb:b2:10:23:e6:62:41:a2:08:
         64:29:93:ee:25:40:fc:8e:30:46:46:35:d8:39:1a:82:d0:6c:
         e4:49:f2:a0:0c:c8:1e:1c:77:b4:89:06:56:0d:3a:ed:54:b1:
         96:4a:d9:42:d1:55:17:35:76:32:e0:6a:59:39:88:ff:b1:1d:
         4a:79:47:5c:86:70:48:96:29:9c:ef:a5:86:a7:9f:01:5b:f9:
         89:9c:ec:26:aa:9b:09:47:0d:73:38:f6:17:cb:6f:2a:64:cb:
         8f:70:74:55:c8:e0:c6:cc:b8:94:d7:1b:64:f1:3a:eb:f6:3d:
         df:d2:b8:13:d9:7e:ef:39:55:f7:a0:c9:87:d1:ca:70:96:41:
         7e:f8:12:12:58:4c:02:46:d3:e9:cc:84:e2:5d:3d:10:57:99:
         8f:ef:28:c5:c2:5e:a3:83:f2:23:74:a5:db:e6:5c:56:c0:eb:
         d2:af:54:48:29:99:9c:ca:56:4b:96:33:00:16:48:c7:b0:86:
         21:7c:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:08 2025 by rpki-client