Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
File:                     Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json)
Hash identifier:          EDyp+Y8Dk8WsvmMt2feS/Oq03KNb5Oqjttn5CgUGLYA=
Subject key identifier:   4B:3A:68:B7:C1:5B:E4:A8:9D:62:FC:CA:C5:26:40:50:FD:9C:EE:D9
Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Certificate issuer:       /CN=267d0cc5bd86d568366657aef0310d493a7176e4
Certificate serial:       0198D698347746EF6588EA8C76327F601858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 11:02:35 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:35 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:35 +0000
Files and hashes:         1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: uGUmKtx0QHPrMJjTE+fUMR/vcQPxlB+cIh23Lvxldus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:34:77:46:ef:65:88:ea:8c:76:32:7f:60:18:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4
        Validity
            Not Before: Aug 23 11:02:35 2025 GMT
            Not After : Aug 24 11:02:35 2025 GMT
        Subject: CN=4b3a68b7c15be4a89d62fccac5264050fd9ceed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:1e:52:ac:37:28:a9:e0:78:71:23:ed:5d:
                    64:aa:7c:31:3c:89:8d:ac:cb:c4:0a:20:78:ce:81:
                    c0:5d:1f:95:cc:22:22:5a:e3:f2:3e:49:fa:b6:19:
                    31:db:89:eb:41:a6:8c:ac:49:39:7c:65:e3:7a:bf:
                    27:02:71:bc:c8:9a:60:27:5a:61:f2:b1:22:a3:f6:
                    2d:4b:c1:fa:d4:ce:a3:dc:7b:9a:9f:38:84:a8:12:
                    28:a2:13:d1:95:cf:58:80:ef:53:d0:f9:99:bf:43:
                    9f:b1:7e:32:fb:ad:2f:a0:7b:3d:8a:90:be:23:4f:
                    2f:1c:4b:e8:30:7e:d0:90:4c:a9:fc:10:5c:69:c4:
                    68:13:ff:f9:51:0b:74:29:ea:c9:f3:bb:df:59:20:
                    7e:ea:05:66:60:e7:b9:7c:07:d4:c1:dc:82:f6:82:
                    e1:04:22:be:6f:48:50:50:63:7a:74:98:c3:1a:ae:
                    99:65:95:b7:d2:01:3b:40:d1:d4:cc:0b:92:00:75:
                    ba:65:45:90:70:ed:bd:fa:fa:03:d5:52:bf:8f:de:
                    74:e7:6c:2a:09:6d:96:a7:94:94:7b:db:54:2d:74:
                    e0:df:1c:c3:84:bb:06:07:0d:b4:8a:fd:10:cf:67:
                    85:4a:1d:aa:23:ee:a1:b7:05:56:65:13:5f:41:3d:
                    eb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3A:68:B7:C1:5B:E4:A8:9D:62:FC:CA:C5:26:40:50:FD:9C:EE:D9
            X509v3 Authority Key Identifier:
                keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:d2:29:7f:f1:7b:41:42:0d:2e:02:26:e3:dd:31:35:b9:
         60:16:0e:d1:bb:3d:2d:1b:3c:18:f4:15:15:cc:ea:01:f8:5f:
         9b:8b:20:46:6b:f4:6e:2a:07:a3:6c:3b:49:3c:7e:b5:a7:fe:
         60:75:a3:ed:1a:3e:0f:ef:e3:36:6a:94:2c:5f:28:5c:eb:84:
         ec:17:c4:b7:9c:c8:cb:9a:b5:a0:9a:9a:d5:9e:16:66:a8:87:
         5e:1f:30:20:1f:fd:22:28:ba:a7:53:8b:b5:64:49:c4:17:04:
         db:4c:cb:20:3b:81:04:b9:68:ab:d4:cf:86:e0:07:9f:a1:d6:
         d9:fb:16:8b:ee:5c:88:de:c2:c8:90:ae:33:ce:11:30:d0:c1:
         20:b8:bf:a4:55:71:80:e0:b5:1a:f9:a4:10:8e:6a:f2:8e:4b:
         23:f8:08:7c:af:f1:d4:2f:62:9b:94:85:15:d9:87:ab:4d:c8:
         a2:57:f6:77:17:19:a5:87:f8:9b:8e:fa:0d:c5:6a:c4:aa:fa:
         00:df:fb:09:10:76:21:85:6c:65:59:d4:94:e5:63:d2:6e:a8:
         28:7d:03:ab:8e:49:ee:79:42:90:80:01:13:6f:ec:bc:31:95:
         ed:21:75:b1:76:7c:15:a0:8a:81:81:fe:64:ac:25:08:37:70:
         bb:94:24:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:14 2025 by rpki-client