Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
File:                     RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft (raw, json)
Hash identifier:          AJ+obRXMtIylDI6SZg2cgQqMp2Bl41YTwQuE5Kh3CfU=
Subject key identifier:   ED:38:F5:29:F4:D4:33:FE:5E:6B:5F:D1:5F:8C:75:29:98:0B:FE:66
Authority key identifier: 44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31
Certificate issuer:       /CN=44957c7e26a3fe52f27ffbbc40e842764016b131
Certificate serial:       0198D65F931E5347F5FC45AFB56D9971FE36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
Manifest number:          06E8
Signing time:             Sat 23 Aug 2025 10:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:44 +0000
Files and hashes:         1: RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl (hash: gTtchL0BPSJqO4mt+H8UKAmNSSLvCLTosROAg8p9DsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:93:1e:53:47:f5:fc:45:af:b5:6d:99:71:fe:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44957c7e26a3fe52f27ffbbc40e842764016b131
        Validity
            Not Before: Aug 23 10:00:44 2025 GMT
            Not After : Aug 24 10:00:44 2025 GMT
        Subject: CN=ed38f529f4d433fe5e6b5fd15f8c7529980bfe66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:5f:e0:52:83:e9:0e:12:df:a9:b3:97:6c:
                    87:60:bf:0e:84:f6:6f:e8:73:80:c2:1b:6f:a6:08:
                    58:64:90:6f:25:72:24:57:9f:17:56:d6:3d:0d:c2:
                    9f:bf:f7:fa:e3:a7:7c:aa:23:88:75:24:87:41:2f:
                    24:31:7d:ef:60:59:75:91:8a:5f:16:96:64:dd:de:
                    d9:dd:60:1d:2c:e4:7d:bc:36:17:b2:66:f4:7a:5e:
                    06:bb:50:49:4e:3a:70:0a:ee:06:47:1d:68:db:b1:
                    ce:e1:b4:22:5e:e9:e8:95:5d:c0:e3:e8:9b:1c:d3:
                    1e:2c:1b:8e:d7:98:3f:df:a3:18:65:f5:8d:b8:c6:
                    7c:15:29:e7:65:2f:60:2b:3c:75:6c:4e:cd:62:d3:
                    2a:71:e2:d8:76:2b:c4:95:75:27:74:fa:88:5b:05:
                    e6:19:aa:ad:59:f8:fb:50:da:eb:88:36:ae:e4:82:
                    ec:1b:48:8c:ac:f9:68:e9:8d:7d:6e:ff:f7:2a:f4:
                    39:65:89:86:c2:ac:78:8c:c9:b0:6f:43:d8:62:1b:
                    91:6b:54:b7:c5:52:5b:c5:46:c8:2b:bb:e5:ec:66:
                    ee:ee:9f:7a:21:35:1d:8d:a8:c0:5b:7c:bb:e6:b7:
                    ce:ee:86:9e:18:00:09:aa:ab:ff:83:b0:f5:50:0a:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:38:F5:29:F4:D4:33:FE:5E:6B:5F:D1:5F:8C:75:29:98:0B:FE:66
            X509v3 Authority Key Identifier:
                keyid:44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:cf:8d:89:4e:d8:e2:99:bd:f8:82:43:b6:e1:69:29:6a:31:
         94:ca:93:dd:28:3e:bd:96:0c:e5:95:e2:1c:45:57:5a:fe:f2:
         1c:c5:0e:08:ab:e7:59:9b:61:fe:f9:35:ad:09:a2:a7:93:aa:
         60:f9:00:f8:b0:3f:fc:4a:0b:7b:11:30:00:80:6c:3a:9b:a8:
         8e:08:32:8b:94:da:f3:4e:85:e1:70:41:7a:ee:06:ee:e1:15:
         39:a2:e8:bf:68:2f:a3:3e:4b:a6:1d:28:53:40:c3:31:06:f7:
         cf:60:5a:17:0b:4f:c2:86:57:d3:71:fd:5a:b1:78:b9:fc:fa:
         5d:a1:d2:29:d3:ea:54:02:2d:d0:34:2a:2e:2b:cf:c4:e0:b0:
         a4:40:d3:e4:12:21:f7:8f:3d:f5:2f:d1:eb:de:e3:87:79:c3:
         75:2a:20:1b:92:d4:70:6f:a9:32:1e:88:5e:44:3d:fe:09:35:
         71:f5:d1:8c:d2:d4:f6:ae:31:05:e1:20:e5:f1:67:f8:ee:ff:
         37:67:b3:a2:6e:32:eb:c8:42:ef:e1:86:21:c6:7d:7b:3a:fb:
         6c:6d:86:53:da:b8:1b:c9:a4:b4:93:e0:77:d3:01:95:f7:ca:
         d2:4b:51:b8:fc:9b:95:c1:08:66:d4:8c:df:b7:ac:8e:55:a1:
         c0:d7:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:27 2025 by rpki-client