Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
File:                     jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json)
Hash identifier:          d/9n6llGeboNemvTfCLhTkuA8N0d6BwqOxz+NS7JUuk=
Subject key identifier:   7F:D0:19:5A:26:28:CD:0C:FA:5C:1F:7A:4A:50:AC:09:BB:BA:BA:83
Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
Certificate issuer:       /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Certificate serial:       0196A0F67F635D2946684DC2FF243D2138A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
Manifest number:          0B11
Signing time:             Mon 05 May 2025 15:00:31 +0000
Manifest this update:     Mon 05 May 2025 15:00:31 +0000
Manifest next update:     Tue 06 May 2025 15:00:31 +0000
Files and hashes:         1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: 1FFf1j3tGshgwwteUOFN2c/gOOOZ/dFD6djaEGeXQ64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:f6:7f:63:5d:29:46:68:4d:c2:ff:24:3d:21:38:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
        Validity
            Not Before: May  5 15:00:31 2025 GMT
            Not After : May  6 15:00:31 2025 GMT
        Subject: CN=7fd0195a2628cd0cfa5c1f7a4a50ac09bbbaba83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7f:f4:78:25:d6:2e:36:47:18:72:13:64:66:
                    19:66:44:bb:d4:35:78:fd:d2:45:4a:77:61:60:30:
                    ce:44:ac:42:5f:ec:88:ec:ff:4e:37:e9:72:27:18:
                    fc:02:fa:c7:1d:92:50:7f:ce:ce:2d:cb:d2:51:bf:
                    cd:03:c7:58:ee:38:05:40:9c:c5:a7:1d:b4:e2:00:
                    31:9c:e8:64:78:a9:dd:c5:91:2d:94:c0:0f:a4:1e:
                    65:7a:40:03:87:01:4a:a6:ff:54:a1:66:3c:ea:9b:
                    dc:01:00:a4:9a:47:de:87:70:e7:97:f2:ad:52:89:
                    32:92:a8:68:ed:0b:86:52:db:2b:fe:8d:0d:2c:a8:
                    89:9f:5f:65:2e:0f:58:c0:07:75:37:48:22:26:f6:
                    cf:04:d3:a9:a6:d6:20:35:36:17:ee:33:2e:af:21:
                    f5:89:cf:2a:01:ef:59:07:00:25:cf:d5:8a:3c:99:
                    cc:b7:6d:73:43:a7:8b:94:42:f3:dd:56:c8:e6:51:
                    c0:6e:ba:e7:c8:3d:4f:cd:b2:10:11:21:a5:ef:76:
                    6c:2b:63:d1:d8:04:66:83:d4:b9:66:91:9c:6c:df:
                    d0:79:0a:bf:6f:bf:66:53:3e:98:2b:fe:97:71:3c:
                    be:0d:cf:a6:67:e7:e8:3c:20:de:57:81:24:7d:c3:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D0:19:5A:26:28:CD:0C:FA:5C:1F:7A:4A:50:AC:09:BB:BA:BA:83
            X509v3 Authority Key Identifier:
                keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b3:f8:dc:c9:a4:30:3f:df:cd:92:f3:6b:02:47:a5:13:f1:
         de:9c:b2:2f:7f:ea:da:64:bf:b1:16:80:15:f1:68:dc:41:85:
         ad:1c:fa:a2:b1:1d:7e:49:32:0c:91:9b:8c:49:76:4f:6a:a0:
         a5:0e:e9:4e:3e:98:71:cf:ac:4b:bb:5f:ef:1f:5a:78:fa:e9:
         a8:e7:cd:87:28:fe:b3:51:08:14:51:6c:d5:d4:26:b4:75:47:
         eb:b4:6f:c1:b4:76:8e:7d:b2:3b:65:4e:04:ae:5c:21:f2:24:
         64:af:89:a9:e4:a5:48:79:36:32:dd:44:9b:c9:94:50:b6:01:
         d7:a5:20:4c:ef:09:06:ea:39:39:2c:92:f9:83:71:fd:0f:6f:
         78:ac:eb:e9:7f:84:1c:86:b3:ab:f3:32:a1:d6:76:18:57:05:
         54:ea:3d:09:16:e7:1c:bc:30:72:4f:67:c0:e5:ca:6f:40:12:
         e0:5f:2c:89:e8:bf:58:9d:63:26:c0:18:e9:91:81:f8:90:2e:
         e9:c9:7c:94:c5:bf:7c:27:39:d8:64:e2:3c:e5:5d:f8:8d:dd:
         ad:f9:60:29:24:c9:8a:25:d8:af:82:e6:1e:64:54:a3:71:c7:
         13:06:44:dd:89:96:d3:14:9e:f0:31:38:63:73:67:f0:73:8f:
         2b:3a:f1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:09:27 2025 by rpki-client