Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
File:                     jvSnYgy-f8xHKj2gKckLX72UUZw.mft (raw, json)
Hash identifier:          PcxdiWQ2Wi+EBZD2+SUMecSkehIN9B/24nHFZRQqQGA=
Subject key identifier:   24:A8:63:23:23:51:AA:C9:8E:9E:1D:37:C7:84:DB:9D:DC:F1:F8:7B
Authority key identifier: 8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
Certificate issuer:       /CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Certificate serial:       0197BA7ECF9EF8B495D7267DCEA968A8C9CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
Manifest number:          06A6
Signing time:             Sun 29 Jun 2025 07:02:42 +0000
Manifest this update:     Sun 29 Jun 2025 07:02:42 +0000
Manifest next update:     Mon 30 Jun 2025 07:02:42 +0000
Files and hashes:         1: jvSnYgy-f8xHKj2gKckLX72UUZw.crl (hash: Z2FvICLnn114tS9XObJpHxMrJZp9lTtFf5DegUbq9e8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7e:cf:9e:f8:b4:95:d7:26:7d:ce:a9:68:a8:c9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
        Validity
            Not Before: Jun 29 07:02:42 2025 GMT
            Not After : Jun 30 07:02:42 2025 GMT
        Subject: CN=24a863232351aac98e9e1d37c784db9ddcf1f87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:51:96:d6:91:54:10:6e:57:da:14:ef:10:
                    93:30:c1:1f:da:6f:a2:30:51:7d:c9:07:20:a2:f9:
                    9c:2f:34:98:fa:5f:2b:f3:8f:cb:a9:cf:04:27:02:
                    2a:16:92:fd:b5:de:a9:16:4b:e3:1c:5c:58:68:67:
                    a0:a9:3a:d0:06:fa:48:9c:2f:77:cd:42:b5:42:c8:
                    c0:6f:df:39:e3:61:ac:25:73:16:26:5c:33:1c:2f:
                    85:a2:ac:07:ba:92:f7:16:45:5a:94:c5:95:63:50:
                    c1:4f:91:1b:dc:85:8c:f0:53:d6:ec:35:cf:a1:79:
                    06:f9:67:eb:31:86:73:cd:10:ba:1e:10:ab:58:99:
                    e5:39:5d:c4:cb:5a:93:43:60:98:a9:75:06:40:df:
                    69:32:ed:51:29:7c:de:28:a6:48:0b:eb:ed:47:23:
                    a2:6a:b2:1e:8f:ef:96:7d:4c:ad:54:e3:85:64:5b:
                    09:35:81:b7:d6:fe:31:d2:bc:45:9c:35:d7:06:03:
                    42:91:f3:d7:ab:60:b0:57:a5:26:0f:55:35:89:8e:
                    00:fe:ba:82:41:d0:4c:41:db:ae:cb:5f:ac:9d:d9:
                    d2:c2:e3:d9:b4:cd:92:1d:4b:46:d2:a2:f5:40:80:
                    3e:7e:b0:ca:03:d4:bc:17:3d:72:36:f1:16:9b:37:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A8:63:23:23:51:AA:C9:8E:9E:1D:37:C7:84:DB:9D:DC:F1:F8:7B
            X509v3 Authority Key Identifier:
                keyid:8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:48:cb:28:b4:dc:82:b6:e3:9f:1b:7c:40:1a:ca:d7:b8:cd:
         68:e7:f2:5c:71:cd:d0:6b:02:1e:64:5a:f2:70:62:58:32:1d:
         3e:38:54:e5:9c:05:b1:1b:bf:6c:20:a5:06:52:20:b7:22:8d:
         6f:e7:ad:4d:12:f5:e3:21:fe:56:81:50:81:22:78:ae:70:f4:
         11:e1:5e:01:8e:d4:4c:f5:ce:2d:cf:e0:65:bb:45:82:40:97:
         e1:21:a6:93:16:2b:ef:ca:de:75:11:0c:ad:b4:17:69:6f:38:
         38:67:e6:e5:b6:0e:ac:f7:c6:b1:cc:29:ec:c2:54:8a:30:39:
         ee:b3:e0:f6:69:b8:47:29:be:66:fb:b5:91:e5:7b:13:55:7c:
         9c:0d:f2:71:bf:84:3d:d3:90:b6:6a:5e:16:5f:e9:f7:02:f2:
         13:4b:64:e6:d2:20:fc:e1:78:ff:ba:98:21:ab:25:c4:4b:35:
         3d:b7:99:c9:cb:0e:0e:9f:d8:49:dd:64:89:61:d7:de:61:8c:
         d2:f5:d3:02:6c:61:36:45:7a:c0:bd:83:06:24:b3:81:01:21:
         df:3a:30:84:e4:2c:1f:77:d7:13:c5:b1:1a:c1:bd:ac:76:f2:
         86:b2:7f:db:40:6e:df:ed:fc:56:1a:fd:05:fd:44:87:9a:f5:
         24:4b:02:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:15:17 2025 by rpki-client