Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
File:                     jvSnYgy-f8xHKj2gKckLX72UUZw.mft (raw, json)
Hash identifier:          xQ+KFA2SwsvFa603q1SBJ7Qys8LQ5osW1nNlIUO9isE=
Subject key identifier:   99:21:73:A8:CE:39:FD:36:C4:C2:43:94:36:9A:19:C2:E2:FA:4A:71
Authority key identifier: 8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
Certificate issuer:       /CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Certificate serial:       0196B5C7142845151F4BA04F18D9A2BC6FA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
Manifest number:          061F
Signing time:             Fri 09 May 2025 16:00:44 +0000
Manifest this update:     Fri 09 May 2025 16:00:44 +0000
Manifest next update:     Sat 10 May 2025 16:00:44 +0000
Files and hashes:         1: jvSnYgy-f8xHKj2gKckLX72UUZw.crl (hash: qRplO9+UQXOaJYExtdqJ0qC5+Pt9OJg8L8rbiP8g+dE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:c7:14:28:45:15:1f:4b:a0:4f:18:d9:a2:bc:6f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
        Validity
            Not Before: May  9 16:00:44 2025 GMT
            Not After : May 10 16:00:44 2025 GMT
        Subject: CN=992173a8ce39fd36c4c24394369a19c2e2fa4a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:1a:a0:27:89:78:5a:6b:22:04:3c:04:1f:
                    55:c0:a1:ae:86:34:a3:6a:d2:96:48:e4:70:c4:af:
                    9c:f4:62:b0:8b:05:34:5d:18:4c:b0:86:e8:f5:e9:
                    58:86:9c:a6:02:ac:93:2e:d3:76:6d:e0:b5:4c:48:
                    e0:ba:55:29:0f:f0:75:da:7c:5d:80:1f:8d:da:27:
                    be:b8:38:6d:b6:d9:9c:74:6b:c3:b1:f2:6e:23:56:
                    dd:c6:aa:b7:c9:5c:01:db:08:98:9c:f4:1c:6f:86:
                    5f:6d:b8:1c:c2:f1:6e:ba:73:22:18:03:45:fb:1e:
                    f5:28:63:92:17:95:7c:16:f7:69:ff:74:56:06:66:
                    ee:d3:7a:01:41:74:21:09:51:61:a5:11:dd:b1:a2:
                    cf:dd:43:10:4f:c3:46:45:69:3d:6f:b9:46:ab:9b:
                    9d:a4:c2:de:54:b6:0a:e7:20:6b:a9:aa:60:d1:a6:
                    18:5f:0c:12:74:2e:a9:ae:ee:d6:ff:bc:e8:c3:dd:
                    c7:d8:e5:d8:5e:65:9b:46:c3:d0:9e:45:21:d6:01:
                    2a:2f:6c:94:9a:56:81:a7:ef:14:0f:16:2d:65:46:
                    f8:d9:94:d1:6b:56:91:85:f1:45:29:dd:01:59:7e:
                    ba:5f:dd:a4:40:5c:77:ae:c6:03:9b:cc:f5:a5:22:
                    48:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:21:73:A8:CE:39:FD:36:C4:C2:43:94:36:9A:19:C2:E2:FA:4A:71
            X509v3 Authority Key Identifier:
                keyid:8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:dd:9b:9a:8a:75:40:fd:47:72:96:7c:2c:1c:6f:6c:70:e5:
         4a:35:ee:2a:a0:1d:51:0f:53:29:89:69:04:1e:29:ad:e6:65:
         63:ec:5e:28:74:fb:0d:eb:b7:91:7f:98:a8:3d:e0:b4:ab:d3:
         bf:13:e4:b7:29:9d:df:1c:94:0a:f6:22:e4:09:9b:4f:24:57:
         e8:58:83:c2:9c:ad:87:5a:76:3a:62:39:a6:0d:7f:3c:60:58:
         12:89:10:5b:49:cd:b7:03:69:ba:0c:7d:f6:ec:d6:2f:3c:f6:
         10:21:0e:09:54:60:3a:c1:96:3a:80:ba:49:93:ba:9a:73:0d:
         7a:6f:7c:3a:7b:d4:b1:94:99:12:70:9d:9f:40:86:d9:c9:8f:
         a9:2b:06:21:06:ca:b8:69:5f:f1:4c:f4:5c:3c:d9:ec:c0:a6:
         83:1d:06:1b:35:16:dd:ef:bb:4e:a7:6f:6d:00:de:ca:03:21:
         c7:01:bb:b3:2c:38:9b:f0:49:eb:1b:89:76:16:18:98:bd:f0:
         91:e6:5e:5a:3c:d2:fe:0c:55:19:9c:08:fa:7e:15:53:73:d4:
         ba:f5:98:55:b6:75:ae:5d:6b:6d:b5:b7:1c:84:ae:13:58:75:
         bc:f2:e9:50:e2:7b:a3:c3:6e:fe:c6:be:b5:fc:31:62:af:69:
         62:74:54:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:45:01 2025 by rpki-client