Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File:                     jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier:          A5bh7ouAYCS2AiJ42YGgyKJpG2IcUAWPfVw2Y2AebAU=
Subject key identifier:   78:EA:56:80:83:0C:04:A3:CD:4A:55:77:14:71:60:73:28:E7:91:56
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer:       /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial:       0198462D5EDD625B1B4A9664DAA81EE33ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number:          15FB
Signing time:             Sat 26 Jul 2025 10:00:35 +0000
Manifest this update:     Sat 26 Jul 2025 10:00:35 +0000
Manifest next update:     Sun 27 Jul 2025 10:00:35 +0000
Files and hashes:         1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: 8RZdpHNEHx6d2YVDwlJitysceSxORhxr9s7iXDTawtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 10:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:2d:5e:dd:62:5b:1b:4a:96:64:da:a8:1e:e3:3a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
        Validity
            Not Before: Jul 26 10:00:35 2025 GMT
            Not After : Jul 27 10:00:35 2025 GMT
        Subject: CN=78ea5680830c04a3cd4a55771471607328e79156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:28:9e:72:97:ed:f0:03:98:97:16:4c:5e:
                    a2:77:63:3d:f6:00:41:44:68:96:36:55:a5:e4:a3:
                    00:9c:b7:c6:8f:fe:32:00:50:39:08:83:39:d1:c3:
                    b0:01:74:9c:89:40:c5:41:c1:f2:15:74:71:79:93:
                    1a:06:d4:83:1a:28:1c:20:5c:11:a6:76:79:6b:2b:
                    3e:6b:a7:bb:fc:1d:76:2b:cf:76:58:5e:41:48:0f:
                    3b:2f:49:d0:d8:bf:7f:e0:4d:80:26:49:ad:2e:5d:
                    87:b1:d1:e7:c4:d3:b4:5f:b4:52:69:d9:cc:56:3e:
                    04:ec:ec:14:f2:df:9b:9d:b1:26:9a:37:e6:06:68:
                    80:63:3b:35:66:6b:cf:01:e4:20:9d:1f:c3:77:28:
                    7e:24:14:4e:a6:98:7d:14:33:ef:e1:20:08:7d:28:
                    c5:10:e8:98:c2:8e:f8:f4:0a:c0:1d:a7:ec:e6:08:
                    86:dd:4b:df:8a:17:7e:16:53:62:2b:6e:ae:7f:a9:
                    9d:d6:f9:4a:f7:e4:ba:4a:bf:55:2b:a5:a0:71:68:
                    e5:bd:61:52:a4:5e:bc:1c:56:28:46:b8:a3:62:4b:
                    47:42:fd:4f:37:d9:6b:f9:4a:96:ba:fb:ff:34:d7:
                    58:6c:24:00:f3:bc:96:06:28:57:f4:5d:a2:bd:ca:
                    1d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EA:56:80:83:0C:04:A3:CD:4A:55:77:14:71:60:73:28:E7:91:56
            X509v3 Authority Key Identifier:
                keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4e:d4:88:af:98:ee:94:b7:3d:0f:58:28:20:ce:c5:73:17:
         a1:a3:f7:5a:c9:49:59:0b:9d:23:0c:0e:88:09:0d:b0:fe:61:
         64:b0:51:d7:9a:2e:c3:07:c2:93:30:f3:f5:5f:9a:52:7f:d1:
         e8:b9:95:94:b2:be:00:d8:9a:74:07:d6:12:d0:46:33:ba:18:
         41:e8:0b:13:e5:c8:0d:0e:88:13:d2:09:af:eb:ac:e5:79:54:
         27:b7:ec:a6:b1:1f:26:1b:5a:c0:8c:dc:53:39:af:34:4e:ee:
         73:77:a2:86:5a:6c:7e:5e:4d:46:4d:90:4b:c8:ca:49:95:49:
         15:cf:8a:1c:dd:22:2e:71:8e:e6:e3:15:c5:f8:ef:86:c4:76:
         a7:c3:64:be:10:cd:19:fd:72:57:6e:ee:08:5b:53:10:f6:b1:
         c3:1a:ec:52:d4:be:b3:11:68:e0:89:11:44:24:4b:9d:1b:30:
         45:43:a7:24:81:81:da:ac:dd:98:1c:24:ad:c5:63:00:56:95:
         8c:50:c4:01:d8:2d:eb:48:06:11:6f:c5:a1:eb:42:36:ed:24:
         6a:21:0e:12:d2:d4:b0:24:ae:a0:f1:e7:f4:19:53:7d:35:3a:
         6a:3e:42:e1:ab:68:d9:60:6b:65:35:37:c4:8d:fe:63:db:97:
         d8:9b:87:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:02:15 2025 by rpki-client