Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File:                     K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier:          nZ3jOwbEbH5wjZ+sJKEDu9MFVp9Gu5jJyI5i7s2Vfvs=
Subject key identifier:   09:AB:6C:47:62:A8:CE:83:14:63:FE:0E:38:8F:53:45:BF:5C:18:E4
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer:       /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial:       01984A09D8D6AC07BB616F35E06E0350E29F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number:          082A
Signing time:             Sun 27 Jul 2025 04:00:15 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:15 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:15 +0000
Files and hashes:         1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: CGzjkebkleGJ3S1Y8mzDxKZADJblshgWVGK8fjny1EY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:d8:d6:ac:07:bb:61:6f:35:e0:6e:03:50:e2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
        Validity
            Not Before: Jul 27 04:00:15 2025 GMT
            Not After : Jul 28 04:00:15 2025 GMT
        Subject: CN=09ab6c4762a8ce831463fe0e388f5345bf5c18e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a8:dc:0e:20:cf:ff:73:e2:91:1c:65:5d:41:
                    8a:0b:f7:32:bb:11:58:a4:9c:bd:ba:b2:e1:64:2c:
                    b6:3c:76:51:b3:96:0d:2c:e7:e3:19:48:41:48:a1:
                    3c:9f:c9:15:7b:18:43:4c:dc:5d:2d:b2:33:54:a7:
                    d6:c2:bb:cb:09:a6:c7:33:ff:50:5c:17:24:32:3a:
                    5b:4c:16:0c:4d:28:b6:28:d5:9d:a6:3e:8d:b2:1a:
                    19:07:ce:6d:86:45:cf:e7:62:08:0e:da:c0:ee:92:
                    5f:77:f1:64:0a:70:e3:27:65:3a:3e:67:5e:1c:f8:
                    5b:ec:7e:a1:4d:d3:73:42:ee:50:03:34:83:cc:f9:
                    ec:46:29:91:ae:e3:fc:54:fe:41:6a:17:2f:d7:d7:
                    ba:6f:5d:c2:43:e7:0b:e8:ee:90:67:f8:8e:e1:1f:
                    9f:ad:2e:a8:50:37:9b:6d:93:35:d9:a9:c3:8a:ad:
                    7b:71:03:25:95:74:4e:21:4b:33:5c:7b:28:fb:ec:
                    02:5c:9b:82:f1:a9:95:45:10:a3:14:8c:85:51:ad:
                    d5:93:b3:fa:07:9c:58:15:1b:c7:fd:9f:51:c3:e7:
                    46:49:2b:33:78:84:b0:40:ce:62:63:50:c8:dd:28:
                    61:4b:33:3e:8a:ca:21:02:26:73:67:11:79:cc:fb:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AB:6C:47:62:A8:CE:83:14:63:FE:0E:38:8F:53:45:BF:5C:18:E4
            X509v3 Authority Key Identifier:
                keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b5:9a:d8:3f:b3:22:23:dd:b9:5e:3a:8c:2a:87:e4:d4:09:
         d5:1a:10:ab:b6:b4:13:2f:b2:43:e5:0d:36:09:92:ed:94:0a:
         0e:6e:4f:eb:85:46:41:c6:a2:ab:7a:57:e7:e2:8d:de:3a:f4:
         a0:05:f1:8f:b0:41:62:64:8c:0b:ad:e4:58:17:ba:21:af:4a:
         b6:2a:32:9c:ea:57:47:c6:8f:65:83:f5:0a:27:80:67:25:dd:
         ae:33:16:b7:51:00:ae:74:bd:ee:1d:e3:21:92:ef:35:24:b5:
         8f:d7:57:87:7e:04:f2:87:07:41:99:35:88:dd:ca:f5:63:65:
         25:bd:46:52:ee:1d:50:7c:19:41:64:ff:5f:91:79:23:5e:ec:
         5f:92:47:08:d0:5c:6a:80:42:c6:f5:78:7c:2e:85:dc:dd:57:
         17:e6:07:cc:66:2e:80:22:43:c5:e4:08:a3:00:cd:5a:7f:9a:
         53:c8:7b:07:04:21:8b:2e:1c:30:be:b3:f0:ef:37:19:2c:05:
         3c:98:e5:2c:6b:e5:fb:6a:1d:f4:b8:1c:90:e7:a8:d5:4e:ab:
         f2:4d:cb:e0:eb:a9:d3:a0:db:41:bb:fa:ef:fb:c7:c7:66:af:
         00:01:d5:7d:e7:51:42:5d:da:89:bf:a2:0d:81:a7:c8:24:02:
         cf:6a:4a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCdjWrAe7YW814G4DUOKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDk4OWZlM2NhY2EzZjMwNDQzYzU0YTkwMmY2OTEyMTEw
ZDkxOTUwHhcNMjUwNzI3MDQwMDE1WhcNMjUwNzI4MDQwMDE1WjAzMTEwLwYDVQQD
EygwOWFiNmM0NzYyYThjZTgzMTQ2M2ZlMGUzODhmNTM0NWJmNWMxOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qjcDiDP/3PikRxlXUGKC/cyuxFY
pJy9urLhZCy2PHZRs5YNLOfjGUhBSKE8n8kVexhDTNxdLbIzVKfWwrvLCabHM/9Q
XBckMjpbTBYMTSi2KNWdpj6NshoZB85thkXP52IIDtrA7pJfd/FkCnDjJ2U6Pmde
HPhb7H6hTdNzQu5QAzSDzPnsRimRruP8VP5Bahcv19e6b13CQ+cL6O6QZ/iO4R+f
rS6oUDebbZM12anDiq17cQMllXROIUszXHso++wCXJuC8amVRRCjFIyFUa3Vk7P6
B5xYFRvH/Z9Rw+dGSSszeISwQM5iY1DI3ShhSzM+isohAiZzZxF5zPtgqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmrbEdiqM6DFGP+DjiPU0W/XBjkMB8GA1UdIwQY
MBaAFCtJif48rKPzBEPFSpAvaRIRDZGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85YTY0MWYtZTRhNy00Y2M0LWFjZWMt
NWMzOGU3ZmU4ZTgxLzEvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85YTY0MWYtZTRhNy00Y2M0LWFjZWMtNWMzOGU3ZmU4ZTgx
LzEvSzBtSl9qeXNvX01FUThWS2tDOXBFaEVOa1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbWa2D+z
IiPduV46jCqH5NQJ1RoQq7a0Ey+yQ+UNNgmS7ZQKDm5P64VGQcaiq3pX5+KN3jr0
oAXxj7BBYmSMC63kWBe6Ia9KtioynOpXR8aPZYP1CieAZyXdrjMWt1EArnS97h3j
IZLvNSS1j9dXh34E8ocHQZk1iN3K9WNlJb1GUu4dUHwZQWT/X5F5I17sX5JHCNBc
aoBCxvV4fC6F3N1XF+YHzGYugCJDxeQIowDNWn+aU8h7BwQhiy4cML6z8O83GSwF
PJjlLGvl+2od9LgckOeo1U6r8k3L4Oup06DbQbv67/vHx2avAAHVfedRQl3aib+i
DYGnyCQCz2pKnQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:46 2025 by rpki-client