Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
File:                     J2zuYEMhsPEryjZ7VMBzmqil8To.mft (raw, json)
Hash identifier:          SS535eYi77imwIqKbl3UNjVAZnEIG62+dBifpxE06Ik=
Subject key identifier:   96:C1:E7:A7:DF:61:EF:9C:9C:AE:64:4D:DB:9A:FD:6C:C7:37:9F:AB
Authority key identifier: 27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
Certificate issuer:       /CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Certificate serial:       01984776DC41F00758185AAC34546714D13D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
Manifest number:          0F52
Signing time:             Sat 26 Jul 2025 16:00:28 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:28 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:28 +0000
Files and hashes:         1: J2zuYEMhsPEryjZ7VMBzmqil8To.crl (hash: FziOgQrhjA5WQPaQsrI1Wj9g0E0j7zzwkGMbhuhm3zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:dc:41:f0:07:58:18:5a:ac:34:54:67:14:d1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276cee604321b0f12bca367b54c0739aa8a5f13a
        Validity
            Not Before: Jul 26 16:00:28 2025 GMT
            Not After : Jul 27 16:00:28 2025 GMT
        Subject: CN=96c1e7a7df61ef9c9cae644ddb9afd6cc7379fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:84:bb:43:01:5e:0c:bd:fb:cf:91:73:77:
                    e7:1b:b8:39:9b:02:04:f4:d9:47:ba:67:6e:ca:53:
                    a7:84:dc:26:eb:01:5a:7a:57:b1:f1:43:a5:77:ac:
                    af:a0:eb:ca:d1:9a:91:78:ca:5c:d9:79:11:5f:dd:
                    e0:46:95:02:cb:c8:c6:f6:03:f1:7c:c4:c4:d8:0f:
                    c0:2d:f8:53:75:6e:b2:58:32:c7:b8:dc:3d:40:7c:
                    38:e4:45:c5:f2:e2:65:99:9e:f1:28:18:5b:6f:59:
                    df:13:f7:00:e2:c0:a4:bc:a3:27:7e:b8:05:56:73:
                    69:93:52:94:c5:d3:db:00:8d:a9:7d:5d:d9:b4:11:
                    81:01:c4:ee:ff:b1:2f:6c:99:ab:91:e4:1b:a5:bc:
                    03:f7:6d:1b:ee:06:86:7d:88:62:d3:75:44:d6:e3:
                    87:2b:8c:21:c9:f0:7f:53:cd:24:3e:95:22:07:19:
                    05:ac:99:59:e8:2a:d3:86:44:6b:78:0d:48:97:bf:
                    15:ef:15:f1:3e:ff:73:15:c7:b3:be:5c:2a:77:3b:
                    a5:3f:31:59:fa:e1:3f:c7:73:08:fa:c8:c3:75:81:
                    bd:98:39:51:7e:e7:60:8c:86:06:39:4f:31:a0:da:
                    0a:13:72:85:ea:53:06:71:e4:d9:94:ae:60:1b:a6:
                    d8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C1:E7:A7:DF:61:EF:9C:9C:AE:64:4D:DB:9A:FD:6C:C7:37:9F:AB
            X509v3 Authority Key Identifier:
                keyid:27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a0:58:42:86:a4:34:9b:a7:00:2d:77:91:cd:58:ed:76:d1:
         6b:f8:33:c2:9d:a3:b4:9f:72:c0:40:ab:cb:12:b7:34:f5:1a:
         d0:39:a1:a8:a9:84:b0:c9:9c:0a:db:5f:6e:a5:ca:61:42:af:
         6e:d2:f3:81:3c:1d:d3:bb:30:e7:55:32:e7:5e:57:4c:e5:63:
         03:f2:45:bb:a7:3d:5c:64:bf:d5:98:21:aa:eb:9d:be:e5:84:
         b9:42:cb:47:fd:c5:d8:0e:45:06:98:22:ce:11:24:14:dc:6e:
         84:80:3c:e9:b3:a7:b8:cf:ec:58:26:03:f3:39:f3:f8:5d:75:
         b2:af:1c:a8:df:bb:2a:26:67:7f:5a:df:b6:9a:15:4f:3e:41:
         4c:06:d7:2c:a2:c5:12:94:04:24:5b:f9:60:be:dc:a0:dd:06:
         ff:5e:3a:af:20:9a:2d:b5:fa:8a:72:0e:19:c7:1d:88:04:79:
         8d:6c:48:bd:d8:35:61:e0:98:40:91:66:93:f6:c5:40:2a:9b:
         26:0a:d7:5d:16:67:91:27:5a:29:cb:07:13:a7:3b:3d:ee:e4:
         12:c7:4b:ce:a3:67:54:68:d2:a7:df:79:6a:3a:5b:30:84:10:
         d0:bf:48:04:4a:53:21:16:61:62:41:b8:a8:d2:a0:38:1b:06:
         f7:ca:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:14 2025 by rpki-client