Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
File:                     jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json)
Hash identifier:          1WKn5OWaOMHtGA99kKzUw6AD4BA0jeGsUehurN3WaUc=
Subject key identifier:   23:29:35:90:4A:67:D9:D6:40:AD:6F:88:49:B2:3C:0D:3C:9B:00:9A
Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
Certificate issuer:       /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Certificate serial:       0198496694644DE848E88E6E900EA89FD059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
Manifest number:          0478
Signing time:             Sun 27 Jul 2025 01:01:56 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:56 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:56 +0000
Files and hashes:         1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: EwmD92hmFivNmdgoPogJh4aAOZGYe0uvXW3lE2MGRWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:94:64:4d:e8:48:e8:8e:6e:90:0e:a8:9f:d0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
        Validity
            Not Before: Jul 27 01:01:56 2025 GMT
            Not After : Jul 28 01:01:56 2025 GMT
        Subject: CN=232935904a67d9d640ad6f8849b23c0d3c9b009a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:d6:48:06:f6:16:0a:17:b2:c3:a6:b1:05:
                    42:90:91:3a:40:1f:03:7b:fd:65:39:f9:d4:09:2b:
                    eb:d3:74:00:1a:7a:22:b0:49:81:d3:6a:31:7c:33:
                    e6:6c:ff:b5:a4:45:c5:15:94:02:b4:34:0f:cf:dc:
                    d2:17:dd:a6:b7:de:e1:4d:69:51:1e:23:da:2e:5e:
                    02:a2:66:36:15:26:36:1c:99:04:ea:7f:c1:4f:2d:
                    db:e9:c9:34:bb:64:d6:a7:42:28:9f:c5:fb:4c:ea:
                    7e:f9:33:59:c5:c5:02:77:2d:ee:f5:8c:f6:4d:09:
                    96:35:2d:c2:e0:d9:a4:29:ae:99:9f:58:66:d2:ef:
                    b5:35:be:39:eb:f4:da:d9:09:05:ff:8a:1b:07:1f:
                    a8:11:89:ac:db:a6:b5:25:ea:29:24:f0:8b:26:1d:
                    c4:e9:16:8b:40:32:e1:4e:e5:8d:ce:06:1f:26:1f:
                    82:b8:3f:d2:a9:35:28:1f:e0:78:f2:e7:dc:81:d4:
                    39:b8:9a:f7:e4:1c:52:3e:82:e0:88:57:09:8e:ed:
                    16:ed:dd:fd:00:4b:13:4e:95:69:07:d1:fc:8a:3c:
                    ab:98:c8:2c:8d:ff:1a:ac:d8:a5:2e:3c:47:36:b1:
                    03:c3:44:4d:47:93:f1:ee:d9:66:cd:b3:db:9e:33:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:29:35:90:4A:67:D9:D6:40:AD:6F:88:49:B2:3C:0D:3C:9B:00:9A
            X509v3 Authority Key Identifier:
                keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e2:f6:3a:fa:10:8f:4b:c9:99:61:49:1e:fd:f2:45:a2:3c:
         40:1f:38:50:1d:75:90:2a:cb:51:f3:07:73:57:77:4d:5e:b7:
         cf:45:95:48:e3:61:2a:32:f6:12:46:9d:c6:38:8e:d2:67:30:
         09:7a:30:bc:fc:7c:9a:76:20:dd:00:da:e8:1c:38:2f:2a:77:
         cf:07:2f:5b:8d:80:a6:68:84:f9:55:2f:18:4c:a6:6f:7e:c8:
         cb:eb:68:1b:24:46:fc:64:82:f6:6d:65:0d:a1:35:43:a4:aa:
         14:f5:73:a1:4e:64:0c:28:f7:53:57:f4:fd:92:2d:79:10:7e:
         c8:09:7f:ed:b4:7b:0d:69:33:db:33:1a:30:fd:16:54:94:0d:
         71:97:ad:3e:e5:50:e9:84:b6:b4:a2:b4:7c:26:53:67:7d:bf:
         57:79:09:43:1a:0b:63:35:a5:fa:00:0b:cb:09:04:de:aa:cf:
         cf:72:0a:20:d8:d4:b1:6d:9d:64:3b:60:c0:45:1b:e3:4a:d8:
         10:80:de:2e:ae:33:d8:0f:e9:ee:1b:c5:5c:3a:cc:c0:97:35:
         9b:99:60:bb:ff:91:00:7d:90:be:c8:e3:14:89:5a:d5:84:bf:
         8d:3b:29:b7:7c:cc:8c:ac:61:65:43:9c:29:5b:9f:41:18:47:
         50:00:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:40:18 2025 by rpki-client