Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
File:                     l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft (raw, json)
Hash identifier:          2Ih5vqIaWKUH4JPhyLfh8dwhrdlXEP9oDJyjPmgBzNg=
Subject key identifier:   31:1B:54:46:5F:49:CC:E1:EB:C1:0D:1F:65:3E:DA:D6:D9:62:21:A0
Authority key identifier: 97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E
Certificate issuer:       /CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
Certificate serial:       01984A0A6A281EDA2D90B44CAC085376382C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
Manifest number:          04F0
Signing time:             Sun 27 Jul 2025 04:00:53 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:53 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:53 +0000
Files and hashes:         1: l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl (hash: 5leOtMo/nKtCuYCy9VqYLdPYEziJLWiS7VLC8hwOobE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:6a:28:1e:da:2d:90:b4:4c:ac:08:53:76:38:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9778cc9c594bc8e8f145456f41566d8cbd4aad3e
        Validity
            Not Before: Jul 27 04:00:53 2025 GMT
            Not After : Jul 28 04:00:53 2025 GMT
        Subject: CN=311b54465f49cce1ebc10d1f653edad6d96221a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:82:7c:52:10:ee:bd:e7:2f:7f:0b:b7:89:
                    b3:05:f7:d2:b9:d4:b2:57:62:cf:02:ac:77:a6:1d:
                    bb:bd:af:08:6a:83:b0:c0:97:27:2d:06:17:ea:ff:
                    a8:97:31:66:29:0a:56:ec:20:d3:79:91:a0:ad:95:
                    d9:f5:bc:d2:51:8a:52:a8:41:68:7f:5d:b4:c7:cb:
                    06:09:13:db:23:2c:16:ce:11:5c:be:06:47:30:cb:
                    8e:88:c9:19:ec:f4:03:bd:a1:38:32:1d:3a:1b:ca:
                    7a:25:de:16:1e:83:ab:4f:e2:48:e6:25:04:47:a2:
                    fc:cb:3c:ee:73:65:ec:53:45:d0:27:71:48:95:a0:
                    3b:84:7a:f1:c4:74:5a:ef:6d:37:bc:a6:6a:22:50:
                    5d:85:be:96:b5:95:85:c0:bb:e8:a0:c3:c9:0d:22:
                    f6:10:b4:5c:d6:db:c3:ef:63:66:83:05:7e:0b:6f:
                    0f:23:e6:8d:0f:8c:9f:a5:b2:fd:18:e4:e7:c5:a9:
                    be:73:f4:95:a8:e4:b7:b6:c7:bb:09:5b:ea:f0:18:
                    c3:2d:44:cf:30:78:2e:c3:fc:43:19:d2:03:b5:f7:
                    ba:0a:1c:92:ec:2a:97:1a:2a:99:4f:d7:de:e0:d7:
                    0d:27:9b:5a:99:50:44:46:97:f6:86:51:8d:03:26:
                    8b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1B:54:46:5F:49:CC:E1:EB:C1:0D:1F:65:3E:DA:D6:D9:62:21:A0
            X509v3 Authority Key Identifier:
                keyid:97:78:CC:9C:59:4B:C8:E8:F1:45:45:6F:41:56:6D:8C:BD:4A:AD:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3jMnFlLyOjxRUVvQVZtjL1KrT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c605fb-dddc-474c-8d48-e802cd6da608/1/l3jMnFlLyOjxRUVvQVZtjL1KrT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3c:eb:91:96:1a:5f:d1:7a:f5:1b:c4:63:6f:9e:04:88:69:
         b3:fc:fe:d9:11:ac:7c:fd:ac:04:dc:d6:10:bd:b8:5c:4c:ad:
         82:70:f2:bc:ca:51:78:a0:db:26:25:de:bf:2b:a4:03:fb:ad:
         42:2e:35:f0:d1:78:82:f6:48:60:a8:51:46:3c:5c:2b:3b:1e:
         2e:4f:c0:42:4f:bd:20:53:7f:6b:f1:e7:37:d2:ec:95:36:59:
         f5:88:20:cf:11:87:c6:ac:99:ea:3b:3c:b8:28:c7:8a:da:21:
         f5:1f:e2:55:c9:20:4f:e9:ee:82:62:bf:e2:ec:33:11:a8:63:
         a4:c3:a6:c8:5c:08:9d:30:18:c2:a4:78:af:b2:f5:ba:91:f1:
         8c:3e:2d:a8:f3:41:fe:17:54:f5:ad:f1:fd:2a:f3:69:7a:93:
         54:6a:77:3f:9f:6a:2b:3c:fb:7c:28:98:ef:6f:03:42:73:a0:
         52:5f:fe:7c:fb:83:37:e8:bb:7e:21:57:a1:c1:9b:ea:b1:43:
         3b:8b:24:90:14:81:19:e7:75:52:3d:e5:9a:9a:d2:5d:09:ef:
         af:8b:4f:96:de:70:26:b2:08:05:86:17:0d:99:95:2c:85:5b:
         c9:23:9d:81:d2:39:d4:79:8c:6a:90:05:14:3a:99:fb:15:0f:
         e0:79:3e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:33:22 2025 by rpki-client