Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
File:                     iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft (raw, json)
Hash identifier:          H8wuGsc5hAsLQLf7hA7cFY71vFUkNVyWLKpFjI4XDtQ=
Subject key identifier:   C8:1F:B9:7C:9D:8A:56:5D:FE:39:F2:48:A9:73:77:04:DB:FA:A6:47
Authority key identifier: 88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
Certificate issuer:       /CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Certificate serial:       01984DAFF1375E64DB3CEFBD1966B0A12717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
Manifest number:          1084
Signing time:             Sun 27 Jul 2025 21:00:32 +0000
Manifest this update:     Sun 27 Jul 2025 21:00:32 +0000
Manifest next update:     Mon 28 Jul 2025 21:00:32 +0000
Files and hashes:         1: iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl (hash: 8o6AcSMbxKqtw4fxzdVsQugR2anFN9vF5o/H3pvif8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4d:af:f1:37:5e:64:db:3c:ef:bd:19:66:b0:a1:27:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
        Validity
            Not Before: Jul 27 21:00:32 2025 GMT
            Not After : Jul 28 21:00:32 2025 GMT
        Subject: CN=c81fb97c9d8a565dfe39f248a9737704dbfaa647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:18:e4:47:33:1f:a0:f4:ba:06:60:4d:a1:
                    68:4a:b4:e4:74:50:9d:af:0a:1a:a2:34:eb:bd:1f:
                    b3:8a:83:f2:34:1b:7e:30:27:f1:04:36:2b:64:1f:
                    d4:c8:e7:0f:e5:37:21:ce:e1:3c:2b:d1:4d:e5:7c:
                    95:11:3d:27:45:ed:dc:b1:9e:0a:26:68:56:2f:f4:
                    67:32:1a:a2:c1:e9:0e:3a:83:07:a6:0f:aa:2f:31:
                    37:73:bc:b4:6f:2e:a1:6a:05:04:6a:df:42:cf:ef:
                    3a:fe:5d:2c:95:d5:fa:34:69:96:5f:f3:8f:f2:6e:
                    c5:bb:d5:34:f4:3d:4e:74:6a:cf:78:de:a2:74:2c:
                    69:ea:ec:4a:51:f3:7f:6d:25:ab:f9:a9:c8:ab:d8:
                    6b:5f:83:93:73:64:45:23:42:3a:b5:5a:57:e4:7e:
                    31:2c:4f:49:df:fc:4c:3f:f3:98:23:69:ef:0c:5e:
                    7b:99:28:20:ec:fd:1a:26:ef:25:7e:0c:91:a3:1f:
                    8e:55:e9:b0:65:2e:7c:9e:f2:b8:74:89:3a:17:d3:
                    10:41:41:18:1f:90:6f:5a:88:75:da:07:19:3e:31:
                    c3:ac:44:88:92:5b:e3:ef:17:66:18:b8:14:81:d1:
                    f2:c4:76:d0:b7:4b:93:7e:13:8f:75:3c:5d:4a:6e:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1F:B9:7C:9D:8A:56:5D:FE:39:F2:48:A9:73:77:04:DB:FA:A6:47
            X509v3 Authority Key Identifier:
                keyid:88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:f6:47:cc:45:d6:dd:0c:79:f9:ca:85:f8:19:2a:65:8b:71:
         5d:66:2c:83:d4:e3:4a:02:e7:58:47:49:16:fa:95:cf:59:8e:
         0c:63:1f:c8:df:ac:32:42:29:1b:a9:dd:d8:e0:b2:35:bd:03:
         91:d0:2a:9e:fe:4b:e5:00:49:d9:37:ef:b5:04:d1:c1:d2:25:
         f2:a6:5e:37:d4:b8:a8:3e:a0:ae:bf:57:0e:29:85:0f:ca:b3:
         20:9c:a7:bd:f6:79:58:1c:65:80:4e:7f:fb:0f:36:ac:1d:97:
         0d:bf:da:eb:ca:8d:bf:d7:6a:ca:32:61:20:50:33:91:a2:96:
         26:f8:13:8a:c1:99:2e:11:d7:95:93:3a:23:f7:a3:cc:b4:73:
         a1:29:69:4d:42:d0:38:c6:b5:34:b3:31:31:66:05:5f:fe:b8:
         85:3a:bb:55:07:89:75:75:45:d6:ff:a4:3a:da:6f:05:88:f0:
         75:26:52:af:dd:6c:fb:4f:21:d8:4e:ab:a1:76:8c:7b:8e:74:
         92:3d:47:6e:0f:7d:8b:8b:70:43:a5:77:d8:9e:49:cf:4a:76:
         f5:be:7c:9d:e6:ff:42:9b:b6:a9:65:60:be:01:4b:32:68:48:
         be:83:ba:12:41:79:d5:d7:a4:6c:52:1e:42:9f:b0:ff:66:3c:
         df:d5:3a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:42:32 2025 by rpki-client