Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
File:                     JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft (raw, json)
Hash identifier:          0yYsyqSfoSWgEA1SNyNmqHrAWAl8dTNfPtHri1T59Cg=
Subject key identifier:   18:FD:5E:C4:32:EF:42:57:58:F2:72:C0:59:38:2F:0D:B2:4F:26:84
Authority key identifier: 24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35
Certificate issuer:       /CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
Certificate serial:       019848C0A8963EB03D56210C7434AA88DAF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
Manifest number:          0797
Signing time:             Sat 26 Jul 2025 22:00:42 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:42 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:42 +0000
Files and hashes:         1: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl (hash: SFcRolfMWCsF2L4gucLlIu9lLTQ/YHRtbRBI5lw7ZWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 22:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:a8:96:3e:b0:3d:56:21:0c:74:34:aa:88:da:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
        Validity
            Not Before: Jul 26 22:00:42 2025 GMT
            Not After : Jul 27 22:00:42 2025 GMT
        Subject: CN=18fd5ec432ef425758f272c059382f0db24f2684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:85:82:b8:11:f2:0e:07:ab:77:cf:26:61:
                    21:5f:f6:66:9c:bb:43:2b:45:83:e3:cc:2a:7b:e7:
                    a0:03:5b:75:6e:32:b2:b4:79:e2:dd:57:d6:89:46:
                    b1:93:85:15:b7:52:4f:c8:b1:14:48:f2:0f:e1:26:
                    13:dd:cb:a8:d4:36:32:6c:cd:42:0e:e3:d0:0d:d4:
                    2e:95:38:1e:e8:4e:e8:c4:3d:ca:c6:c2:cb:01:f8:
                    67:4a:83:dc:33:91:9f:2f:75:20:54:ad:0a:29:37:
                    46:1f:cb:3e:56:ac:88:9c:76:21:e9:49:ca:58:99:
                    d8:00:52:40:6a:dc:ab:4f:e6:38:b4:be:3e:a7:db:
                    76:b8:f9:42:3f:f6:42:7e:2d:57:a8:b7:14:cb:93:
                    5c:ba:77:bf:f3:35:84:8b:cf:35:27:ae:49:8a:98:
                    52:c8:db:6e:32:97:38:b8:a4:7f:9e:8e:3c:86:2f:
                    fe:7a:06:99:f5:ab:34:a5:11:c1:51:de:9c:39:58:
                    d3:fe:59:3c:92:95:f7:e3:15:91:65:bc:12:64:cb:
                    b6:a3:3a:7f:fe:7e:c0:d9:30:96:91:01:ba:ed:83:
                    6e:c6:fa:08:84:ce:3f:7e:a1:2d:5d:54:cd:44:26:
                    59:c0:c0:26:34:f3:26:a8:e9:c1:ac:82:21:fd:2c:
                    d3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FD:5E:C4:32:EF:42:57:58:F2:72:C0:59:38:2F:0D:B2:4F:26:84
            X509v3 Authority Key Identifier:
                keyid:24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:54:39:40:63:00:60:ee:f3:2b:6d:c3:7e:1b:ec:76:5d:
         95:2a:4e:f3:88:7a:88:91:47:9d:77:12:cd:0e:ea:c6:eb:36:
         f4:9c:6d:e3:13:22:c9:a1:25:3b:fb:6a:01:7e:e3:42:fd:a0:
         94:f7:7e:ab:04:44:6b:5a:32:6f:2c:5d:3e:ca:a8:14:2a:d8:
         16:da:31:2c:33:31:47:45:1c:06:dc:c1:fc:be:a7:6d:08:c2:
         1a:11:64:2f:99:c0:3e:d6:78:02:c8:27:4e:0d:28:5a:5b:b0:
         1e:98:3e:e0:10:c8:f9:b1:57:14:29:d8:8e:39:f1:00:d5:e5:
         14:d2:a1:5d:4a:65:e7:7e:6a:ff:38:5d:bb:a1:b6:5e:77:2a:
         ad:c9:d0:47:45:5c:65:46:85:02:b8:b0:71:af:2c:7e:4b:98:
         58:ff:fc:20:db:0b:a9:5a:be:c9:8b:5f:d5:65:82:16:62:ca:
         04:78:13:00:97:72:0e:6e:ef:cf:59:ee:f9:46:9a:4c:a7:73:
         29:9b:cd:57:2b:0d:47:20:54:4c:ad:d4:fb:ab:c9:31:2b:a8:
         01:4a:68:01:41:d7:29:fd:c3:0e:d2:83:55:b7:b3:03:47:da:
         9b:db:64:7f:00:bf:88:cb:b7:b9:e2:e3:c5:86:43:98:66:cb:
         aa:98:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:20 2025 by rpki-client