Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File:                     jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier:          vh9aZW/hKtukrkU/5TIC9HZ9wQCUzvPYmWsWjfO8q1U=
Subject key identifier:   7B:14:8C:DA:5B:CC:25:5D:CF:19:4A:03:F5:DA:9B:E0:46:2D:4F:60
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer:       /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial:       0198499C39AD5BA56C97D1CE8CB6C4CE67D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number:          0CE8
Signing time:             Sun 27 Jul 2025 02:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:31 +0000
Files and hashes:         1: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: NrlKqBj/2zZSfmaiAkP4KsbaiCIqGRhkwbukf47i048=)
                          2: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (hash: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:39:ad:5b:a5:6c:97:d1:ce:8c:b6:c4:ce:67:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
        Validity
            Not Before: Jul 27 02:00:31 2025 GMT
            Not After : Jul 28 02:00:31 2025 GMT
        Subject: CN=7b148cda5bcc255dcf194a03f5da9be0462d4f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:a5:77:b1:f4:a3:f4:da:3e:ba:f1:79:fa:
                    9b:59:1e:a4:49:76:e1:22:32:a9:0b:45:e3:03:66:
                    57:ef:21:6d:04:7c:99:f9:9f:d5:98:55:e3:0f:5e:
                    29:4c:68:90:5b:96:30:0e:93:c5:60:1c:59:24:0c:
                    4a:0e:57:81:89:21:3b:92:c2:66:f9:7d:8a:55:38:
                    95:d2:cd:b5:08:27:ad:44:74:9e:81:7a:54:02:ad:
                    39:77:b8:94:3b:8e:33:fd:6e:2a:30:4b:1b:db:f9:
                    f9:81:ad:fb:4f:ab:c0:e1:0c:45:9f:0d:e2:12:29:
                    cc:22:78:0a:0e:2b:d9:dd:a2:cc:06:44:fd:ab:45:
                    af:0b:5b:a1:95:59:6e:97:10:a6:c9:bb:d2:b7:66:
                    ed:98:6a:59:84:fc:b7:eb:82:af:09:65:fd:ba:db:
                    d9:2c:28:79:98:2e:bc:2f:82:8a:18:80:47:72:1a:
                    21:cc:7f:38:dc:23:27:fc:30:59:cf:5f:fc:b3:a3:
                    4b:df:90:e2:1d:c5:6d:70:1f:50:72:46:d9:f3:d6:
                    5a:07:85:98:d9:90:2e:e1:bf:3d:7f:b8:8c:0d:ae:
                    51:95:2d:46:68:08:c5:d3:39:21:03:a5:15:b4:af:
                    db:f3:be:92:df:88:26:a0:c3:ad:cc:9c:ff:34:60:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:14:8C:DA:5B:CC:25:5D:CF:19:4A:03:F5:DA:9B:E0:46:2D:4F:60
            X509v3 Authority Key Identifier:
                keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e9:c1:d9:1f:56:cc:fe:29:b4:5e:cf:76:4b:86:ce:76:7c:
         e6:d2:d3:df:4f:29:d4:3a:99:bb:6d:fd:d5:a8:e4:42:1e:2c:
         9a:44:e4:df:12:fc:96:0d:8d:26:27:a5:1e:3c:ec:70:e3:fa:
         bf:01:7e:cc:f6:2b:8a:e1:a5:5e:4e:f4:4d:d0:95:15:78:fe:
         1f:bc:a3:92:70:11:d5:73:f0:dc:6d:62:3f:9a:1f:e8:a1:9d:
         86:a2:df:fa:5f:1c:08:8e:ed:6d:4f:b2:2f:24:11:39:c5:ff:
         83:01:7c:2c:28:6c:0b:b0:30:c3:ab:ce:60:81:75:3f:7a:91:
         d9:00:f6:05:67:bf:00:83:08:3b:76:2d:99:b6:53:7f:95:bb:
         40:1c:a7:11:39:d7:fd:4c:1b:e9:fc:d7:a4:e5:50:24:df:b1:
         ae:7a:4b:81:52:10:e6:1f:e2:24:2e:ec:47:63:31:ba:64:0a:
         62:12:0b:39:80:3a:70:c7:81:91:5d:74:04:66:09:54:13:94:
         b0:79:16:47:87:0b:67:eb:7d:3e:6c:91:13:12:78:d0:e9:4f:
         d2:6a:3a:a6:d9:c6:72:83:5e:a9:80:16:25:0a:39:9a:0d:c8:
         37:1e:84:35:f2:74:91:b1:14:3d:33:ee:6e:c8:ed:cc:b5:33:
         c5:6c:ab:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:39 2025 by rpki-client