Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File:                     jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier:          e5VR40a2x4Z5hFshcqisMAFPRsPJ7MH62JlC8WJp3kY=
Subject key identifier:   6E:38:12:50:46:76:62:FD:56:19:0B:7A:4F:55:A9:0F:75:AE:A8:A1
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer:       /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial:       019846D1C31227C09B0017735F430A75C70A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number:          15FB
Signing time:             Sat 26 Jul 2025 13:00:08 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:08 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:08 +0000
Files and hashes:         1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: L4xkg/+ic2bok9IomHQsD615ficsxyBNtAZIuWaL70M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d1:c3:12:27:c0:9b:00:17:73:5f:43:0a:75:c7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
        Validity
            Not Before: Jul 26 13:00:08 2025 GMT
            Not After : Jul 27 13:00:08 2025 GMT
        Subject: CN=6e381250467662fd56190b7a4f55a90f75aea8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:23:1c:81:b4:23:ef:4b:f0:53:30:15:39:
                    ee:a2:f0:ad:bf:44:be:b1:a4:47:68:c1:3e:38:40:
                    07:11:01:f4:f0:31:52:d1:9a:9a:dd:36:b6:69:d6:
                    8a:61:ba:80:03:5b:93:7b:ae:75:a3:d9:ea:a1:6b:
                    7f:00:a4:bf:8e:2b:10:82:45:7b:6d:63:4e:c6:f9:
                    f0:be:db:ce:ad:49:31:2f:69:51:fe:74:03:19:0c:
                    07:34:47:54:b2:4f:3a:fc:51:0e:0f:36:e3:5f:c8:
                    8f:56:ba:31:7c:b2:0f:83:0f:c0:41:e7:46:71:48:
                    94:46:19:9d:82:48:85:a7:80:0c:e2:8e:8a:32:eb:
                    ed:25:81:8e:c6:0b:5d:3f:9c:7d:bd:e8:90:5a:51:
                    38:2a:b1:09:69:88:fc:06:b0:a2:73:12:af:f5:11:
                    49:fb:2f:54:6b:8a:68:6a:7c:87:b1:96:b4:9e:c9:
                    47:1e:02:82:73:20:51:d1:bb:8c:a0:df:4e:f0:06:
                    71:95:2d:c9:f1:24:bd:fd:02:6f:4d:d6:ff:f2:bf:
                    fb:41:b5:e1:33:84:b3:3f:df:be:4f:e1:2b:cf:8b:
                    11:57:1b:3b:98:ca:00:e0:1c:b2:81:93:8c:f6:9a:
                    07:d6:52:ad:a8:37:a6:2e:8c:93:94:a0:29:51:d1:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:38:12:50:46:76:62:FD:56:19:0B:7A:4F:55:A9:0F:75:AE:A8:A1
            X509v3 Authority Key Identifier:
                keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c5:69:2b:22:8c:d2:e9:95:10:79:46:21:66:41:44:09:47:
         ba:39:8f:0e:8f:88:7f:ba:fd:41:a0:14:13:58:0f:4a:32:27:
         2b:26:7d:06:7a:78:f8:d9:04:a0:d2:68:ac:70:ab:1a:7f:ab:
         79:41:66:df:21:0f:f2:c5:19:93:4a:62:83:97:16:52:a7:2f:
         da:7b:5a:b1:2f:e1:eb:a8:6b:f3:8e:6c:6f:62:18:0a:ec:15:
         65:2d:d7:6a:69:12:b5:35:6e:13:7c:17:26:f9:ca:8f:9d:03:
         d1:3d:dd:e6:82:0c:fc:13:8f:1d:90:e8:66:3f:d6:54:17:9a:
         cb:30:af:ae:b3:3c:83:65:4e:ba:06:25:a4:b2:92:74:fa:0b:
         66:88:ed:8f:8c:15:16:7a:db:17:0a:ef:81:fc:dc:ed:8a:e0:
         03:7e:73:3a:d3:95:b8:c2:38:70:e1:57:66:bc:ee:2a:f1:62:
         b7:65:d1:c7:87:3c:b5:01:e4:34:f4:db:24:fe:4d:a9:92:f3:
         51:da:3d:e3:be:e0:cb:5b:36:00:f3:ec:9e:f5:f7:da:9f:22:
         51:f6:2f:33:23:82:4e:b4:c6:63:c0:fd:c0:be:c7:86:43:0e:
         74:6b:b9:ec:72:7e:98:32:d7:5e:da:47:2b:8e:e3:b8:e1:e3:
         76:41:a9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:39:50 2025 by rpki-client