Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
File:                     J6-AiEvc7y-e2bqXgRYKBnyMTws.mft (raw, json)
Hash identifier:          uC1q2WnepsR69k4a+cIVSoT8qUjSOa+g2DP87uT9p6U=
Subject key identifier:   8A:54:60:13:8D:79:01:93:5C:C0:DF:C9:F7:4A:23:08:22:8D:8D:EB
Authority key identifier: 27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B
Certificate issuer:       /CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
Certificate serial:       01984588B6CE04E31E9D0ED2FC8BDD64784A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
Manifest number:          0411
Signing time:             Sat 26 Jul 2025 07:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 07:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 07:00:44 +0000
Files and hashes:         1: J6-AiEvc7y-e2bqXgRYKBnyMTws.crl (hash: wxyjfJu+izz8+vqmpzqq8/JEMAWQATaVypkJJR+xtJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:88:b6:ce:04:e3:1e:9d:0e:d2:fc:8b:dd:64:78:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
        Validity
            Not Before: Jul 26 07:00:44 2025 GMT
            Not After : Jul 27 07:00:44 2025 GMT
        Subject: CN=8a5460138d7901935cc0dfc9f74a2308228d8deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:73:9c:e5:74:0c:0c:69:ac:e4:12:0d:1e:
                    60:09:0c:ee:1b:d3:aa:14:91:dc:4a:d7:f7:f7:a2:
                    df:0e:4b:4a:7a:19:41:0d:9a:c6:85:1b:de:ee:2d:
                    0d:e2:82:2c:ed:b9:8f:ce:e3:25:cd:da:cc:ce:07:
                    e3:8d:ad:e9:34:c9:74:2b:35:27:dc:8d:16:00:ec:
                    3d:79:af:50:70:d2:06:9a:65:cc:a3:38:1a:81:80:
                    d4:e2:3d:d1:a0:2b:1e:9e:f6:16:e0:9e:8d:d3:4d:
                    3d:f6:c4:3c:bc:79:58:dd:01:b9:a1:a8:8c:ad:bb:
                    f4:03:ea:4a:87:bf:ab:f0:ca:7d:83:2e:e2:c7:4f:
                    55:67:3b:a1:75:21:cc:09:08:9b:44:25:a5:40:95:
                    82:55:54:38:b7:ff:22:03:f2:88:b3:7d:6a:bf:20:
                    cc:d8:50:e7:6b:3b:21:22:38:c3:21:8c:40:16:1a:
                    68:4e:01:79:eb:41:64:86:6e:85:37:8d:f9:a5:5f:
                    0c:9e:8e:d3:a8:e1:53:b8:b7:88:8d:3f:dc:50:17:
                    19:b2:82:ad:37:0c:c2:24:a9:85:ce:2b:6d:19:cd:
                    2d:c9:c8:a8:4f:89:0e:77:c9:b0:0f:57:6f:f5:23:
                    0a:3e:20:a9:36:a7:88:6b:de:9d:84:17:80:c3:68:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:54:60:13:8D:79:01:93:5C:C0:DF:C9:F7:4A:23:08:22:8D:8D:EB
            X509v3 Authority Key Identifier:
                keyid:27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:64:74:6b:c2:3b:e2:05:1e:02:96:cc:4c:9a:4d:e9:bf:47:
         b9:29:02:59:55:34:01:a1:93:0f:89:55:9b:e1:77:ec:d5:b3:
         16:45:c8:f5:62:a0:73:15:54:31:81:e3:ef:77:d7:a0:ce:69:
         0d:25:61:fd:47:45:99:eb:dd:e7:8b:74:dd:2e:84:25:49:8d:
         91:ae:49:cf:48:c5:9d:e6:c5:ad:26:e4:46:db:3c:d6:13:7c:
         3b:a3:67:8f:c5:73:86:f7:56:ea:98:b7:51:7c:24:75:89:47:
         23:d0:3c:f4:33:68:b1:26:b7:16:d9:5c:51:3c:68:a3:ae:a5:
         6e:61:57:dd:83:3b:6f:0f:9b:12:12:97:81:0d:5e:a0:b0:14:
         e0:08:6b:b4:48:4f:cf:d7:1d:d7:85:1b:17:3a:8d:02:4f:8e:
         af:9e:2e:94:30:62:60:e4:b1:d5:89:2d:b2:3e:46:19:2a:68:
         7e:0f:f3:df:bf:ca:f2:b2:3e:e0:73:40:cd:f3:dc:6e:16:f0:
         c9:ad:9c:82:54:7e:e2:72:22:79:40:66:be:8d:44:a0:c9:75:
         44:51:4e:96:6a:9c:32:75:67:09:50:2b:4e:0b:8b:ba:ae:b8:
         1a:85:dc:72:3b:88:32:0a:83:c9:eb:cc:58:9c:96:0a:20:e6:
         f1:80:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:50:37 2025 by rpki-client