Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
File:                     j7ev7MJi-jz8WRYejpeLYo4_E2E.mft (raw, json)
Hash identifier:          WMHx8E9FeXj7ifktlR/+qqEtojKH1k/ITpwulxP856s=
Subject key identifier:   D6:BB:8A:CD:2F:6F:E6:EB:09:45:53:36:39:FA:70:D4:E4:98:79:71
Authority key identifier: 8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61
Certificate issuer:       /CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
Certificate serial:       0198496548E6B405762CF8FD8277544D6CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
Manifest number:          15FE
Signing time:             Sun 27 Jul 2025 01:00:31 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:31 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:31 +0000
Files and hashes:         1: j7ev7MJi-jz8WRYejpeLYo4_E2E.crl (hash: pVRcot/S/wTB1SVQOoT+4U/ooV2MAgpgiDX0LRdWuxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:48:e6:b4:05:76:2c:f8:fd:82:77:54:4d:6c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb7afecc262fa3cfc59161e8e978b628e3f1361
        Validity
            Not Before: Jul 27 01:00:31 2025 GMT
            Not After : Jul 28 01:00:31 2025 GMT
        Subject: CN=d6bb8acd2f6fe6eb0945533639fa70d4e4987971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:83:7f:66:00:f2:cf:6b:10:7d:00:b6:cf:
                    3f:d4:c3:36:9e:40:21:65:84:de:af:ce:76:bf:88:
                    a8:7d:3b:80:b6:f0:09:e0:81:2d:32:d5:b0:68:6e:
                    a0:d8:13:bd:70:ce:bf:7b:e2:7d:82:a8:8f:59:9b:
                    c1:72:e6:d3:c9:01:af:8d:b6:cd:e0:4b:42:c4:de:
                    80:90:97:54:53:1f:17:4b:58:1e:37:ce:d4:25:63:
                    f8:33:58:ae:f8:21:5b:a1:36:25:8c:c8:c1:43:5f:
                    06:be:c4:3f:e2:b7:ab:e8:83:f6:d1:93:69:ee:86:
                    f3:23:ad:08:49:dc:dd:65:1a:e7:4e:74:2b:93:70:
                    d5:82:99:b7:cc:11:f7:bc:e9:d8:eb:2c:19:b1:2f:
                    c6:89:e6:77:d4:47:10:a8:89:4d:09:15:b7:81:7c:
                    a7:4e:71:a3:d5:6d:23:1e:9c:fa:73:96:c2:17:50:
                    6c:5a:eb:e6:4f:8c:ee:af:1c:ce:8a:cb:64:ec:93:
                    f8:fb:c0:14:cb:8d:ea:7a:36:70:cc:be:19:ab:5a:
                    ae:d0:f6:38:a7:f6:dd:79:54:f8:06:86:aa:66:ca:
                    0e:93:2d:0b:2c:ff:c6:8c:41:fc:21:0f:06:0f:31:
                    fe:0e:ca:bc:2a:5c:f9:29:4b:02:f2:af:f9:07:b6:
                    36:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BB:8A:CD:2F:6F:E6:EB:09:45:53:36:39:FA:70:D4:E4:98:79:71
            X509v3 Authority Key Identifier:
                keyid:8F:B7:AF:EC:C2:62:FA:3C:FC:59:16:1E:8E:97:8B:62:8E:3F:13:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7ev7MJi-jz8WRYejpeLYo4_E2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/16c06a-1061-43be-bbd4-3bd25a1776b3/1/j7ev7MJi-jz8WRYejpeLYo4_E2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:0d:b2:f4:87:59:7e:db:8c:a3:d5:c6:0a:6f:37:db:f0:be:
         17:68:19:f2:5b:76:5a:82:9a:c9:83:8e:e2:88:86:c1:f8:c8:
         87:b6:80:95:51:3d:02:b4:4c:b0:84:6f:3f:9f:d8:7b:8b:57:
         1a:b9:cc:66:30:50:82:9f:61:39:2e:a3:ac:36:b7:bd:f6:06:
         1f:a0:cd:4b:3f:0c:87:97:3e:7d:0e:f9:2b:1c:a9:52:b2:bf:
         66:23:54:57:6d:fb:1a:a2:03:a0:6e:f8:88:96:cc:bf:38:2c:
         ce:6c:4f:63:13:83:36:1b:ff:34:6b:60:25:db:08:20:0d:d0:
         5b:fa:35:be:a9:e1:4c:26:20:da:db:65:42:71:1e:47:4d:db:
         2e:3e:0b:7b:a1:14:4e:08:6f:36:17:c2:de:b4:eb:fb:71:8d:
         38:66:b3:dc:ab:d1:39:bc:4a:74:ee:b2:93:bd:b4:5d:30:5f:
         5b:30:fc:6b:aa:df:de:71:cf:47:f7:39:01:5e:31:19:f3:ce:
         22:d9:2d:08:57:87:47:cd:6f:ec:95:7c:f5:05:ba:bf:8c:30:
         77:0d:94:0b:fc:e5:f4:05:f4:a0:50:89:4e:06:16:55:8c:03:
         bf:c4:50:84:69:e7:37:e5:fa:8b:2d:dd:eb:3b:2c:d1:cf:7f:
         78:a1:59:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:26 2025 by rpki-client