Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
File:                     rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json)
Hash identifier:          +c8ayddvv17FqDrTmTrcEHHq5AYa2GqxT/hjytqfDbg=
Subject key identifier:   A3:41:FC:25:13:28:4A:EF:3E:69:57:1E:14:78:45:64:3A:A2:9C:D1
Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Certificate issuer:       /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Certificate serial:       019849D3221399128F8E4C1F443DAE858B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
Manifest number:          0F7D
Signing time:             Sun 27 Jul 2025 03:00:30 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:30 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:30 +0000
Files and hashes:         1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: X4Anpwh/6yX4VoPIkMpwg7TUnlk24TVWc7p3Jtm3fvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:22:13:99:12:8f:8e:4c:1f:44:3d:ae:85:8b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
        Validity
            Not Before: Jul 27 03:00:30 2025 GMT
            Not After : Jul 28 03:00:30 2025 GMT
        Subject: CN=a341fc2513284aef3e69571e147845643aa29cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:54:45:f3:83:c7:e2:ee:d1:5d:c5:fd:ad:db:
                    46:ee:35:7d:f8:48:ac:b8:d5:94:5d:dd:87:6c:25:
                    72:2e:81:d9:4c:a9:72:c1:11:5c:fa:68:1d:1f:d1:
                    9c:5f:b8:cf:b5:d0:b5:5f:ac:34:49:a7:30:84:be:
                    4b:44:d2:01:e7:95:6a:29:d6:d2:26:54:c6:ec:7b:
                    1d:12:d4:0a:66:31:a5:85:b3:9b:77:ff:97:22:29:
                    99:da:0e:c8:9e:d0:c6:99:c8:ca:9c:6e:5a:e3:b5:
                    ca:b9:3c:98:45:ab:20:b1:15:f6:1e:ef:3c:21:8a:
                    84:1c:e1:7f:8e:37:90:11:1c:71:c8:22:da:62:73:
                    45:13:de:43:12:fe:0c:9a:72:f3:00:a1:cf:db:cb:
                    b3:87:09:87:5c:29:0e:9d:6b:89:5b:33:44:31:48:
                    ef:db:a2:64:76:dc:5e:2a:3f:78:d4:73:00:76:fa:
                    6f:1f:23:65:9f:de:57:c8:b6:a1:f7:12:80:27:4f:
                    f8:e3:44:af:ce:7e:09:b2:b2:f3:47:87:e6:b1:b9:
                    a1:66:ec:93:9a:f7:19:c6:ee:4d:1f:62:0f:8b:33:
                    11:61:82:73:29:e7:97:7b:40:7b:ba:bd:db:0d:60:
                    d8:b8:ec:f1:08:dc:29:fd:89:62:a1:76:78:d8:e4:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:FC:25:13:28:4A:EF:3E:69:57:1E:14:78:45:64:3A:A2:9C:D1
            X509v3 Authority Key Identifier:
                keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:00:fa:cb:0f:a1:1a:5a:3e:9f:27:75:f9:fb:a1:cc:e5:0d:
         51:f6:13:d4:96:76:fd:48:7e:10:58:a8:b5:de:aa:5b:2f:9e:
         6a:cf:0c:d0:5d:45:80:32:85:4d:84:8a:a0:05:f5:be:7b:67:
         17:65:e0:dc:e1:cc:05:d8:23:26:83:55:12:ce:12:74:d3:f0:
         04:fd:cc:05:b9:1f:a8:28:b2:7d:64:3f:6c:fc:79:5c:e2:e3:
         a5:ce:58:a7:d6:04:d2:2a:50:9c:77:f8:a2:63:8a:3d:d6:2e:
         ba:0c:7b:84:d6:cd:70:54:c7:41:92:1d:9f:76:c6:cc:e9:7a:
         98:c1:ad:b1:c8:f1:97:00:23:fa:34:f9:c8:c5:98:26:50:d0:
         05:52:75:3d:a4:40:71:a8:63:55:b4:45:f7:f3:7f:4c:c5:83:
         7b:bf:cb:81:11:0b:f4:31:d5:1e:d8:88:a8:7c:10:a7:a0:80:
         38:3c:fe:8f:ec:40:22:ab:d5:a8:08:32:85:03:14:c3:a3:e4:
         07:41:55:b9:da:e5:8b:76:cb:c5:f0:c5:2d:cf:ca:e2:e2:e8:
         ce:f3:a0:55:2f:b3:64:41:b9:c2:0f:53:32:31:37:a3:3d:88:
         7b:3d:63:5b:78:80:3d:9e:e9:aa:de:35:35:72:55:c6:8e:2b:
         b2:5e:21:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:59:51 2025 by rpki-client