Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
File:                     Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json)
Hash identifier:          b+ZIEGRwRQ75DaYJRatSX2vkKjhbdQvs0Ll94Pg9ovY=
Subject key identifier:   A7:22:4A:78:91:67:0F:1B:AB:CF:94:EE:64:DE:A3:89:BC:EA:11:48
Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
Certificate issuer:       /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Certificate serial:       0197C9F1349266C597D02AA039059DB2BB55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
Manifest number:          15BA
Signing time:             Wed 02 Jul 2025 07:01:57 +0000
Manifest this update:     Wed 02 Jul 2025 07:01:57 +0000
Manifest next update:     Thu 03 Jul 2025 07:01:57 +0000
Files and hashes:         1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: 83JfL6bn2OPPDqyJWUP4ITaULc1gJtP9TVzvli0JfZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 07:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:f1:34:92:66:c5:97:d0:2a:a0:39:05:9d:b2:bb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
        Validity
            Not Before: Jul  2 07:01:57 2025 GMT
            Not After : Jul  3 07:01:57 2025 GMT
        Subject: CN=a7224a7891670f1babcf94ee64dea389bcea1148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ed:b0:09:e3:49:ab:07:c1:71:b5:bd:0c:69:
                    a6:ef:ee:50:0d:67:94:f3:fe:f8:87:b6:8a:f2:0a:
                    3f:ca:76:83:51:76:a5:00:66:a5:b7:b9:d5:34:15:
                    1a:47:39:a4:25:4d:30:a6:5e:cd:24:44:81:e7:95:
                    2d:d6:fe:23:ed:2c:f3:9a:69:91:68:0c:16:65:a0:
                    bb:52:6c:5e:54:3f:c2:b4:17:32:7d:03:b4:95:3c:
                    f9:f3:3d:16:c2:61:1c:92:40:3e:c4:d2:f8:ff:3d:
                    41:75:39:48:64:1e:9e:cd:b9:19:00:ad:c3:cd:26:
                    6d:50:70:0d:69:db:aa:59:f0:45:23:b4:d1:07:6e:
                    b6:cc:47:e6:5a:1a:37:f3:5a:f2:07:9d:f8:4b:8b:
                    72:8c:13:35:10:34:04:80:33:8d:39:7f:3e:30:c8:
                    cb:3d:55:df:4d:a9:bf:48:f5:a7:64:7a:8e:0e:21:
                    c0:9f:37:ad:af:50:7e:a2:ef:d0:5e:ce:fc:c9:6e:
                    ab:5e:bd:29:95:b0:71:e9:7c:95:07:2a:8e:e4:b4:
                    cf:d1:58:2e:94:0b:90:6b:ed:eb:a6:34:86:50:e8:
                    bb:a7:55:0e:4a:e7:50:a7:2f:a0:3f:26:e0:c4:89:
                    fe:b7:b9:30:6e:ec:f8:9b:23:00:52:c5:55:c0:55:
                    da:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:22:4A:78:91:67:0F:1B:AB:CF:94:EE:64:DE:A3:89:BC:EA:11:48
            X509v3 Authority Key Identifier:
                keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:9d:02:95:e3:31:cd:17:d8:52:37:b6:68:27:06:6d:35:24:
         d9:81:57:41:8f:9a:ae:30:e4:df:e3:ca:05:7e:df:f9:8b:25:
         a4:ba:87:f3:a6:ba:5f:72:e0:0c:41:37:c9:46:8d:e5:4c:62:
         13:4b:f8:97:cb:47:f6:61:8f:6d:e3:0e:54:33:6f:60:3e:75:
         1b:ca:a8:1d:79:88:e8:9a:6c:db:7a:e6:19:19:34:53:b8:a2:
         d3:ef:67:fb:6c:ad:90:14:25:01:36:52:2e:d5:2c:0b:bf:fe:
         25:28:ad:d2:75:fd:bd:f1:f0:47:40:2a:97:eb:dd:fa:ae:8f:
         ef:5f:ce:0b:42:28:28:c3:05:97:08:57:a3:26:88:79:01:db:
         c7:84:8d:2d:14:ec:61:68:0a:20:f6:0e:8a:43:d9:6c:6c:54:
         16:03:12:63:35:70:6a:e9:6d:a9:3d:56:60:fb:83:32:16:14:
         e6:b2:04:02:b0:a4:12:b5:9f:02:72:91:22:c1:59:52:e9:95:
         2b:98:53:05:85:44:48:29:a0:d1:aa:91:6f:06:c1:05:af:c2:
         a9:b9:59:27:dc:ad:61:ca:d6:e1:a3:c3:26:8e:2a:e1:ed:42:
         32:ce:d8:12:8e:9e:01:5c:42:35:dd:ff:96:4e:2b:1e:52:ae:
         ae:8f:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:15:50 2025 by rpki-client