Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File:                     jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier:          Ff6k3ZtqlyGNIh5BZh8vAhAMB020JRHbadV+S1bgrpc=
Subject key identifier:   2A:43:1E:19:BB:6F:96:31:A2:DC:E5:52:BA:01:B1:F3:C1:51:D6:59
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer:       /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial:       019921B2485F816516D738ABAF9D893A9D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number:          14DB
Signing time:             Sun 07 Sep 2025 01:02:35 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:35 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:35 +0000
Files and hashes:         1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: /+OXjfegTG1Ixo50WyC8eOXYvHul3a5oYHJ7xVr2hv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:48:5f:81:65:16:d7:38:ab:af:9d:89:3a:9d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
        Validity
            Not Before: Sep  7 01:02:35 2025 GMT
            Not After : Sep  8 01:02:35 2025 GMT
        Subject: CN=2a431e19bb6f9631a2dce552ba01b1f3c151d659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:5a:7d:76:60:74:2e:57:66:cf:8a:b9:a1:
                    d9:f5:f9:0a:2a:24:18:44:56:0d:0e:ac:3b:fb:9b:
                    b3:7d:b8:f6:ab:9e:7d:dc:a2:70:70:ed:4c:58:d3:
                    a5:c7:a9:3b:9b:a2:38:4c:e4:85:56:04:d5:6f:90:
                    50:df:15:58:c9:d3:cd:b3:65:08:c8:6c:94:17:44:
                    f2:f6:d4:46:1c:5b:3a:b5:b5:39:ca:62:53:98:2a:
                    4e:7c:e5:b5:1d:af:d0:70:c4:7c:31:c0:12:9f:0a:
                    65:63:6b:9f:83:5e:6b:f1:e3:18:3b:f0:bd:a4:60:
                    c7:34:a6:72:85:b0:81:28:62:8d:b7:26:fe:33:71:
                    63:08:bd:65:14:8c:42:e3:ca:4d:4e:67:25:5f:9b:
                    8d:6d:f9:6a:5e:ea:83:a2:ea:35:03:77:0d:2e:86:
                    ca:73:d9:52:68:bc:9e:e7:f4:dc:bb:cb:5d:39:d9:
                    d7:79:26:03:67:6a:de:53:2c:8e:56:02:7a:3b:4d:
                    0e:19:bb:73:b7:b3:c4:bf:8d:c0:20:0b:b6:11:84:
                    43:75:46:69:58:be:80:f5:9f:33:5e:c2:41:9c:a2:
                    52:91:aa:ee:ce:db:52:56:16:ea:4e:bb:05:bc:93:
                    e9:14:19:e7:35:bf:31:c2:18:aa:8e:8a:69:c9:ae:
                    4f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:43:1E:19:BB:6F:96:31:A2:DC:E5:52:BA:01:B1:F3:C1:51:D6:59
            X509v3 Authority Key Identifier:
                keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:a1:01:e4:7a:87:bd:f8:60:58:41:5b:82:48:5f:a1:c2:
         a9:24:a0:de:a1:07:0f:b9:ac:c9:e6:a7:3a:f6:99:54:47:5f:
         ed:6a:5a:7f:9e:6b:0b:91:8e:1a:79:33:78:f0:7e:04:68:7b:
         53:f7:83:d6:c9:68:6e:bd:8c:b2:7f:b3:89:87:43:d1:be:fd:
         e2:88:81:71:3e:3a:83:04:f9:81:b3:c2:f2:10:ee:38:42:29:
         81:ea:a5:eb:e4:15:d3:ee:d0:16:a0:85:21:29:4f:73:ba:7f:
         f5:d2:2a:b5:85:f0:06:50:16:6a:f5:35:5f:4a:b1:df:18:ed:
         ed:a8:c4:2d:cc:53:bf:ad:b2:20:2a:99:82:4f:53:d8:a0:a7:
         c5:43:cb:76:7c:31:fe:64:8b:84:ba:8c:bb:5b:18:d2:a8:98:
         09:d9:8d:2d:40:a3:61:e1:ff:a7:55:90:b6:13:06:5d:20:13:
         3a:bb:e3:96:d4:46:26:a3:d6:a1:e3:b9:b3:16:ff:7a:b3:44:
         e0:b6:18:80:b6:6a:06:e7:19:24:49:bf:02:83:78:4e:af:c8:
         88:9c:51:fe:4b:2a:4d:e0:e8:22:4e:b8:d0:f8:c1:99:e3:37:
         6c:08:08:f0:08:d9:4c:b2:b5:68:10:8a:3c:d6:0e:c1:8e:24:
         8c:a4:7c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:14 2025 by rpki-client