Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
File:                     J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json)
Hash identifier:          ZCZghuCDd6+5Gc8j5UrS+7FnZ3tGiLSD6R0zba9FNxM=
Subject key identifier:   11:76:B4:E9:A4:35:13:4E:0E:A7:45:DF:ED:A7:62:40:64:57:98:61
Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
Certificate issuer:       /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Certificate serial:       019922C3650794F2F34C61B67C7951BE5CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
Manifest number:          023C
Signing time:             Sun 07 Sep 2025 06:00:54 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:54 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:54 +0000
Files and hashes:         1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: pFN6QshePnif7xN4Gn47so/DNirJmztGpGBgh6ZRrfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:65:07:94:f2:f3:4c:61:b6:7c:79:51:be:5c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
        Validity
            Not Before: Sep  7 06:00:54 2025 GMT
            Not After : Sep  8 06:00:54 2025 GMT
        Subject: CN=1176b4e9a435134e0ea745dfeda7624064579861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:e6:a8:9f:da:99:2d:ba:ea:58:9b:bf:6f:
                    12:8d:ec:f3:da:67:88:79:68:f7:54:bb:9c:29:6e:
                    30:60:00:41:5d:0d:3a:48:2f:16:9f:89:a0:91:15:
                    d6:45:3a:19:8c:ad:94:54:3f:16:75:29:bb:93:cb:
                    7b:f9:b6:b3:56:f2:a1:1a:82:e5:de:94:de:1e:23:
                    cc:02:77:17:2e:27:c3:2a:f7:60:06:67:0c:94:40:
                    78:c3:e3:3b:72:e3:f7:5a:21:c7:b7:9b:06:54:61:
                    dc:70:c7:28:e6:58:b5:26:4e:48:d5:fd:e3:c5:71:
                    b6:59:71:57:6f:eb:83:18:28:8b:b6:1a:8a:27:fd:
                    1c:00:2a:b6:8a:80:21:c6:ff:36:72:48:06:f8:a3:
                    14:bb:45:1e:4b:b2:f9:ff:a0:18:2e:51:ee:0a:9b:
                    66:0e:41:2b:43:53:8b:ff:16:e6:0e:92:b9:7d:fb:
                    cf:5d:c9:ec:f4:23:4a:d8:e8:a0:07:d5:43:c5:a3:
                    d9:44:2b:4c:ec:85:fc:68:b2:45:a7:d5:49:5c:10:
                    af:d5:28:92:30:45:23:46:c3:a4:5e:c1:ac:31:8d:
                    61:4c:ea:85:c9:10:a9:ea:89:02:cb:9c:30:5f:91:
                    f6:74:d2:a3:3d:7f:38:d8:a3:49:45:31:33:93:59:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:76:B4:E9:A4:35:13:4E:0E:A7:45:DF:ED:A7:62:40:64:57:98:61
            X509v3 Authority Key Identifier:
                keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:21:f0:d5:7f:3b:d7:2c:79:ea:aa:4b:b7:34:9f:5a:36:76:
         32:09:46:9c:de:1c:a6:16:b9:af:30:a2:5c:75:83:2d:24:a1:
         6f:db:51:a0:9a:93:eb:06:85:9d:19:4d:f5:c9:8b:ed:f0:27:
         3f:1b:b6:f1:f1:e3:26:0b:64:c1:6f:08:0e:8e:98:65:e5:56:
         cd:6c:f5:bf:0b:d3:1e:f1:f8:61:6b:73:0a:75:2e:53:ce:8c:
         62:bc:0b:db:6d:b5:61:cd:4e:27:cf:8f:dd:39:45:5c:7a:cb:
         ae:47:3c:d5:d6:99:ca:2a:35:59:a2:d1:3c:b6:1b:9e:a8:ac:
         2a:36:af:2b:8c:b2:8d:af:f2:6f:cf:b5:63:a7:11:04:0f:f1:
         ac:9b:6f:b0:9f:21:24:a7:54:4a:32:67:51:88:8e:dd:53:d4:
         ff:ab:e4:83:56:ad:6f:37:e3:27:79:05:f3:98:59:6e:91:f9:
         88:b4:03:ec:33:fb:83:27:ef:0e:7d:a2:63:9f:89:15:17:f0:
         f1:61:f7:e9:a1:31:d3:7c:ce:53:18:02:8c:bc:24:ca:13:0c:
         5d:5f:2a:9c:54:76:c6:dd:a1:fa:c5:d8:1b:77:2b:9f:a0:cc:
         a5:87:8c:34:1f:ae:3f:4c:8d:34:3d:7c:d0:04:dc:b6:09:6c:
         0b:7a:2b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:04 2025 by rpki-client