Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
File:                     J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json)
Hash identifier:          6ymnBMCAOGot3Lw77+Js/hXANn94UnSb1LSp1AXC+P8=
Subject key identifier:   80:CF:7C:46:C6:D2:E9:6E:9E:30:1F:E2:08:9A:6A:D1:3B:79:AC:60
Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
Certificate issuer:       /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Certificate serial:       019759125FABB493BE06B1A446082C047372
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
Manifest number:          014F
Signing time:             Tue 10 Jun 2025 09:01:05 +0000
Manifest this update:     Tue 10 Jun 2025 09:01:05 +0000
Manifest next update:     Wed 11 Jun 2025 09:01:05 +0000
Files and hashes:         1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: XKsZAyK4w1gTJdIkigouAh88cCQTaUgVGAK3j/VbQdQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:12:5f:ab:b4:93:be:06:b1:a4:46:08:2c:04:73:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
        Validity
            Not Before: Jun 10 09:01:05 2025 GMT
            Not After : Jun 11 09:01:05 2025 GMT
        Subject: CN=80cf7c46c6d2e96e9e301fe2089a6ad13b79ac60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:b7:8d:e5:b1:6a:9b:df:ca:97:14:66:33:
                    d8:05:fc:10:11:e7:4e:e5:30:82:14:be:66:29:e9:
                    0a:06:2d:3d:69:57:f0:ea:3d:29:15:52:5a:61:d9:
                    c4:1e:03:28:a9:2f:3d:91:1b:6e:6b:00:aa:b6:bc:
                    cb:e1:c3:6a:a8:fd:7b:7f:94:fa:d0:a5:f2:5e:a7:
                    c7:28:45:87:8c:0e:81:ab:e8:75:86:09:51:e4:55:
                    6d:a0:ac:22:5b:30:cf:92:df:d0:dc:10:9a:af:93:
                    17:bf:02:48:a1:5d:59:ff:7c:e3:b6:17:69:d0:d8:
                    eb:b6:8f:61:a0:83:16:44:5c:43:f6:0d:b0:5c:51:
                    96:56:c9:a4:b6:2c:6d:f6:22:14:6f:16:a5:76:76:
                    a6:94:3a:5e:bf:d5:ff:49:da:a9:0e:1d:0a:2d:8e:
                    ef:f8:d4:23:aa:6d:95:79:2c:2e:99:10:a9:06:0b:
                    52:ac:a6:0f:a0:d6:31:39:24:01:a9:6e:77:d7:4a:
                    ed:8a:b8:e2:a2:f4:4f:c7:56:af:5f:b6:91:80:5b:
                    75:9e:bd:1f:7f:92:87:2d:67:4f:66:ca:68:da:36:
                    ca:7b:da:93:26:9a:d8:1c:65:9e:b6:1d:98:68:d9:
                    f8:e4:c4:eb:92:76:a8:a7:f3:18:2f:85:cb:ad:4d:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CF:7C:46:C6:D2:E9:6E:9E:30:1F:E2:08:9A:6A:D1:3B:79:AC:60
            X509v3 Authority Key Identifier:
                keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0a:e8:d6:a6:2e:f4:3c:12:48:47:55:cd:b1:c1:93:32:53:
         1b:fe:2d:86:6c:00:b5:0e:e2:df:d3:14:1c:98:6e:fd:35:9d:
         a9:ac:df:a3:7b:ba:b7:59:22:7b:5f:9d:0b:76:95:e6:1f:69:
         9b:a8:94:39:cb:7f:55:93:11:15:8a:ff:62:84:54:24:01:1b:
         12:93:56:97:25:d1:ff:60:01:d1:93:81:64:bd:65:43:7a:58:
         80:52:fc:43:50:bc:77:b3:a4:fb:b4:bd:31:6c:e8:70:50:24:
         63:0f:19:96:8a:73:76:cc:ea:da:d3:ed:9d:ec:c5:26:63:37:
         2b:ac:e2:38:6b:d0:f5:49:e5:c3:c7:ca:40:df:fd:8f:36:c0:
         9c:97:f1:8e:3d:93:a7:aa:97:20:3d:84:10:e7:11:85:c9:4c:
         f4:27:70:69:b7:89:8c:76:e3:34:ec:60:33:87:d6:6f:b6:5a:
         1a:a5:8c:b5:f1:2a:74:ce:51:f9:03:8a:a2:17:50:01:0c:f6:
         c7:80:f9:df:a7:f7:c7:69:2e:0e:19:28:81:b2:2a:13:32:00:
         fc:ec:70:24:3f:b8:fa:e6:1c:2f:fa:4a:90:ff:91:fa:db:44:
         54:b7:19:16:75:0e:9d:a6:71:28:d9:2f:b1:92:34:24:17:ff:
         06:30:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:45:47 2025 by rpki-client