Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
File:                     jR4EozwylZxnL0X0a-EIZLgemEo.mft (raw, json)
Hash identifier:          WvtX6l1RZ4VgAb8QSn5LHPQ9wQ9f4NwOYWKKKXxlce4=
Subject key identifier:   05:CE:FA:1F:41:D9:8C:FB:12:1E:51:79:D6:20:32:FD:62:07:DA:CD
Authority key identifier: 8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
Certificate issuer:       /CN=8d1e04a33c32959c672f45f46be10864b81e984a
Certificate serial:       0197493155DD9A0912DF5486AB5838AED5B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
Manifest number:          1577
Signing time:             Sat 07 Jun 2025 07:00:59 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:59 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:59 +0000
Files and hashes:         1: jR4EozwylZxnL0X0a-EIZLgemEo.crl (hash: Ub6nvBqTCbO0GVLYneCMVlBYkMiK1EiLXaf3FDUska0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:55:dd:9a:09:12:df:54:86:ab:58:38:ae:d5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1e04a33c32959c672f45f46be10864b81e984a
        Validity
            Not Before: Jun  7 07:00:59 2025 GMT
            Not After : Jun  8 07:00:59 2025 GMT
        Subject: CN=05cefa1f41d98cfb121e5179d62032fd6207dacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:2c:7c:03:7a:7f:36:18:ce:79:5a:a8:d2:
                    8c:f6:29:a5:e6:1f:08:ab:67:2b:94:03:c3:59:0f:
                    69:34:28:90:20:83:50:f0:75:3b:fc:ff:19:e3:45:
                    52:d4:b0:d6:54:d6:d0:68:06:58:11:a2:b9:94:34:
                    16:a5:15:0f:53:e6:19:89:5d:4d:2e:20:6c:32:72:
                    ca:85:dd:27:8f:ff:cc:21:f4:08:15:b6:86:58:87:
                    12:67:d9:b4:58:bc:8a:c1:21:fc:d9:7c:46:a4:70:
                    c6:ba:c8:87:bd:f0:ae:70:9e:c4:e7:ef:2f:38:63:
                    b3:4a:bd:00:c9:5d:9e:8f:bf:2c:f6:fa:c4:9d:a9:
                    f7:7f:3a:13:93:12:a1:3b:0f:29:96:2d:dc:ff:5c:
                    96:76:78:bf:da:21:5d:7e:87:7d:08:c9:ae:40:94:
                    c4:b4:8c:20:81:44:62:f2:61:25:1f:37:a9:ab:cc:
                    4b:41:6f:65:89:37:81:d5:5f:dc:de:f5:df:00:41:
                    8a:66:39:78:81:4e:81:c3:36:ec:6e:20:62:e9:94:
                    13:17:eb:66:33:4e:86:8b:53:ff:61:39:d9:85:de:
                    75:ae:2c:4f:d2:b1:37:72:aa:57:29:1b:67:df:e4:
                    cf:ac:4d:5a:ed:e3:f4:cb:58:2d:1a:3d:9f:d0:eb:
                    42:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CE:FA:1F:41:D9:8C:FB:12:1E:51:79:D6:20:32:FD:62:07:DA:CD
            X509v3 Authority Key Identifier:
                keyid:8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:da:3e:04:0e:41:23:9a:9e:8a:22:6e:26:1d:9f:1f:62:b5:
         ee:8c:9d:84:2a:d3:08:3d:08:fb:9f:de:0b:94:0f:87:70:96:
         63:99:61:ff:07:7a:c0:fc:81:5f:e3:fd:f3:94:6d:a6:e4:b7:
         69:60:96:f5:00:b5:80:01:93:28:88:0f:5d:35:21:a7:72:fe:
         a2:73:48:37:de:01:d1:2c:97:8a:81:c5:36:8c:59:93:8a:e1:
         97:8a:23:8c:f4:3c:28:b7:fb:71:40:18:3a:54:b5:8e:57:2b:
         d5:76:02:e7:ca:cd:62:30:82:d3:b2:52:db:78:ba:fa:90:a6:
         4b:06:ec:0d:a2:e3:f4:d5:9f:56:5d:72:e9:ad:5e:1f:a4:e4:
         9c:ca:73:14:b7:94:08:cd:21:f6:2c:f7:61:7c:d5:2a:6e:70:
         88:7c:27:d4:63:71:e3:fd:e6:3f:4f:c8:fc:9f:25:95:33:ca:
         ab:6b:62:2e:05:37:f1:6d:3e:9f:ef:b2:29:ca:b7:4b:00:e5:
         cf:2c:69:4f:bd:38:f8:90:5d:a7:f0:9d:48:b2:fa:f3:48:ec:
         5b:04:b6:7c:ff:c8:c4:90:91:f9:57:d7:96:1c:a1:65:8b:49:
         d8:0c:08:be:54:95:8f:08:bd:8b:83:28:3f:84:c8:6f:63:c4:
         eb:64:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:40 2025 by rpki-client