Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
File:                     n-JpKxvOewMnwf51yJKZ4vhiF_w.mft (raw, json)
Hash identifier:          nsxGMM0VIFY91DYGe6BD+jqFLEIM6aKFcCfbkAPVGW4=
Subject key identifier:   0B:A4:AC:2C:F1:F7:CF:A5:0E:6D:30:3E:B3:2F:F5:B6:91:3C:C5:8C
Authority key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
Certificate issuer:       /CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Certificate serial:       019921E784602A1ED51B0627CA45FC0BFCE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
Manifest number:          03C1
Signing time:             Sun 07 Sep 2025 02:00:44 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:44 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:44 +0000
Files and hashes:         1: n-JpKxvOewMnwf51yJKZ4vhiF_w.crl (hash: +HCrMFafO8nwJFWZ84VXhOhoAcQ2ulEBXBCLuvjTgN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:84:60:2a:1e:d5:1b:06:27:ca:45:fc:0b:fc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
        Validity
            Not Before: Sep  7 02:00:44 2025 GMT
            Not After : Sep  8 02:00:44 2025 GMT
        Subject: CN=0ba4ac2cf1f7cfa50e6d303eb32ff5b6913cc58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:60:33:63:e8:48:2e:3e:73:24:64:bb:82:
                    1e:5d:c6:79:ad:5b:2a:1b:30:b8:39:0c:97:26:0a:
                    bd:b5:38:e0:73:31:3c:db:6a:f7:77:0f:21:2c:34:
                    dd:8c:df:68:69:30:6a:1f:9e:96:f6:99:4d:13:54:
                    87:95:e4:48:7a:31:39:4d:68:99:16:b1:d8:4e:ca:
                    10:bd:1f:cb:a8:15:5e:db:6e:8e:09:54:51:65:76:
                    69:ae:fa:df:da:54:89:c8:08:db:10:76:07:d9:69:
                    f3:b5:97:cc:28:bc:ed:96:aa:4b:f6:61:f5:37:e2:
                    33:0c:77:15:f5:77:1f:41:aa:a6:6c:00:93:82:1e:
                    69:81:70:e3:d2:a2:48:42:9e:f7:46:f6:e9:11:65:
                    7f:61:62:85:9c:6d:3d:a5:ce:dc:ea:65:74:18:61:
                    a5:c9:f9:6c:15:b2:35:31:60:03:1b:9c:17:8f:e7:
                    f3:a4:70:47:17:f6:06:0e:52:db:07:56:d4:de:56:
                    c1:a2:57:00:76:d0:39:f2:c0:2e:6e:6d:1e:8b:55:
                    32:73:61:d4:48:d9:86:3d:30:c5:a5:fa:24:56:7d:
                    15:be:18:44:f4:56:2b:15:2d:6c:72:9f:70:f7:5f:
                    86:9d:f2:64:da:80:7d:84:19:51:7e:42:d2:6c:73:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A4:AC:2C:F1:F7:CF:A5:0E:6D:30:3E:B3:2F:F5:B6:91:3C:C5:8C
            X509v3 Authority Key Identifier:
                keyid:9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:c6:f7:7c:35:ea:c4:07:a9:60:21:da:a5:64:f1:b0:0c:84:
         67:2a:1b:e1:60:9e:8e:97:33:b4:09:81:29:f5:7a:54:a1:f7:
         19:40:90:5e:9c:d3:87:c3:13:dd:79:43:ea:da:27:2a:e7:9d:
         cf:b9:96:55:23:bd:bd:0f:c5:98:f1:9f:db:f7:1f:69:cb:86:
         c3:37:3d:38:09:d5:29:af:0c:c3:04:34:6d:43:90:f5:d7:ef:
         23:c0:89:ba:c6:ab:cb:bd:f9:b2:79:c2:95:78:7a:30:66:04:
         32:54:96:62:67:05:e8:82:6f:ea:f2:67:2b:2c:d7:0f:34:30:
         e0:c5:5f:6e:48:36:c3:32:54:3a:2f:6f:6a:d3:52:0d:13:68:
         f4:75:7b:c8:8a:80:07:d1:66:4d:8a:df:c1:c2:0b:e9:4f:4e:
         aa:20:e3:a7:74:c6:11:7d:7e:e4:06:28:e1:f1:46:0c:f7:f7:
         14:e9:5d:b9:cf:fd:4b:18:5a:d6:8e:d1:99:8d:14:6e:12:b8:
         39:4b:cd:f4:cf:27:10:50:5b:56:54:25:8e:3f:4f:22:33:9b:
         89:80:65:b0:50:8b:9b:66:75:57:33:f0:f5:fe:03:53:e7:f1:
         40:e6:05:75:68:06:37:ec:47:99:ce:d6:02:e1:ce:e3:ec:4c:
         fc:78:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:18 2025 by rpki-client