Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
File:                     Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json)
Hash identifier:          RRe1PxfopyKWUupP1+I5WjhiY9FkilZJnF31jQ7y59I=
Subject key identifier:   E7:BA:F6:27:73:63:16:D0:06:E0:DC:A0:90:76:58:4D:1A:E5:17:A6
Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Certificate issuer:       /CN=267d0cc5bd86d568366657aef0310d493a7176e4
Certificate serial:       0197507CF5812FFBCEA6471AC48B78058EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
Manifest number:          157C
Signing time:             Sun 08 Jun 2025 17:00:55 +0000
Manifest this update:     Sun 08 Jun 2025 17:00:55 +0000
Manifest next update:     Mon 09 Jun 2025 17:00:55 +0000
Files and hashes:         1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: cGqPfZdwthaG9f34s1x4G0XkMCIRrxKehyaVdOfgk7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:7c:f5:81:2f:fb:ce:a6:47:1a:c4:8b:78:05:8e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4
        Validity
            Not Before: Jun  8 17:00:55 2025 GMT
            Not After : Jun  9 17:00:55 2025 GMT
        Subject: CN=e7baf627736316d006e0dca09076584d1ae517a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:01:b7:a7:17:d2:08:9a:35:c8:34:b7:a5:
                    bb:40:33:6b:c8:e0:02:88:03:7e:9d:ac:64:98:68:
                    9b:05:e1:bf:8c:37:64:53:8b:d4:b6:4e:1a:f7:e3:
                    c9:11:af:64:66:7c:ca:ba:35:c9:99:ea:f0:2e:16:
                    fa:e4:55:ce:fd:8c:f4:ba:ad:6f:bf:47:66:13:2b:
                    68:bf:74:03:9c:64:77:5d:1d:ec:47:b4:37:45:a0:
                    27:d4:66:69:08:65:4a:2e:7c:13:89:83:cd:67:7f:
                    44:7a:6f:4a:f6:2b:be:a3:49:71:c9:c8:15:74:d1:
                    e3:24:6d:25:93:4e:64:14:13:ce:33:95:9f:d5:65:
                    09:26:cb:da:d1:98:64:de:38:3b:51:48:81:27:21:
                    5d:0b:9b:14:6a:a5:b7:e7:ae:0b:8a:12:76:32:80:
                    e1:81:3e:c1:da:40:23:77:48:9c:87:9f:86:e0:d7:
                    c1:24:95:73:74:f6:37:b9:55:34:95:f2:49:f4:f2:
                    2f:ad:5e:a2:1f:c9:88:ae:08:ae:fb:2a:8c:4a:67:
                    25:85:06:df:3e:d6:76:c2:09:78:05:25:be:9f:d7:
                    d7:69:3f:eb:60:a2:7d:03:88:c3:78:a4:ea:5a:ea:
                    77:dc:ea:c0:2b:b2:9d:41:59:96:15:a9:75:d7:4b:
                    58:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BA:F6:27:73:63:16:D0:06:E0:DC:A0:90:76:58:4D:1A:E5:17:A6
            X509v3 Authority Key Identifier:
                keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:87:45:fb:12:98:20:2a:38:5a:26:0b:ee:dd:59:58:98:04:
         c2:e0:60:10:ee:99:3a:d0:1e:d5:f2:47:65:c2:43:3b:a5:d5:
         e8:2b:fa:30:0a:bb:82:85:28:f8:34:6d:63:c4:50:b3:67:69:
         4f:68:6f:c2:88:8d:7c:db:30:5e:40:04:69:d1:19:0d:96:04:
         1d:68:71:ea:51:08:e9:1d:b4:b1:b0:1d:b7:ab:3f:66:6b:53:
         9e:79:51:a1:40:4f:1f:3d:3f:1a:3e:a6:f7:0c:c4:4d:21:ed:
         70:34:a9:7d:74:bb:9e:a7:7d:86:89:72:90:4e:31:f7:be:be:
         a4:b8:b1:0d:a4:84:38:66:f3:43:14:9f:d6:04:df:4e:d3:2e:
         2b:e3:8c:bc:11:bb:6f:98:25:2e:6e:a2:3b:32:ca:08:8b:36:
         17:78:27:52:84:e5:92:c1:ba:94:23:63:20:ce:83:92:9c:2b:
         ba:3d:ce:8a:e2:04:28:3d:03:6e:48:d1:f2:37:9d:0e:5c:22:
         85:9f:b7:c1:e7:01:1d:74:bc:b7:65:a8:eb:a0:42:c1:5d:da:
         66:82:59:f1:34:a0:0b:62:71:07:8e:16:cf:6e:1f:3c:86:b1:
         5b:a5:4e:68:a7:e2:b1:c3:30:67:35:09:08:91:86:26:61:56:
         2e:aa:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:23 2025 by rpki-client