Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
File:                     RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft (raw, json)
Hash identifier:          Ge1zLHnup9OxOZKnCQW0d3pEzeL8G9rq3FHysYBniuo=
Subject key identifier:   7A:44:ED:F9:F0:27:34:C8:3C:B6:36:F6:40:2A:B1:53:B9:C7:42:B2
Authority key identifier: 44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31
Certificate issuer:       /CN=44957c7e26a3fe52f27ffbbc40e842764016b131
Certificate serial:       019923A0CEF17312DA84F3A696A5040BF812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
Manifest number:          0710
Signing time:             Sun 07 Sep 2025 10:02:45 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:45 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:45 +0000
Files and hashes:         1: RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl (hash: AnJUT9eOq09BX18umxyJf0XqS47qswgBJYMGdDa68co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:ce:f1:73:12:da:84:f3:a6:96:a5:04:0b:f8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44957c7e26a3fe52f27ffbbc40e842764016b131
        Validity
            Not Before: Sep  7 10:02:45 2025 GMT
            Not After : Sep  8 10:02:45 2025 GMT
        Subject: CN=7a44edf9f02734c83cb636f6402ab153b9c742b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:f3:a8:e1:e2:b4:e9:78:d5:0a:8d:c9:cc:
                    61:93:70:45:b5:08:f2:5f:a5:17:74:f0:3c:32:9e:
                    50:0b:35:60:01:92:df:82:c6:2f:58:ee:c5:f8:6f:
                    1b:37:dc:39:44:b7:dc:c6:84:8d:60:c1:ef:ae:f5:
                    b9:24:e9:8b:6e:c6:a8:a4:54:1b:1e:45:16:35:33:
                    b7:13:31:26:ba:51:0f:b2:af:e5:3b:22:c7:9a:a0:
                    74:5a:95:fe:5b:b3:db:58:63:0b:a5:98:79:f9:73:
                    62:5b:19:79:71:c5:84:18:f2:30:7e:d4:44:26:7e:
                    5a:f8:21:37:2a:a2:0b:b3:4d:70:e6:ce:0d:0c:d7:
                    cb:e8:94:9c:cf:ae:79:3a:fb:3f:5d:02:87:2c:f8:
                    a0:59:e5:8d:b4:de:8a:7d:45:49:d2:23:b3:c0:f1:
                    61:53:9b:04:f6:82:92:f3:b2:00:e0:06:32:90:79:
                    2a:97:bb:29:7e:47:58:ba:3d:94:61:f5:91:be:b5:
                    da:9e:e2:69:f9:1b:08:1e:e2:61:28:0b:eb:2e:70:
                    5b:29:d3:1f:a7:af:19:5a:d5:2a:a0:b0:dd:89:61:
                    e0:9b:5d:b4:34:37:e5:32:ba:b0:1e:46:bb:d1:b8:
                    18:22:e4:f0:b5:e1:47:f3:f3:d8:a0:c7:1a:dc:c7:
                    f4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:44:ED:F9:F0:27:34:C8:3C:B6:36:F6:40:2A:B1:53:B9:C7:42:B2
            X509v3 Authority Key Identifier:
                keyid:44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:22:d1:34:b7:b4:b6:a1:93:08:27:75:0e:9a:0a:21:65:3c:
         5d:be:6b:37:ff:63:5c:21:a1:4d:fb:d7:5d:95:96:46:ce:c4:
         cb:78:53:06:1e:91:35:3d:a6:5b:d3:52:ac:1b:73:79:37:3a:
         d5:03:96:30:3e:46:a9:9d:49:bc:ae:36:43:f8:20:8f:24:21:
         52:f9:cb:f7:1f:e2:0f:4e:77:f0:39:1a:ba:cf:8c:7a:0e:ef:
         77:37:89:5e:f5:b7:8f:de:ca:5c:c6:30:65:cd:2c:2a:6e:0c:
         be:b8:1a:bf:d9:c4:b3:69:35:16:28:70:52:02:24:7a:52:56:
         87:f5:b8:ac:8a:e8:e6:20:68:b3:ce:50:f5:2c:d6:d7:7b:96:
         57:d5:36:af:70:ef:6d:b2:bc:82:3e:fd:7c:60:67:d9:62:87:
         9c:18:07:40:63:0d:ce:08:1e:09:64:30:1f:89:7f:ce:15:2b:
         a8:00:42:08:16:cf:c5:f8:af:96:ea:75:5e:cb:4c:da:24:5f:
         9b:50:3c:22:4e:55:0e:2e:72:c6:4f:8b:e1:55:29:a6:c7:17:
         1f:0e:0d:ad:72:08:06:5f:e6:8b:6b:e4:60:1c:2b:dc:9e:e5:
         45:65:1f:2c:30:08:d5:f7:92:f9:4b:7b:84:10:d4:6a:7e:4b:
         74:83:11:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:26 2025 by rpki-client