Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
File:                     5JlaSpG8KcjX7RBKA4QBmk_lng4.mft (raw, json)
Hash identifier:          3N1axoqXOrTCopoxxS5csXhPfNg4AFZqlNloLIKSm9c=
Subject key identifier:   0D:58:91:EA:B5:D8:F0:0D:1F:01:1F:76:09:34:AE:C6:29:BE:DC:62
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Certificate issuer:       /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial:       019921B198418CD14749DB70DFE376ACA682
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
Manifest number:          09B8
Signing time:             Sun 07 Sep 2025 01:01:50 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:50 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:50 +0000
Files and hashes:         1: 5JlaSpG8KcjX7RBKA4QBmk_lng4.crl (hash: 8+oq0hNpIoO5TXYQ2G32/p09c44uQgfzcpjZIbOE2Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:98:41:8c:d1:47:49:db:70:df:e3:76:ac:a6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
        Validity
            Not Before: Sep  7 01:01:50 2025 GMT
            Not After : Sep  8 01:01:50 2025 GMT
        Subject: CN=0d5891eab5d8f00d1f011f760934aec629bedc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:79:c7:8c:ca:a6:9d:2e:bc:74:37:ab:95:
                    93:18:0f:23:ac:6b:c5:99:9b:33:b9:15:43:60:f8:
                    2b:31:de:d1:c0:0c:a8:e8:8c:62:2e:53:fe:cb:aa:
                    88:88:62:98:a4:ac:cc:89:d2:3f:8e:3d:18:e9:a0:
                    6b:ed:65:2f:7b:16:9d:c8:91:12:04:a2:cd:e7:a4:
                    1a:68:c9:20:92:a9:7b:14:6e:71:b5:3c:28:8e:c0:
                    8f:4c:a6:87:ee:18:89:04:51:a4:9e:61:d0:42:10:
                    2e:a3:dd:25:f1:64:43:d2:79:e5:76:12:d3:3d:47:
                    a6:47:6e:13:d6:2e:a1:a5:18:82:fb:5c:83:51:78:
                    d6:b8:99:34:5d:f4:7a:a4:39:98:88:91:ec:62:4d:
                    e0:25:6b:10:28:10:b5:48:80:d6:a1:bf:00:23:4b:
                    af:1d:40:1e:07:65:17:73:8f:f4:f1:5b:fe:2d:18:
                    45:e3:a6:ef:2a:49:f4:b9:99:98:0e:e0:62:f5:28:
                    f0:66:95:77:db:d0:57:bc:a4:74:34:6b:ea:6b:ba:
                    ba:a7:cd:fc:49:f8:d0:d1:7a:27:a5:8e:b8:14:d7:
                    60:85:a1:46:cc:ac:74:fe:4c:46:8f:d1:fc:16:c6:
                    dc:59:a4:d9:74:19:d4:16:f2:bc:b8:fe:ba:8f:43:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:58:91:EA:B5:D8:F0:0D:1F:01:1F:76:09:34:AE:C6:29:BE:DC:62
            X509v3 Authority Key Identifier:
                keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:02:d5:fb:ab:64:43:6b:5c:b8:45:ae:89:16:77:44:ba:02:
         48:14:6d:ae:43:34:50:3d:ff:3c:24:89:ce:65:8a:09:2a:61:
         40:15:ab:3f:07:aa:6d:d2:36:14:7f:8b:be:67:59:e3:03:0c:
         19:36:cb:70:d9:fc:6f:1d:b8:2b:9d:49:6f:e4:2f:d0:4e:a0:
         5f:39:68:ba:34:d7:d0:76:2a:f5:8b:83:db:ed:77:40:58:3f:
         c3:a9:65:71:76:cf:d8:c4:9b:b2:20:e0:3c:af:91:0f:0a:8c:
         7a:00:52:7e:6e:e1:58:34:53:2e:08:f6:74:18:00:b6:af:be:
         bc:c9:d3:d4:22:ee:d2:eb:dd:e0:d6:bb:72:c1:72:68:5c:93:
         66:78:9a:67:dd:cc:c6:56:ef:f2:75:32:5b:36:25:41:f0:93:
         f7:d3:cf:a1:f1:a6:87:e5:5b:c7:1d:89:08:30:d8:00:95:93:
         be:23:46:f4:80:53:11:6a:35:22:45:4d:f5:4e:ef:3b:ba:f6:
         06:f2:5b:f1:a3:4a:61:43:8c:e5:36:e2:01:4e:8f:79:92:d4:
         1a:76:03:6f:0f:93:8e:87:ac:8b:8c:29:11:96:75:3a:3e:ac:
         a8:06:c7:4a:4f:ae:8a:3b:da:61:6f:bc:24:f4:bf:af:75:0e:
         a6:2a:22:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:12 2025 by rpki-client