Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
File:                     jvSnYgy-f8xHKj2gKckLX72UUZw.mft (raw, json)
Hash identifier:          p9/N3oDut46PwzZlJfgSMZXyY/nejfkUWY+KxAOmoao=
Subject key identifier:   95:A6:F2:87:87:77:06:56:5A:4E:51:13:61:7A:AC:1D:C4:F6:3D:71
Authority key identifier: 8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
Certificate issuer:       /CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Certificate serial:       0197469E9119C471CA82C9354082F8849970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
Manifest number:          066A
Signing time:             Fri 06 Jun 2025 19:01:26 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:26 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:26 +0000
Files and hashes:         1: jvSnYgy-f8xHKj2gKckLX72UUZw.crl (hash: xJTnPCSd4vFXGyORYDDj2HUqbXZDISY54pOtjmbKKh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:91:19:c4:71:ca:82:c9:35:40:82:f8:84:99:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
        Validity
            Not Before: Jun  6 19:01:26 2025 GMT
            Not After : Jun  7 19:01:26 2025 GMT
        Subject: CN=95a6f287877706565a4e5113617aac1dc4f63d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:5b:5c:0f:b8:f7:04:22:07:aa:27:9b:1f:
                    93:4c:5a:ae:10:fa:eb:2a:e3:4c:80:86:96:9e:51:
                    de:92:21:9c:78:7b:05:94:0e:31:9c:03:33:e1:40:
                    06:df:a0:2e:d6:3a:61:66:d9:b1:73:27:01:06:f9:
                    97:31:ea:38:c0:9f:90:f1:74:98:d7:f1:9d:0c:df:
                    44:1a:59:8e:93:4c:e8:03:c5:23:ab:e1:a1:eb:b1:
                    33:b4:cb:b4:b0:64:84:30:57:03:77:9a:60:e6:4f:
                    0b:5a:63:19:78:e2:2c:35:52:d1:30:45:5c:55:56:
                    18:9f:50:3b:e0:a1:33:5f:4e:23:e3:57:97:2b:92:
                    c9:01:a0:35:42:97:20:dc:8f:5d:b3:09:39:b1:11:
                    28:84:32:76:74:bd:1c:7b:a6:71:c2:52:e9:f1:d5:
                    d0:01:8a:78:ed:a7:7c:55:23:52:73:6a:ec:71:fb:
                    2a:5d:09:f2:d6:66:ab:6d:83:2c:bb:94:55:85:16:
                    9f:ed:c6:9d:6c:d1:1a:46:2c:32:57:a5:9a:74:d8:
                    a6:fc:41:e6:fa:f2:4f:a9:bb:0b:a2:48:2a:ae:1c:
                    df:55:53:f3:19:1b:97:1c:86:bb:b4:d1:b8:54:05:
                    1f:9d:44:ca:e3:f1:89:95:4e:3f:f6:bd:82:63:b1:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A6:F2:87:87:77:06:56:5A:4E:51:13:61:7A:AC:1D:C4:F6:3D:71
            X509v3 Authority Key Identifier:
                keyid:8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:44:fe:9c:95:b4:a1:ce:33:79:dd:54:17:c5:ea:54:bb:b6:
         8b:b9:f6:b3:f0:c8:5f:56:d4:73:92:c4:61:22:bf:a9:ff:68:
         36:96:16:90:c9:d4:61:80:55:01:f0:a4:b4:02:2d:60:f8:ef:
         ca:0c:ce:36:1f:a2:5b:84:0a:86:5b:48:83:19:4d:97:36:2c:
         d8:4c:5c:e4:be:2c:c0:96:fc:0e:03:c4:e9:7a:80:3a:a2:e3:
         23:f4:8f:19:e1:57:f2:47:54:86:d4:4f:34:46:8a:21:93:e5:
         a4:cb:80:56:a2:ad:19:e8:ed:83:6f:92:b0:ea:23:c8:54:1f:
         99:cb:29:a5:ab:c5:2b:db:b8:f8:61:71:2e:85:b1:18:82:38:
         b1:3c:0b:ec:33:d5:cc:49:61:81:70:65:95:ac:93:ab:ce:39:
         06:4a:b3:1f:1f:a6:42:cc:cc:fa:a7:ad:a3:e1:4a:c1:31:71:
         d4:68:6a:15:d6:89:eb:9a:83:db:2d:96:7a:56:4c:b4:73:c2:
         f0:dd:e1:2e:b4:a8:1d:fa:1e:9f:41:01:1c:82:62:68:75:26:
         84:83:b5:3d:41:f7:9a:8b:47:dc:13:68:62:0b:d8:f2:dd:2e:
         27:58:09:bd:f6:8a:a1:ef:86:0f:d5:63:b2:6f:86:ee:37:85:
         ed:15:1d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:03 2025 by rpki-client