Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
File:                     jQjCXuFjw27WtzFxYBoYNkgupe4.mft (raw, json)
Hash identifier:          irpt1dxFWst2oXq1rauF9BrYfCWRob9Ag1rdlePTZnY=
Subject key identifier:   90:15:E8:38:53:E2:BA:E0:75:E0:E4:E0:9B:3C:3E:D8:56:95:DE:02
Authority key identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
Certificate issuer:       /CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Certificate serial:       01974C68B88B0C38F9AE2410BB2AD42698A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
Manifest number:          08DC
Signing time:             Sat 07 Jun 2025 22:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:20 +0000
Files and hashes:         1: jQjCXuFjw27WtzFxYBoYNkgupe4.crl (hash: F/AiFA2nAJbnba26hNL96TOOSwVgkKTtfQIuxlJAW38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:68:b8:8b:0c:38:f9:ae:24:10:bb:2a:d4:26:98:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
        Validity
            Not Before: Jun  7 22:00:20 2025 GMT
            Not After : Jun  8 22:00:20 2025 GMT
        Subject: CN=9015e83853e2bae075e0e4e09b3c3ed85695de02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:9e:7b:99:da:c7:00:98:f7:94:bd:9b:2d:
                    7d:22:a3:c9:ca:c3:3d:0e:0b:15:fa:07:6d:c9:75:
                    d7:af:c0:87:42:22:ff:42:2c:ad:93:fb:a6:9d:26:
                    09:a5:41:16:1b:f3:bf:9a:bf:03:e3:23:08:13:b8:
                    48:76:da:3d:37:41:05:08:dc:b6:eb:0f:42:5d:44:
                    47:68:ce:8e:73:13:0b:f5:a7:95:ed:eb:be:02:28:
                    65:e9:c1:31:9e:5f:58:c6:6d:e4:1d:c9:7a:8d:67:
                    c2:70:2b:8f:26:c2:91:31:d0:39:8a:6b:2d:cd:4a:
                    c3:4a:91:3a:1f:cc:11:c7:98:0d:4f:32:4a:04:f0:
                    ef:9b:85:41:83:46:50:17:93:c9:83:1d:a5:ef:8b:
                    b2:24:84:ba:48:f1:12:92:af:ba:e8:42:df:72:fc:
                    23:9f:7d:2c:ff:78:d4:2a:64:54:b1:30:2d:33:24:
                    47:d5:cf:b7:8d:b9:07:48:33:7d:25:2e:a9:1d:12:
                    e1:94:a8:04:12:8c:e2:16:6c:06:be:71:86:82:97:
                    fb:ee:60:66:f5:4e:80:e6:3b:13:1b:80:37:1e:2a:
                    f9:12:f6:15:75:eb:77:7f:e4:4c:74:5c:6d:d7:57:
                    75:78:0d:0b:50:b7:24:19:a6:13:30:73:8d:77:cb:
                    7f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:15:E8:38:53:E2:BA:E0:75:E0:E4:E0:9B:3C:3E:D8:56:95:DE:02
            X509v3 Authority Key Identifier:
                keyid:8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:af:79:92:05:15:6d:8c:10:b2:fa:52:a4:0e:a6:97:4d:92:
         bc:b3:7c:63:18:e3:10:1d:88:90:6c:79:08:d1:c3:22:ac:f8:
         65:86:e7:04:23:c7:c4:c7:04:39:80:3f:69:df:f5:77:74:11:
         22:71:17:fc:20:1c:c4:b8:bc:47:3b:6f:6f:d3:84:93:09:ed:
         ad:4b:74:66:79:ce:04:6b:dc:79:67:59:db:4b:4c:ed:b0:4b:
         96:46:68:47:cd:64:f4:f6:7e:23:01:a7:69:c1:d8:bd:98:92:
         0e:39:13:12:eb:73:23:47:fc:2f:be:1e:f1:81:04:b6:0f:c3:
         76:89:26:1c:24:3b:cf:6b:35:dc:f6:71:61:fa:a4:89:11:ce:
         65:8e:dd:26:37:b0:3b:54:5d:a5:a9:fb:98:e6:16:ef:39:90:
         a2:a3:ae:99:93:3a:71:07:37:22:76:90:13:ae:32:1c:6f:0e:
         d1:a2:f9:f2:7b:b9:87:6f:90:68:28:78:ad:d9:3e:31:ae:f9:
         57:c4:75:1d:b3:5d:a1:76:95:10:70:36:5a:3a:97:c3:5a:22:
         2e:13:f5:49:d4:fd:35:87:b7:27:34:ac:7f:c5:ff:b7:40:c9:
         a6:67:e4:a9:f8:b9:2f:c9:43:5f:4d:a3:86:d9:e4:9d:57:df:
         20:c3:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:38:03 2025 by rpki-client