Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
File:                     rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json)
Hash identifier:          WLYsID94ROjX92S31gsGVSj32PbjF27krVjEaBUIW3Q=
Subject key identifier:   D4:51:8D:2C:6B:F0:D6:36:96:A9:7D:00:65:AF:E6:E2:86:B8:E2:9F
Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Certificate issuer:       /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Certificate serial:       019748FA4438BA3626D0361FCD6D5D83A08C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
Manifest number:          0EF8
Signing time:             Sat 07 Jun 2025 06:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:50 +0000
Files and hashes:         1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: 8Ac5WAP/9tW3lnQ0kBE/vhfJ4ro7RfTEcS9QT3VQp0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:44:38:ba:36:26:d0:36:1f:cd:6d:5d:83:a0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
        Validity
            Not Before: Jun  7 06:00:50 2025 GMT
            Not After : Jun  8 06:00:50 2025 GMT
        Subject: CN=d4518d2c6bf0d63696a97d0065afe6e286b8e29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fb:da:15:4d:e9:0d:45:e1:3e:f7:cb:3d:58:
                    fa:0e:99:df:4d:31:c0:30:dd:96:e9:0b:db:2a:17:
                    ff:1f:79:2d:65:3f:c9:ce:e7:bc:f1:f7:b0:9f:f8:
                    6c:8c:9b:de:4e:02:0a:0b:e9:99:75:cc:31:1d:95:
                    38:41:8f:11:93:3c:3b:9d:ad:2d:a7:65:c7:04:a5:
                    5a:47:ed:6f:11:aa:7a:05:d6:bb:db:13:a7:7e:e5:
                    b3:5a:45:e3:ba:c8:6b:9f:55:f0:83:a0:8a:64:bf:
                    64:e6:d4:6b:0a:7c:d4:03:23:b8:09:9a:03:97:04:
                    df:e6:bb:51:8f:8d:37:dd:2d:ba:20:10:b8:d9:da:
                    f2:3d:24:b4:63:4f:85:b3:eb:22:61:2e:af:d9:f8:
                    b2:b9:98:5c:ff:68:bf:71:1b:37:01:82:98:f8:67:
                    99:03:c0:54:bd:3e:11:b7:41:23:46:ea:d7:4f:12:
                    12:5e:27:6f:99:88:8b:d6:dc:3d:cb:01:82:33:96:
                    fb:52:73:8e:c8:bf:20:02:a5:df:15:24:d3:47:68:
                    6b:0e:af:8b:be:a1:c7:bb:2e:08:28:ce:66:8f:16:
                    a6:8f:7e:08:c7:82:db:22:86:54:7f:6e:4b:c6:b6:
                    47:cc:1d:cf:2c:07:1b:0d:2b:ad:30:5e:08:11:63:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:51:8D:2C:6B:F0:D6:36:96:A9:7D:00:65:AF:E6:E2:86:B8:E2:9F
            X509v3 Authority Key Identifier:
                keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:34:1e:a0:e1:54:81:97:d1:e0:3f:29:21:65:d2:0e:84:
         f0:94:0c:c7:57:60:db:a7:99:51:b5:93:44:39:94:2b:cf:af:
         e1:f1:2a:12:60:4e:20:dd:cb:91:f7:b3:40:db:a5:8f:e4:41:
         63:8f:37:ff:57:79:89:b3:da:a0:78:c0:5f:6e:e7:c6:0b:73:
         66:03:ba:eb:9a:35:5b:d6:18:29:49:d7:0b:bd:a2:cb:10:57:
         1e:c7:8c:b9:27:65:e1:ca:f3:af:0c:81:bc:f4:49:8b:16:d2:
         51:a4:8c:21:f5:0d:a8:5b:3a:93:05:8b:27:d7:c4:07:7a:fd:
         8c:38:57:b8:29:c7:e1:0b:7e:05:d5:6e:c0:d0:97:ba:be:5d:
         32:55:9c:c4:a6:29:21:66:a4:c4:65:a0:6b:0c:e0:a3:76:60:
         7a:df:7a:45:a7:ca:bb:76:84:72:df:c9:b8:5d:eb:74:5c:06:
         0f:d0:ce:dc:c1:07:bc:00:1f:49:7d:ac:9d:6b:8c:37:8c:52:
         9e:46:75:21:26:4e:4a:3e:11:06:29:73:c2:d3:b3:68:60:ca:
         83:83:8f:51:32:67:c8:c6:0b:fa:1d:24:c4:36:2b:2d:1e:f0:
         e5:b5:90:1c:e6:7b:55:6f:58:f0:3c:61:e6:2a:30:e1:88:07:
         ce:53:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:16 2025 by rpki-client