Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File:                     Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier:          Hl2Zr4xvQzsQ8XR0ViFO2AJB4qSpSayaoyFp+09fCG4=
Subject key identifier:   EF:CB:BD:9A:A6:BE:2C:65:D8:59:9A:D9:4F:B1:98:33:94:66:42:54
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer:       /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial:       0199FBEAA62EC876137D19FBFA85E2D5F595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number:          0159
Signing time:             Sun 19 Oct 2025 10:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:22 +0000
Files and hashes:         1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: Y6WDPyRbZNTzHMWtyYvBtzUVm7aILDDRT4bM16nKB6k=)
                          2: METktZ2idAiZeDz9hpktU55-5Jw.roa (hash: nKbFLY3xUJE/BDnG472RqLje6LdE93p8++xFwpMJxhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:a6:2e:c8:76:13:7d:19:fb:fa:85:e2:d5:f5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
        Validity
            Not Before: Oct 19 10:01:22 2025 GMT
            Not After : Oct 20 10:01:22 2025 GMT
        Subject: CN=efcbbd9aa6be2c65d8599ad94fb1983394664254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:18:a9:a2:da:a1:92:78:22:de:fa:97:5f:74:
                    10:3c:84:cd:b5:a5:1e:f3:f4:85:9b:24:00:a9:7c:
                    6a:0c:0d:51:36:b4:89:a4:1f:d2:6c:ad:32:ea:fc:
                    68:a2:a9:ec:61:50:16:7c:54:c1:74:a0:7f:66:f8:
                    c2:b1:ab:95:08:bc:56:e6:1d:48:8d:25:4d:3a:d7:
                    79:ec:4f:94:3f:e4:cc:0d:18:37:3d:05:cc:73:3b:
                    77:62:84:27:f7:da:54:5f:45:f9:8b:1a:73:9c:fc:
                    20:d9:39:f6:d8:77:5c:aa:bd:38:ec:0e:d4:17:ac:
                    b8:05:69:ba:b6:cf:9e:a1:68:f0:fa:4d:54:da:8a:
                    a3:6a:37:29:84:7f:3e:5a:32:d4:91:5b:29:ca:9e:
                    5c:bc:05:ba:76:b4:4b:dd:60:fa:8b:f0:e9:c3:2a:
                    f0:57:4a:ad:c1:96:c4:f9:f2:0d:83:11:3d:62:7c:
                    33:9e:05:97:0c:7a:39:35:f1:3a:d1:40:9a:be:4d:
                    dd:68:64:23:e8:a8:bb:70:2b:39:b8:3c:e3:a7:c6:
                    5e:ae:48:b7:88:8e:36:e0:e6:5f:85:bf:55:28:24:
                    21:f8:c7:39:f5:70:c4:74:0f:dc:04:cb:c9:2a:d9:
                    7e:ed:3f:ea:6e:ae:b5:ee:b1:b4:a8:2e:c5:58:1e:
                    1a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CB:BD:9A:A6:BE:2C:65:D8:59:9A:D9:4F:B1:98:33:94:66:42:54
            X509v3 Authority Key Identifier:
                keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:35:d5:56:f6:69:33:93:c7:68:bc:8f:f3:4d:0a:8e:02:16:
         d0:d7:02:ed:2d:6a:f7:f3:b4:f4:ec:4a:98:b5:0d:1a:7f:e7:
         d9:75:ec:ed:8d:87:87:4e:35:df:3a:40:4b:d3:51:e3:fe:35:
         35:67:cd:56:da:1c:4c:41:0d:7b:a2:47:fe:92:fa:86:7d:15:
         f4:af:ae:38:94:2a:ef:4c:2a:c6:43:63:95:f0:3d:d3:68:7f:
         8d:62:b7:58:fc:d9:c0:d9:e3:1b:87:18:d8:d0:23:9a:aa:4c:
         4c:71:6a:86:b7:c7:fa:8e:7d:ff:49:c9:1d:3e:85:82:11:e2:
         5d:48:2b:97:ef:4c:d8:d6:80:37:b2:4e:66:d9:13:17:c2:f1:
         f8:8a:6a:1c:c6:07:5a:d2:66:33:eb:af:ab:be:e4:02:57:0c:
         9a:cb:68:8a:4e:b4:e5:8f:e0:6c:fd:4c:89:90:bd:a1:bb:d4:
         4a:6d:c4:3c:c9:1d:dd:d9:66:a0:a9:93:b4:9b:ad:7e:09:36:
         f3:a6:55:c4:81:ac:ac:13:44:ac:97:82:55:6b:16:31:4f:6a:
         a1:d3:29:53:42:d9:d6:7b:24:18:7e:52:2f:06:b6:e0:12:72:
         3a:fd:2c:14:c2:67:75:e8:dc:07:17:aa:5a:b1:dc:2b:3c:78:
         cc:8c:ec:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:13 2025 by rpki-client