Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File:                     JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier:          Bd5SN6kYBtkCgwGWv6YRqqvREkMUjxUFJcWvhEyn2l8=
Subject key identifier:   F0:24:33:82:BB:01:7F:8F:C7:BD:CF:E5:1C:5D:DB:FA:5A:54:2B:E7
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer:       /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial:       0199FC590CE93ACEE76F17A3B2868A3CDF15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number:          0CB7
Signing time:             Sun 19 Oct 2025 12:01:58 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:58 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:58 +0000
Files and hashes:         1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=)
                          2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: NBaFdoM8x5J5/cUP0d5UHBAYqYlyYGefuvT2DHAr9gM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:0c:e9:3a:ce:e7:6f:17:a3:b2:86:8a:3c:df:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
        Validity
            Not Before: Oct 19 12:01:58 2025 GMT
            Not After : Oct 20 12:01:58 2025 GMT
        Subject: CN=f0243382bb017f8fc7bdcfe51c5ddbfa5a542be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:75:30:40:73:dd:56:c1:9f:bf:27:ef:74:26:
                    19:da:19:91:b8:81:29:f4:87:9b:ed:0b:bc:fa:31:
                    d2:f9:8a:2c:84:10:4e:ec:ef:5d:f1:08:28:c0:9b:
                    da:dd:d9:d1:9a:4b:0b:c8:d3:92:63:40:da:80:e8:
                    27:22:e7:ba:8d:53:d8:44:bb:e4:23:c6:d3:9b:f3:
                    0b:e5:f9:40:d2:0e:95:40:0d:0c:87:77:10:02:d3:
                    52:99:ba:27:f8:e6:36:d1:ee:00:e0:5f:6f:eb:87:
                    ad:d5:b1:1a:fa:f6:c2:5f:11:fe:0d:3e:cc:e3:f1:
                    69:63:7a:5c:6e:49:99:77:94:94:46:b9:20:8e:df:
                    2a:6c:e1:9a:58:15:83:fe:93:bb:ff:c4:6f:f3:73:
                    60:fd:1e:50:94:93:36:5c:f0:13:6b:40:08:f3:79:
                    e9:d7:ab:75:3b:83:a0:0b:b2:1d:99:8e:41:73:3d:
                    ca:21:b1:95:f4:d0:b3:70:a4:04:b4:81:19:39:f7:
                    79:98:76:96:65:d0:6b:5b:0f:e6:01:79:e5:a0:b3:
                    7d:29:2f:96:57:9f:8d:f1:20:b1:ac:93:77:5b:b5:
                    13:0d:04:30:bf:7b:82:a9:2a:d1:18:f1:37:c5:8c:
                    12:78:14:89:42:d7:b8:cc:30:fa:f9:f3:4c:0b:35:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:24:33:82:BB:01:7F:8F:C7:BD:CF:E5:1C:5D:DB:FA:5A:54:2B:E7
            X509v3 Authority Key Identifier:
                keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b2:d9:e0:f4:83:e1:d3:27:eb:82:ff:f0:2b:65:46:ea:0b:
         b8:32:59:88:85:2c:93:06:16:42:e4:97:0f:e2:cb:cb:17:4b:
         6b:9b:e6:a3:77:b7:49:3d:7c:ad:9c:9e:a6:ad:da:1b:91:21:
         70:e6:d3:ec:01:c4:39:10:4f:eb:5b:12:49:86:f6:6b:6e:cd:
         79:10:70:9c:43:74:6d:98:9c:18:2c:5a:89:30:d9:db:d8:16:
         e5:9f:ef:ce:17:00:a9:39:b8:76:df:4c:fd:48:44:26:2d:fc:
         55:32:dd:41:64:c9:d9:1c:45:90:20:9c:b6:1c:c7:1a:d1:3e:
         10:5a:ad:bc:96:8f:cf:70:e5:5f:79:55:a8:c8:64:de:12:9f:
         43:36:96:52:6c:a9:42:ee:75:26:06:e9:11:03:12:c3:f8:ea:
         42:2a:a9:f2:e9:87:57:15:29:44:52:05:40:4f:f4:20:6e:0b:
         03:40:f5:d4:14:0d:17:c4:b1:97:df:05:8d:af:a7:31:cc:a1:
         e1:3c:d6:7b:62:9f:ed:cb:d0:e1:ef:b5:23:27:7c:2e:f3:58:
         24:ea:49:4c:d6:d7:ee:26:9b:97:1d:a7:5d:34:4c:61:6d:0f:
         62:7a:d1:d3:46:a0:ee:68:5e:4a:28:ab:56:9e:75:19:30:a4:
         b6:e1:c1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:22 2025 by rpki-client