Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File:                     tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier:          i1P35qOIEzAclj6QeMRBhliKV+gHeKkNWkH9VfduTOc=
Subject key identifier:   C6:7E:E1:18:77:8D:96:5E:5A:8D:E1:A8:D5:16:D2:AB:37:D8:91:89
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer:       /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial:       0199FBEB2E2BC099E407A5458847C3922FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number:          086F
Signing time:             Sun 19 Oct 2025 10:01:57 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:57 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:57 +0000
Files and hashes:         1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: ILq25RdB0MzS6JOkOnaW+k4wCu+XJP7fKggcbV/P9N8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:2e:2b:c0:99:e4:07:a5:45:88:47:c3:92:2f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
        Validity
            Not Before: Oct 19 10:01:57 2025 GMT
            Not After : Oct 20 10:01:57 2025 GMT
        Subject: CN=c67ee118778d965e5a8de1a8d516d2ab37d89189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:91:ad:de:10:94:20:46:ef:d3:97:cc:c9:
                    1f:c6:51:38:42:c6:c9:de:06:60:d0:bb:14:69:8e:
                    a1:97:8d:a7:04:f1:24:d1:73:bb:d3:9b:3f:6a:3e:
                    c7:dc:45:3c:8a:9b:b1:c6:81:bc:c2:3a:a6:7b:48:
                    f3:2d:27:ea:b7:59:27:8b:39:9d:ba:65:39:51:be:
                    1a:30:8a:b8:25:8e:17:be:7d:71:a5:00:32:a9:2f:
                    fe:72:27:3d:64:fd:f1:1f:bb:b8:b3:97:6a:df:9d:
                    2c:2a:29:bc:22:e8:4e:b8:bd:28:0b:b9:67:52:ef:
                    cb:f9:ff:d1:9b:b2:4f:48:a2:33:83:48:0e:6d:91:
                    bd:73:81:df:cc:a4:cc:15:8c:be:75:47:ff:3e:35:
                    46:f3:c8:52:f0:8b:97:5e:e1:96:85:81:e5:86:e0:
                    93:df:67:03:a9:4a:ab:ee:08:75:08:52:93:1d:ed:
                    e7:28:79:d4:77:fe:b6:d8:3c:88:e6:77:5e:91:f4:
                    0d:46:d6:2c:a1:4f:8b:6b:da:de:ab:4a:1e:dd:52:
                    ad:48:75:fb:af:28:3c:fa:60:1c:c4:e0:fb:65:01:
                    bf:ae:6d:fa:35:25:57:ae:b5:d8:25:2a:f6:e0:9a:
                    b4:5f:18:be:45:55:03:c6:50:2f:5e:cb:3c:9e:99:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7E:E1:18:77:8D:96:5E:5A:8D:E1:A8:D5:16:D2:AB:37:D8:91:89
            X509v3 Authority Key Identifier:
                keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ad:10:35:78:e9:c7:f8:2e:75:9d:2f:3e:6a:3f:82:bb:00:
         72:a9:b1:d7:3a:bf:29:91:6b:2e:06:75:c0:50:6d:36:54:d6:
         40:1d:aa:5c:c5:21:10:55:36:90:00:cd:12:23:68:b5:33:73:
         9f:95:05:19:1b:c9:36:93:09:13:cc:19:5c:6d:da:52:7c:28:
         b7:6d:41:59:00:ab:d1:91:ee:36:45:c6:29:ab:6b:b6:ba:a3:
         75:77:b5:18:4b:6d:87:1e:8a:06:84:63:d4:af:3d:ee:12:a1:
         52:67:67:a5:b2:65:b1:01:dd:c2:1a:e0:61:71:64:93:34:f3:
         50:0f:fb:e3:59:ac:dd:da:38:d1:d3:2b:23:b3:ca:98:b0:64:
         8a:78:45:1e:06:e7:dd:7d:a6:c4:ee:24:b7:dd:6e:83:cf:b7:
         cd:7c:c0:ed:0b:81:90:7e:ed:2f:ae:9f:3e:ae:e9:a8:ed:75:
         c3:4d:22:12:03:ea:73:28:34:1b:45:db:67:05:17:ae:6f:88:
         2e:cc:ca:91:55:ab:15:b5:10:9e:48:db:dd:54:d7:3b:6e:2b:
         ef:ee:d8:38:db:04:e3:40:f5:a6:79:5c:dd:d5:d4:f1:64:5f:
         b5:f9:f9:9c:eb:08:e5:ff:9b:16:3a:2d:fb:77:b1:d5:0a:80:
         be:c6:70:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76y4rwJnkB6VFiEfDki+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YThmMmNhMjNlMTAyZDRkMzU3MTEzNjJkMjRhYmQ0N2Iw
OWU5ZTUwHhcNMjUxMDE5MTAwMTU3WhcNMjUxMDIwMTAwMTU3WjAzMTEwLwYDVQQD
EyhjNjdlZTExODc3OGQ5NjVlNWE4ZGUxYThkNTE2ZDJhYjM3ZDg5MTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZmRrd4QlCBG79OXzMkfxlE4QsbJ
3gZg0LsUaY6hl42nBPEk0XO705s/aj7H3EU8ipuxxoG8wjqme0jzLSfqt1knizmd
umU5Ub4aMIq4JY4Xvn1xpQAyqS/+cic9ZP3xH7u4s5dq350sKim8IuhOuL0oC7ln
Uu/L+f/Rm7JPSKIzg0gObZG9c4HfzKTMFYy+dUf/PjVG88hS8IuXXuGWhYHlhuCT
32cDqUqr7gh1CFKTHe3nKHnUd/622DyI5ndekfQNRtYsoU+La9req0oe3VKtSHX7
ryg8+mAcxOD7ZQG/rm36NSVXrrXYJSr24Jq0Xxi+RVUDxlAvXss8npl8owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ+4Rh3jZZeWo3hqNUW0qs32JGJMB8GA1UdIwQY
MBaAFLWo8soj4QLU01cRNi0kq9R7CenlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mNmY3NTItYzA0Yi00ZWE4LTg1N2Qt
OGE4NzQ0ZTQ1NDE3LzEvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mNmY3NTItYzA0Yi00ZWE4LTg1N2QtOGE4NzQ0ZTQ1NDE3
LzEvdGFqeXlpUGhBdFRUVnhFMkxTU3IxSHNKNmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq0QNXjp
x/gudZ0vPmo/grsAcqmx1zq/KZFrLgZ1wFBtNlTWQB2qXMUhEFU2kADNEiNotTNz
n5UFGRvJNpMJE8wZXG3aUnwot21BWQCr0ZHuNkXGKatrtrqjdXe1GEtthx6KBoRj
1K897hKhUmdnpbJlsQHdwhrgYXFkkzTzUA/741ms3do40dMrI7PKmLBkinhFHgbn
3X2mxO4kt91ug8+3zXzA7QuBkH7tL66fPq7pqO11w00iEgPqcyg0G0XbZwUXrm+I
LszKkVWrFbUQnkjb3VTXO24r7+7YONsE40D1pnlc3dXU8WRftfn5nOsI5f+bFjot
+3ex1QqAvsZw0g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:54 2025 by rpki-client