Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          cNClFMzQuBMgMND52D+pJQEvX42pl5mwESaC21rBkzE=
Subject key identifier:   9B:45:39:90:9E:08:2F:5B:77:E3:41:16:08:59:C9:1B:1C:44:59:90
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       0199FCC684103E7F2A0EC1C1F2D258F46923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          0DB1
Signing time:             Sun 19 Oct 2025 14:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:32 +0000
Files and hashes:         1: X5JIC9unyCIdpKZJwQlA4lYc9cY.roa (hash: TbF6eUUD3ihge0Jd20Jank3p47LpDv7SMCYmoD1OeKU=)
                          2: gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa (hash: DwuTLpmUI5LgM0GpYDySurfXPWoPr7lrzuLuY77FykY=)
                          3: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: CvN4zgMapE4w55JzOEsIKas/ayxss65XiPbqi0Hebws=)
                          4: m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa (hash: LVhjeEqDTNmsxowkINJYXb6iHnRvgZx0ebSzKo74mzQ=)
                          5: odHmDhpPBcZ3XwBesQQXylBZA0o.roa (hash: H/gbEaRHX0JWWLdUIVP1AcKvMMZMHQaipUWz40c1nI0=)
                          6: zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa (hash: jAK0gwv0VcbXBTEIIqlyy6XCdTitcUhhvcmF8ss17m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:84:10:3e:7f:2a:0e:c1:c1:f2:d2:58:f4:69:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Oct 19 14:01:32 2025 GMT
            Not After : Oct 20 14:01:32 2025 GMT
        Subject: CN=9b4539909e082f5b77e341160859c91b1c445990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:85:a9:ea:9f:ce:e4:86:61:9e:83:7f:2d:
                    d1:57:5a:4b:39:62:2c:e0:4a:3a:fc:2f:89:57:7e:
                    92:03:6e:0a:28:c0:4a:e2:ba:3a:46:67:16:84:c7:
                    33:f2:bc:43:13:b8:ea:4c:30:51:c0:10:73:35:bc:
                    45:9f:58:66:c0:3b:44:c1:20:db:52:bc:6b:f5:14:
                    04:f4:00:c1:aa:ce:b1:33:1f:f9:7a:13:43:26:18:
                    7d:68:e3:80:62:67:ec:45:95:cb:7b:9c:f5:75:cf:
                    3f:66:10:18:5f:2c:b3:29:de:95:30:f4:38:4b:5a:
                    c5:ed:73:fe:68:27:fc:79:ce:e0:ae:c4:da:bb:f5:
                    0f:1e:f7:eb:4a:99:6f:25:cd:d8:32:2b:c8:a3:bd:
                    24:59:f0:57:6d:c0:21:72:33:d0:21:d4:2a:6b:7c:
                    01:24:96:2e:80:a0:a7:89:59:3b:2c:4f:48:ae:57:
                    12:c4:cb:c2:bc:9e:07:04:07:e2:5d:46:a6:83:b0:
                    92:84:a6:0f:4a:09:33:63:04:d5:80:e4:f8:8b:06:
                    d1:36:03:e8:50:73:92:12:4a:12:f6:de:cc:d1:b8:
                    62:06:04:84:2a:5e:17:a5:1f:77:df:ce:98:fb:62:
                    5b:b3:bf:e7:04:11:ed:f2:41:9d:1e:75:72:f1:70:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:45:39:90:9E:08:2F:5B:77:E3:41:16:08:59:C9:1B:1C:44:59:90
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:28:67:2c:b2:79:aa:3c:4c:a5:2a:ca:79:9a:0d:16:ef:f7:
         b0:02:e7:61:4f:20:21:b2:1e:0b:1e:0f:f7:8e:65:60:b3:d0:
         9a:62:13:aa:4a:e8:bb:91:9b:95:47:ad:e5:7c:a1:8e:d5:4c:
         7a:9e:ac:7b:68:c2:74:2b:8e:df:d3:9c:fd:36:7d:cc:0b:56:
         15:d6:e4:38:c4:8a:27:54:9e:54:fa:77:6b:d3:65:7a:69:f2:
         f5:cd:fd:57:d7:79:53:ce:aa:4b:c5:02:1c:f1:b7:32:55:0e:
         69:c8:2c:66:47:94:c5:0d:43:d2:8f:14:44:64:02:a3:1e:31:
         54:fe:96:50:30:9d:8f:04:4f:ca:58:9c:a3:a8:c0:ad:30:e2:
         4b:bd:9c:00:ef:73:07:8b:3b:5a:f7:3e:c1:94:33:ff:9a:66:
         a4:21:d5:41:03:d4:de:fe:8e:5e:0c:b6:8d:e4:f3:54:e5:72:
         a2:99:db:a2:1d:f0:2e:f9:2b:e6:1d:d9:1b:36:74:d2:32:46:
         2c:39:92:6c:36:84:96:2a:77:a0:4f:f8:4c:39:9f:07:2d:61:
         8f:91:cc:7c:22:09:36:fb:cc:be:45:65:88:31:d5:6e:a5:87:
         da:58:f8:dd:6c:9a:c7:80:b6:cc:cc:eb:1b:3c:25:c2:5d:e6:
         3b:6b:69:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:05 2025 by rpki-client