Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File:                     jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier:          KnZHKveeI/9Q3e7WH7prKHee+G+5KOS6dxqvNozEyAE=
Subject key identifier:   06:E5:6A:12:66:B7:EC:CB:47:CD:A3:34:45:D6:9E:AC:2E:57:F5:E3
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer:       /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial:       0199FC586A086E89DE34DC1ED85270CF7D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 12:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:16 +0000
Files and hashes:         1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: ByZOtf33XTFX8mttFmKp0HV+7fWcLZV6/gD25tdzyIg=)
                          2: visWSJlNcMrC3jJZFirSko7YGBQ.roa (hash: aZpd1tnSI6OX83780EE9bEx3FT7nmj99SMc4Lm6Unmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:6a:08:6e:89:de:34:dc:1e:d8:52:70:cf:7d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
        Validity
            Not Before: Oct 19 12:01:16 2025 GMT
            Not After : Oct 20 12:01:16 2025 GMT
        Subject: CN=06e56a1266b7eccb47cda33445d69eac2e57f5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:aa:18:ec:74:d6:d0:fa:cc:71:d4:c2:60:
                    52:81:78:de:88:9c:bd:ba:78:9b:bb:01:87:4a:7a:
                    51:bb:19:a4:8f:66:70:29:38:aa:95:89:9d:fd:c9:
                    3f:58:0c:11:4e:a9:ab:0a:55:76:7c:c5:3f:dc:c2:
                    23:c3:f2:b7:da:ec:aa:d1:a4:f0:bb:4f:b4:b5:ca:
                    47:10:81:31:19:6a:ed:2e:7c:f6:48:fc:03:f0:9b:
                    44:1a:aa:03:73:ab:da:e6:93:8a:99:cb:0d:e5:44:
                    b2:d1:97:bf:b0:30:56:6c:e2:76:ec:ef:72:a0:7c:
                    8e:52:f0:66:e2:8b:9f:b6:70:66:15:73:05:2a:5f:
                    50:93:78:28:1a:8c:9d:28:85:9a:cd:9c:30:15:78:
                    4d:a6:fa:76:cd:4d:c9:79:2a:0a:fd:72:fe:d8:19:
                    55:20:92:35:fb:b0:2f:db:12:8d:34:e2:53:f6:94:
                    99:88:91:b5:02:32:1a:a8:0a:63:78:0f:bf:72:f7:
                    34:18:c9:89:0e:a7:47:62:1a:41:43:27:4c:18:ef:
                    ca:bb:3e:1e:ae:2c:f8:c9:1d:d8:b6:fe:53:f3:7c:
                    5c:82:06:46:e9:99:50:0c:98:ec:9b:2e:6b:b5:72:
                    27:1c:53:00:d9:f0:21:38:4f:9c:1f:38:e4:ac:dc:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E5:6A:12:66:B7:EC:CB:47:CD:A3:34:45:D6:9E:AC:2E:57:F5:E3
            X509v3 Authority Key Identifier:
                keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b6:0f:e5:52:04:7b:5c:40:80:7b:7a:9b:c8:bf:6b:e9:2a:
         fb:b4:d1:0b:c0:b3:6b:e8:9a:63:bd:aa:06:b2:76:cb:56:b2:
         fe:45:9e:56:46:05:54:8c:1d:03:d5:22:2f:29:cb:17:da:54:
         4b:35:7d:b3:e7:aa:b8:76:5a:a9:49:8a:6f:ca:3f:19:4f:d9:
         8d:c6:50:42:9f:f2:79:a3:63:59:68:05:22:78:0f:49:3b:e8:
         f5:30:e9:a0:c3:04:9c:98:c8:6c:b2:d5:4b:60:50:58:bb:f9:
         f4:e0:3b:bd:19:63:30:96:b4:6a:b2:fa:4e:03:87:7d:48:c1:
         1b:9d:81:f7:bd:07:d1:bf:1e:bf:07:3c:0e:ec:93:b8:78:58:
         65:a9:6d:29:96:77:83:3a:6b:ab:dd:c0:31:e4:92:18:1a:1e:
         3a:a8:dc:bc:25:c5:64:58:2a:b4:d5:f0:70:8a:72:dc:54:22:
         d1:bc:9f:f6:ef:9b:7e:7f:90:30:32:04:36:69:46:f8:0f:2a:
         fd:38:ae:f4:82:0c:a3:23:3a:9a:a1:69:98:65:88:da:5f:14:
         bd:f0:8a:e8:96:8d:2b:8b:34:25:6b:3c:64:99:b8:73:38:8a:
         45:2e:bf:5d:a1:d6:9e:f7:72:88:99:f1:b0:5b:0a:be:97:5e:
         c9:1a:e1:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WGoIboneNNwe2FJwz31SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOWIxZmUzMTJmMDA5ZjIwOGVhOGEyYjczMjBjZWE3NjVk
ZDUxOGIwHhcNMjUxMDE5MTIwMTE2WhcNMjUxMDIwMTIwMTE2WjAzMTEwLwYDVQQD
EygwNmU1NmExMjY2YjdlY2NiNDdjZGEzMzQ0NWQ2OWVhYzJlNTdmNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa2qGOx01tD6zHHUwmBSgXjeiJy9
unibuwGHSnpRuxmkj2ZwKTiqlYmd/ck/WAwRTqmrClV2fMU/3MIjw/K32uyq0aTw
u0+0tcpHEIExGWrtLnz2SPwD8JtEGqoDc6va5pOKmcsN5USy0Ze/sDBWbOJ27O9y
oHyOUvBm4ouftnBmFXMFKl9Qk3goGoydKIWazZwwFXhNpvp2zU3JeSoK/XL+2BlV
IJI1+7Av2xKNNOJT9pSZiJG1AjIaqApjeA+/cvc0GMmJDqdHYhpBQydMGO/Kuz4e
riz4yR3Ytv5T83xcggZG6ZlQDJjsmy5rtXInHFMA2fAhOE+cHzjkrNwmxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAblahJmt+zLR82jNEXWnqwuV/XjMB8GA1UdIwQY
MBaAFI6bH+MS8AnyCOqKK3Mgzqdl3VGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iYTRkYTYtMWQxZS00ODc4LTg3NmUt
YTg1Mzk5ZGI2MGJmLzEvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iYTRkYTYtMWQxZS00ODc4LTg3NmUtYTg1Mzk5ZGI2MGJm
LzEvanBzZjR4THdDZklJNm9vcmN5RE9wMlhkVVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbYP5VIE
e1xAgHt6m8i/a+kq+7TRC8Cza+iaY72qBrJ2y1ay/kWeVkYFVIwdA9UiLynLF9pU
SzV9s+equHZaqUmKb8o/GU/ZjcZQQp/yeaNjWWgFIngPSTvo9TDpoMMEnJjIbLLV
S2BQWLv59OA7vRljMJa0arL6TgOHfUjBG52B970H0b8evwc8DuyTuHhYZaltKZZ3
gzprq93AMeSSGBoeOqjcvCXFZFgqtNXwcIpy3FQi0byf9u+bfn+QMDIENmlG+A8q
/Tiu9IIMoyM6mqFpmGWI2l8UvfCK6JaNK4s0JWs8ZJm4cziKRS6/XaHWnvdyiJnx
sFsKvpdeyRrhgw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:22 2025 by rpki-client