Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File:                     jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier:          HZtBCtcldmgjqlIDIwbaXPdV4LkelWueZB0JIogJWqs=
Subject key identifier:   DE:20:FC:40:4C:00:62:23:32:05:23:28:60:0A:01:37:42:E7:44:07
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer:       /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial:       0199FC58DD01B65E84DD4C611CDBBD25A81A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number:          09A3
Signing time:             Sun 19 Oct 2025 12:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:46 +0000
Files and hashes:         1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
                          2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: iNYXoKUOt8DeGkQ1tNAvEr90NuszV5FHZbsEChmVBT0=)
                          3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:dd:01:b6:5e:84:dd:4c:61:1c:db:bd:25:a8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
        Validity
            Not Before: Oct 19 12:01:46 2025 GMT
            Not After : Oct 20 12:01:46 2025 GMT
        Subject: CN=de20fc404c00622332052328600a013742e74407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ad:9d:e7:eb:08:66:7d:5c:36:b6:b7:20:64:
                    e8:c3:f1:eb:4a:dd:b0:47:1f:fe:08:e9:39:ea:9f:
                    f1:0a:24:73:69:97:9d:b4:b5:1e:d6:8c:ad:d1:d3:
                    98:c7:9a:14:e3:6e:a8:0b:d6:56:d6:cb:c1:1c:5a:
                    0b:84:16:da:30:ed:9a:a9:87:61:fa:23:53:18:28:
                    66:4b:cc:4e:bb:ba:a7:0c:76:80:9c:10:1a:5c:4f:
                    70:c9:58:ff:92:40:66:25:78:4c:00:8b:8f:cd:ff:
                    30:af:4e:3d:51:8f:57:d7:61:eb:7f:aa:67:20:82:
                    a7:08:a8:08:f4:9c:77:19:5b:86:65:ee:80:e5:eb:
                    59:c1:bb:07:53:06:3d:9a:4f:1d:dd:b4:e2:68:c5:
                    b3:b5:20:7b:11:39:39:0a:55:0b:65:f8:38:48:12:
                    f4:17:cc:fb:f8:13:36:dc:c6:b7:15:78:49:88:65:
                    c8:00:04:97:f5:f2:c0:d3:aa:f7:8f:26:20:17:2b:
                    8f:7a:76:1f:25:30:a2:fe:d6:ad:9f:82:73:cb:9c:
                    b0:c8:58:76:6f:36:72:6a:a1:d5:09:aa:67:28:ec:
                    cd:bd:5d:77:04:78:41:7b:50:09:06:ef:72:3f:bc:
                    55:4b:ec:ac:60:8b:c9:04:5b:80:97:a6:07:be:6e:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:20:FC:40:4C:00:62:23:32:05:23:28:60:0A:01:37:42:E7:44:07
            X509v3 Authority Key Identifier:
                keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:29:ee:c1:04:11:37:9c:00:28:01:ac:9c:65:59:80:71:d1:
         9c:92:4a:89:37:a3:48:9e:be:ea:99:5e:e5:60:63:51:cb:de:
         f0:65:25:39:1a:30:cf:b1:4a:ce:67:ce:cd:45:32:40:a4:bc:
         ce:8b:51:bf:ed:0a:01:69:ec:bf:d2:8a:60:95:05:dd:f4:b6:
         30:87:65:28:b0:f1:f9:d6:3a:ec:55:e6:9e:13:fa:9d:1f:39:
         40:4c:04:49:bd:1d:da:33:0a:2b:1f:b1:3d:05:ae:2c:c6:c1:
         6d:6e:f6:52:7f:2d:15:a6:37:86:21:37:f7:27:13:b6:46:7a:
         d9:78:8e:90:61:cd:c2:44:e5:42:30:98:f7:13:fa:23:d6:0a:
         06:e2:2c:86:fe:05:92:ec:2a:3a:9c:15:00:36:6d:80:c2:23:
         de:cd:e2:06:31:b0:0d:6a:1a:e3:71:00:30:7b:ff:ba:79:e7:
         3c:8e:8f:a0:29:71:f9:0f:75:67:ab:e0:f7:ca:56:33:ee:da:
         85:3f:87:36:ce:da:5d:37:8f:37:03:c9:66:24:e5:55:03:4c:
         1d:7d:71:ec:bc:93:c9:ad:15:8b:1b:d1:a3:bf:b4:2d:77:2b:
         10:26:a7:8d:cc:35:5a:b3:5d:fb:ef:e0:c9:b6:2d:a6:8a:77:
         a2:07:c9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:41 2025 by rpki-client