Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
File:                     jvzJdu-QODrOfwtOCeTYGe0Nm14.mft (raw, json)
Hash identifier:          m9BaUSaiRpmvwmhIxekwpkY/ee/SKof0MysJmGeN5IE=
Subject key identifier:   61:4B:55:2B:E6:45:C6:AE:5A:11:94:41:20:5C:30:C0:DA:75:59:1D
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Certificate issuer:       /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial:       0199FE7D7FF6FF1FFB882C7CC4E59C3AC6AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
Manifest number:          13CD
Signing time:             Sun 19 Oct 2025 22:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:01 +0000
Files and hashes:         1: iZWDIUILuFWunNVYaqJwiBg2ZXU.roa (hash: BgNy6gZxNs+Fc3c2uaucV4KzH/PC8AB8rNSrrgEVedo=)
                          2: jvzJdu-QODrOfwtOCeTYGe0Nm14.crl (hash: LYLL1+uMBWI/TKAIRXBB1b3yZVTZhf/HV+16NOk7MiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:7f:f6:ff:1f:fb:88:2c:7c:c4:e5:9c:3a:c6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
        Validity
            Not Before: Oct 19 22:01:01 2025 GMT
            Not After : Oct 20 22:01:01 2025 GMT
        Subject: CN=614b552be645c6ae5a119441205c30c0da75591d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:f9:a7:61:6d:0f:ce:ff:69:dd:89:4f:44:
                    14:41:98:25:fa:d9:43:03:5a:9b:68:09:6b:9b:6d:
                    88:01:c8:a6:b8:50:2e:a1:b4:e6:30:27:7b:f2:02:
                    ba:26:06:70:74:a9:d9:6b:6b:10:51:5d:b1:45:12:
                    01:da:16:c0:7b:70:93:e5:45:f2:12:e4:ad:88:7d:
                    a2:e0:6a:a8:f8:ee:d5:57:67:f2:7c:a0:e8:c2:30:
                    1c:55:bb:75:6b:2f:f1:58:26:b7:6d:c0:ee:e6:da:
                    ee:d0:e8:41:56:85:e8:b1:ce:4e:7f:21:bd:39:4d:
                    de:be:82:55:6a:2b:5b:37:74:d3:eb:5a:c9:08:59:
                    a1:8b:74:52:d6:2a:f0:dd:3a:d2:14:dc:14:95:93:
                    34:69:83:f3:1f:b6:63:48:a1:b6:1c:2e:6b:3d:cf:
                    78:90:e2:47:89:7c:f4:ae:6a:b1:b0:ef:02:f0:36:
                    cc:80:3a:70:0e:a3:af:89:1e:9e:b6:74:70:64:b0:
                    8a:a3:b2:15:cd:9e:db:9e:25:9f:7e:91:9d:ff:bd:
                    61:29:fc:07:64:9f:30:22:58:c5:13:88:a8:50:db:
                    15:a2:f6:ff:29:22:30:fa:57:8f:03:d1:f6:ad:92:
                    de:98:a0:58:ba:d2:25:30:77:19:3a:6b:2e:f2:05:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4B:55:2B:E6:45:C6:AE:5A:11:94:41:20:5C:30:C0:DA:75:59:1D
            X509v3 Authority Key Identifier:
                keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:15:bb:0b:37:16:79:84:a4:6a:3e:0e:f8:2f:ac:d1:c3:ce:
         c1:21:be:7e:92:e3:21:2f:f3:7d:dd:91:b3:83:f4:57:34:64:
         79:23:f6:12:c8:7a:0d:31:a7:07:ff:ba:6c:08:5f:e7:3b:77:
         4e:89:02:9e:7a:f2:51:f8:30:ea:37:6a:60:c9:86:82:71:60:
         7d:de:f8:03:aa:c7:1c:1a:4c:b1:19:50:58:1d:ea:7b:c7:12:
         5e:83:af:63:ca:b7:2b:c9:0f:7f:2a:1f:10:32:0b:f4:41:34:
         82:59:89:82:ea:f1:fb:8f:59:2a:cc:b7:b2:cd:94:f2:d1:14:
         e5:c3:ea:fb:f2:68:d3:e6:50:7a:e1:22:92:a2:dc:37:ed:5b:
         09:e8:6a:c3:c7:6c:92:e6:a3:57:16:83:e0:43:4a:ec:48:ee:
         dd:3c:75:66:25:b6:04:f4:14:89:e0:5f:5a:40:49:fc:a6:ca:
         d2:24:52:68:67:58:2a:d3:94:53:13:c2:33:3d:5c:57:d5:6f:
         04:c7:af:17:f0:1e:5e:07:77:d5:8c:b4:e0:9b:b1:f6:94:c6:
         14:33:7b:7f:2d:10:1a:3d:2b:6d:02:ae:10:6a:2c:bb:e3:da:
         12:16:c1:c5:a2:2f:8e:26:73:4a:18:d1:61:4e:e8:9a:43:db:
         51:63:1c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:33 2025 by rpki-client