Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
File:                     jRvvcwUnquHs-PswhWWdb9_u15c.mft (raw, json)
Hash identifier:          WOyaNYdOcctIbo9ju6lLTAtXpGVH/xr3FDN93VAo9kU=
Subject key identifier:   E5:0C:A5:25:C8:FE:4D:3D:6D:9A:8B:6A:8E:92:CF:86:93:3F:F5:9F
Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
Certificate issuer:       /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Certificate serial:       0199FB7CC61C96F9DCD01273B3DC09F1C40A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
Manifest number:          0704
Signing time:             Sun 19 Oct 2025 08:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:22 +0000
Files and hashes:         1: WOkyiKZXyZb_JE15v4JPZZ7_uas.roa (hash: uCxh+/x66loEAoXJHeu6h1m3ZKFFNdiPZwnHjwWElmQ=)
                          2: jRvvcwUnquHs-PswhWWdb9_u15c.crl (hash: H5xsz4/w7dum/c0Z1hyd/UMd00nQbWd0rCV70/QIasw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:c6:1c:96:f9:dc:d0:12:73:b3:dc:09:f1:c4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
        Validity
            Not Before: Oct 19 08:01:22 2025 GMT
            Not After : Oct 20 08:01:22 2025 GMT
        Subject: CN=e50ca525c8fe4d3d6d9a8b6a8e92cf86933ff59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:16:fc:6a:49:00:1b:2c:09:37:73:d1:a6:
                    1f:aa:0a:d1:b3:05:a4:ec:73:f3:59:5c:c3:e7:46:
                    84:e1:78:e7:7d:b7:5e:e3:f6:3a:9f:a3:9b:6c:d7:
                    5a:87:9b:0b:4b:ae:1d:ce:8e:29:3d:87:7c:7b:3c:
                    bb:3c:b0:4e:d4:05:c5:00:22:29:90:69:7a:f5:47:
                    7e:cd:59:c7:21:b7:c6:57:16:7e:89:a7:c1:3f:df:
                    06:d7:a9:45:5b:9a:c5:78:d7:7a:a6:e4:a0:6b:6c:
                    f6:31:8e:e5:75:bd:4e:26:c6:11:18:c2:c2:a9:9d:
                    57:b3:6f:89:8b:28:82:2f:d0:b5:56:7e:f4:57:b6:
                    90:e7:2c:3e:ce:5b:85:2d:2e:b5:e8:6e:fc:1d:98:
                    6e:a0:32:f4:9d:58:ed:36:dc:83:b7:eb:99:eb:55:
                    aa:50:cb:b0:2f:73:df:28:b7:e2:44:fd:f2:d8:e8:
                    2f:f7:98:4c:2b:82:df:b0:be:41:cd:84:4c:6f:4f:
                    68:c7:13:d1:1b:8b:1a:b1:38:2c:ce:71:33:25:12:
                    ea:61:ec:6d:2f:6b:74:46:9f:36:ef:31:a2:d9:fa:
                    76:3e:e6:27:01:e5:53:6d:39:57:5f:99:83:36:4a:
                    e9:b9:92:ca:c3:0c:9f:71:5c:f4:d0:36:d5:c9:e8:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0C:A5:25:C8:FE:4D:3D:6D:9A:8B:6A:8E:92:CF:86:93:3F:F5:9F
            X509v3 Authority Key Identifier:
                keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:48:cc:7e:c4:12:5f:8e:c9:96:c7:4a:b1:f9:2a:26:19:29:
         df:17:66:9e:22:4b:12:5a:36:b8:c6:8b:ec:95:ae:1c:06:41:
         3c:02:98:33:c5:8a:8f:43:d6:c8:9f:e5:f3:13:4a:97:e1:5a:
         be:c0:5d:97:c7:1c:f6:b0:2d:27:2c:50:5b:ae:2b:bd:05:34:
         23:fd:39:75:89:03:84:27:3c:1b:e1:ec:93:27:95:d6:40:2a:
         09:fa:20:ca:d2:61:97:aa:6e:45:6f:30:c1:28:40:fc:71:4f:
         35:f8:8c:e6:9b:29:1b:6d:2b:7d:08:87:8b:f2:e7:95:30:3a:
         d7:6e:52:4b:4c:ed:c4:31:23:82:9e:cb:bd:1b:5b:22:ed:45:
         42:99:6e:f5:42:d7:bd:12:2d:36:b2:a9:4b:86:72:bb:9e:d3:
         4e:ee:3d:aa:14:9d:a7:4c:52:20:81:1f:44:de:3d:eb:e7:83:
         46:dc:eb:3e:89:1d:77:a5:99:ca:7f:c5:38:bc:eb:4d:2f:05:
         19:ed:ad:07:47:ab:c9:51:a5:33:84:13:84:e0:4e:d7:12:b6:
         53:02:76:f7:3e:fd:30:76:5f:5c:66:5f:35:73:9f:25:c1:c4:
         93:1d:7a:32:39:bb:98:f9:86:0b:c6:57:49:aa:bc:fd:4b:cc:
         e1:23:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:39 2025 by rpki-client