Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
File:                     JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json)
Hash identifier:          3sUKRifgUr3IDzACJBImqkm7f9SpkExMXMgoNAn4p7Q=
Subject key identifier:   70:98:16:93:AC:9F:42:8F:2D:6A:E2:93:B6:E4:F9:49:87:5A:1C:2E
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Certificate issuer:       /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial:       0198D698A9F465E27ECB102EC558D5B3C1A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
Manifest number:          12FB
Signing time:             Sat 23 Aug 2025 11:03:05 +0000
Manifest this update:     Sat 23 Aug 2025 11:03:05 +0000
Manifest next update:     Sun 24 Aug 2025 11:03:05 +0000
Files and hashes:         1: Cuo_4OmB5hqfWI_WnYCCpNWLrgY.roa (hash: 3ZR1eIgUuJPainUs4mhe9MePZiakCaM69xOhHdIrRiI=)
                          2: IzLkhR_yv-v1GWTNh9mHUxrH6l4.roa (hash: Gz5yahpviiaRhf/uooYdv+kvLqcJz9y4V27m2bP2qhQ=)
                          3: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: jdFXOxQCQGVkf4jJ9wCQMxWNuUWHpClKUza3mOE2fCE=)
                          4: LM4Pk0L89FT4bKCAnT5Pam60X3A.roa (hash: 15JH8Jc4TtNGcpNeD66bPIeSCBDAVTNv6bCkpCrYf1k=)
                          5: LzqzV901FJ7L-pE2io0JnQT7BO4.roa (hash: GQqWNE02zR7Pp1sxpXbJtIEQadxv84uYnIivoQsK42g=)
                          6: PSAVpGqbLcX36nvl195Ht9uZru0.roa (hash: zB4ZQEbAnrwd223bn2HnWhFXbaVVIUWcshlHHT8Vv9g=)
                          7: ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa (hash: MuaQpB8L7R2Qx8jUBzVEMelRet/5/uaTnFy0z9JGEOY=)
                          8: exSqcqToVirE26kLGdF-HPjamps.roa (hash: HQsC+Mewyu8X71olEoQS/oWx63H6y6cZFOsC8HgKsMc=)
                          9: juhHhfMZKtMv7VJHZvSyHbChAaI.roa (hash: TVL933SmsCckOHxjM78yEFmonP+viUg+iondjs0ZENY=)
                          10: wwkTxtvy8y_gre1LyntK82_wg2o.roa (hash: 06SNxlJKLopu/TY42bvthXJuhwNZOlr+SWZ0JQeMj5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:a9:f4:65:e2:7e:cb:10:2e:c5:58:d5:b3:c1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
        Validity
            Not Before: Aug 23 11:03:05 2025 GMT
            Not After : Aug 24 11:03:05 2025 GMT
        Subject: CN=70981693ac9f428f2d6ae293b6e4f949875a1c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:07:d7:8b:e4:95:d8:87:4b:46:72:f1:df:
                    30:51:1a:14:5f:a1:d1:47:73:d1:17:3f:21:e8:bc:
                    15:c9:66:8e:2d:ac:7f:04:34:30:65:3c:7c:64:3a:
                    f5:92:57:84:28:32:51:06:c2:65:12:f5:cc:c4:c8:
                    df:8d:80:ce:3f:bd:1d:65:11:c0:b4:4d:0f:0b:00:
                    91:74:9c:61:27:46:6b:50:77:ba:b9:77:67:39:ed:
                    fa:4e:16:d0:51:09:fe:58:30:01:61:68:aa:3b:5e:
                    e6:fd:91:d8:80:d2:68:12:4d:46:e2:53:3c:21:69:
                    ff:27:0c:70:aa:62:1a:ae:46:8a:84:65:bf:0d:2c:
                    79:de:23:a8:9f:73:2f:19:41:f6:65:c8:01:e4:25:
                    be:a4:78:25:96:bb:66:ea:b9:61:8b:b3:2b:48:a5:
                    0b:3d:83:c4:5d:ed:e4:54:1e:3a:78:7c:b6:8a:d9:
                    f4:5e:70:42:29:65:f1:b4:e6:a9:2b:e8:e5:8c:98:
                    6e:c2:0c:be:2a:0f:73:d5:b2:0b:92:cf:ca:f1:2e:
                    8e:d3:db:bf:5d:9a:c4:45:9f:7f:f1:fe:b6:08:f8:
                    76:53:8a:71:3b:7f:3f:f5:8c:5c:ca:d1:21:ed:37:
                    bd:cd:88:cd:ee:6f:60:80:3f:09:10:31:72:54:6d:
                    90:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:98:16:93:AC:9F:42:8F:2D:6A:E2:93:B6:E4:F9:49:87:5A:1C:2E
            X509v3 Authority Key Identifier:
                keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:af:fe:93:c6:19:c4:fa:86:df:ec:8c:ac:50:ff:b0:75:8d:
         2a:58:d4:c7:58:0c:14:9f:a3:c5:b3:1e:62:9d:62:12:c4:e6:
         24:c5:bc:5c:67:a3:ed:90:39:c4:61:2f:9a:77:c1:ff:74:ad:
         d5:28:33:36:62:55:59:24:21:9b:e2:94:39:75:14:eb:1e:f4:
         7e:a2:f2:98:9b:07:bf:2e:78:96:d1:1e:41:b9:0c:48:07:08:
         83:f2:39:c1:56:a8:5d:02:5a:20:5e:ce:d6:78:e5:f4:76:0c:
         cd:58:bb:f1:cc:d9:13:63:04:c0:31:b5:84:54:ef:99:76:dc:
         fb:13:a7:48:39:7f:4d:71:5f:11:c7:2d:0e:ba:75:67:74:8b:
         6d:19:7f:21:c4:92:12:62:49:9c:ce:6d:de:b3:ee:b6:ba:d6:
         0a:c6:9a:23:08:53:38:3b:63:f9:f4:4e:76:9f:b2:e3:f9:95:
         7a:e3:5a:ee:a4:a3:5c:e4:97:f1:10:35:73:36:70:6b:e4:ad:
         e4:bc:bd:45:99:29:b8:9f:b3:6c:8c:d8:1b:2c:c1:c1:8e:ab:
         d3:0e:ad:95:94:a9:60:78:68:db:89:1c:03:a0:7c:81:f1:b7:
         fc:29:99:6b:67:7d:71:bd:2c:8b:30:90:38:84:95:f3:86:cc:
         70:02:0b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:08 2025 by rpki-client