Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File:                     JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier:          OxNHWw2oYxlU17/OOKDUBxv9C04omf0lCJEtljoc3zY=
Subject key identifier:   75:FD:0A:84:4D:33:77:9C:C7:44:63:55:B5:B8:F5:A5:95:31:25:22
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer:       /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial:       0199FC8F8AEFD68B65F358148465AA473F5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number:          0403
Signing time:             Sun 19 Oct 2025 13:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:29 +0000
Files and hashes:         1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: 5RW9SlDQuMuPfst7bv9fi+BLOxQbjIpS5vyc/ujosm8=)
                          2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:8a:ef:d6:8b:65:f3:58:14:84:65:aa:47:3f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
        Validity
            Not Before: Oct 19 13:01:29 2025 GMT
            Not After : Oct 20 13:01:29 2025 GMT
        Subject: CN=75fd0a844d33779cc7446355b5b8f5a595312522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:a9:b8:04:41:36:89:46:ce:a7:e6:67:f4:
                    5e:ce:f1:f2:b1:19:5e:23:0c:26:a4:6b:20:92:d4:
                    35:23:0f:50:a0:e3:8d:87:a4:b5:34:37:fd:b5:16:
                    46:8b:50:cb:5c:6d:ee:0c:f7:d2:3f:53:6f:ba:b4:
                    d4:96:4d:a0:37:03:df:30:6f:16:e7:0f:9d:02:4d:
                    89:c1:c8:81:3c:dc:9a:21:96:00:28:be:c6:46:8b:
                    63:a7:d1:d8:8a:49:6c:bb:e0:72:c1:80:43:29:e4:
                    8c:f6:99:e1:34:55:26:39:f3:93:fe:e9:08:5f:07:
                    46:1d:60:3c:57:cc:c4:71:09:23:12:61:17:1e:31:
                    2e:87:05:ca:63:fa:ba:8e:a9:e1:4e:b0:a8:1d:89:
                    01:a1:49:b6:12:eb:f1:cc:7f:fc:a9:73:71:ff:42:
                    3c:19:34:bd:34:12:c9:d9:0a:1a:76:ec:cf:93:70:
                    c9:35:91:cb:90:ff:ac:d8:6b:54:ac:a7:88:95:63:
                    13:63:64:4f:14:33:1b:6a:0e:97:43:3d:a8:db:a6:
                    f9:1f:a3:6d:ab:05:4e:69:71:3f:31:d2:b1:58:66:
                    ad:eb:5b:f3:31:b7:85:ff:c7:10:e6:6f:1a:0a:e3:
                    9a:8e:23:ff:d8:59:4d:59:ff:b0:ca:7c:d3:23:79:
                    6f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FD:0A:84:4D:33:77:9C:C7:44:63:55:B5:B8:F5:A5:95:31:25:22
            X509v3 Authority Key Identifier:
                keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e0:0c:72:40:e5:ec:c9:a8:d0:ce:87:a8:0f:df:16:f8:df:
         58:cb:ea:37:ad:59:46:b3:a2:f6:73:4a:a4:ac:99:39:c1:96:
         0e:8e:dd:10:ca:38:59:df:8c:47:ef:c3:1e:4b:12:6e:be:ee:
         f2:e5:06:9a:e6:40:b3:a8:4e:e1:33:09:7b:ed:7b:c3:94:e0:
         0a:f0:d3:c9:4e:6a:9a:b1:49:3b:32:08:f8:28:bc:f8:57:26:
         62:25:d2:41:f0:be:06:1a:d5:13:17:b3:62:82:80:5c:1b:e5:
         28:2f:51:bd:7f:0b:fc:23:fe:0e:4c:16:2e:71:34:31:bd:84:
         f8:80:bc:e1:31:dd:89:87:e4:ba:f7:9e:80:95:82:5a:a1:be:
         ab:cd:47:8b:ce:80:e6:9d:76:9f:ed:f4:4a:2a:56:fb:51:de:
         7a:85:dc:06:09:09:2a:1e:07:aa:ba:c4:c8:31:c8:f4:3b:29:
         0c:50:21:76:6b:7f:d6:ee:2e:e8:c0:25:9a:8d:cf:c7:5f:87:
         09:20:50:ac:8e:46:68:3f:da:c9:d9:e1:06:ce:c0:db:66:92:
         20:68:a2:e3:4e:d2:2c:ce:6f:ab:ed:2c:22:03:2d:0a:91:0f:
         b0:2d:2c:18:b6:12:11:3f:dc:75:e4:5e:d8:28:a7:4c:e2:07:
         30:ed:13:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:58 2025 by rpki-client