Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
File:                     J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft (raw, json)
Hash identifier:          YrXletrpschHVp/xgJdVGNkSAYRhbJ3mXhJxjDmqtlc=
Subject key identifier:   62:2A:E4:CE:F2:30:86:C6:15:2D:A5:8C:94:D3:5F:45:01:F9:3F:01
Authority key identifier: 27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E
Certificate issuer:       /CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
Certificate serial:       0199FBEB001DFD02D1E730538AE500D23117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
Manifest number:          13C0
Signing time:             Sun 19 Oct 2025 10:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:46 +0000
Files and hashes:         1: J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl (hash: btOD5hoI6qepSCjVxEEBwCnZSaHk0/J34e/UzVUhbCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:00:1d:fd:02:d1:e7:30:53:8a:e5:00:d2:31:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
        Validity
            Not Before: Oct 19 10:01:46 2025 GMT
            Not After : Oct 20 10:01:46 2025 GMT
        Subject: CN=622ae4cef23086c6152da58c94d35f4501f93f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:84:c1:19:65:e2:ef:d5:14:dd:3a:10:cc:
                    e5:37:c2:03:3c:de:1c:47:44:f8:04:57:cd:89:38:
                    31:d3:3c:33:0b:e8:55:bc:8c:da:30:b8:65:0d:04:
                    d6:d0:bb:f0:05:71:46:94:8f:15:c1:e1:52:7f:a3:
                    c0:12:6e:84:14:15:4b:11:25:cd:6f:00:04:a3:b1:
                    9c:2e:b3:2b:2a:1d:56:91:6a:46:53:6b:03:99:19:
                    90:28:1a:6e:43:ed:5d:ca:a1:63:d8:65:51:d1:40:
                    f4:6f:7a:d0:ec:14:36:68:5b:51:c2:aa:af:68:18:
                    89:c8:51:67:03:51:14:81:10:7a:ab:98:f9:08:ee:
                    1b:e1:e5:b6:9c:25:a8:0b:8c:44:c0:04:7f:1c:5f:
                    44:a5:de:85:80:a6:75:39:18:61:2a:97:f0:1b:f2:
                    13:2c:1f:17:05:50:3b:4a:68:bd:08:1d:40:88:fe:
                    83:72:59:79:bc:e4:e0:a7:6b:ef:c6:d8:5c:8a:86:
                    2f:ac:f5:2c:20:db:30:b3:d9:4e:45:a9:92:0b:3c:
                    76:a8:a1:11:e2:e3:d4:03:7c:88:c6:ad:a1:9e:3d:
                    a7:00:fa:b0:e6:da:5d:47:c5:ac:9b:8d:83:3c:9d:
                    be:e5:74:13:47:5b:93:01:9d:8b:80:54:b5:7c:d3:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2A:E4:CE:F2:30:86:C6:15:2D:A5:8C:94:D3:5F:45:01:F9:3F:01
            X509v3 Authority Key Identifier:
                keyid:27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2d:3c:95:b2:1e:84:53:04:a2:b6:c7:49:e6:f2:cf:37:11:
         ba:51:39:be:a4:91:53:e5:c0:bb:c7:04:27:a7:1b:47:f3:af:
         ec:aa:50:26:1e:2b:f6:b5:65:a5:83:fb:0f:76:2c:5c:ea:34:
         40:fe:9f:25:f4:b9:8a:a8:c1:e9:bb:b3:0f:8b:d8:3b:2f:c1:
         fe:ed:f1:53:81:38:48:2d:cd:21:b8:3f:5f:65:4a:ee:ed:61:
         7e:aa:f2:1f:fe:0d:b4:b0:83:17:48:b3:08:cf:c1:1f:32:07:
         94:19:ea:86:ec:45:da:a3:27:ec:30:86:3f:d0:49:8b:dc:70:
         a8:fe:9b:78:5b:3b:01:bb:07:25:f3:2d:bc:02:29:87:26:e0:
         1d:45:c7:b6:a2:d9:fe:80:21:c9:5c:03:59:30:61:09:d7:55:
         6f:6c:ad:d5:16:1f:f6:ad:61:58:03:64:3a:f3:ba:2e:d2:19:
         12:2e:95:90:19:91:40:e6:0a:86:ee:c8:0e:fb:bc:6e:cf:9c:
         eb:3d:c4:b8:51:cf:20:0b:51:d5:ed:d9:14:25:07:03:95:b8:
         aa:36:9d:b6:8d:60:a0:7b:24:ad:5a:34:11:59:e9:03:91:f3:
         71:fd:7c:6a:53:57:33:55:9e:99:f9:98:43:bf:71:e0:11:89:
         6f:50:45:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76wAd/QLR5zBTiuUA0jEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZjQ4Yzg1YTQyYjAwYjM5ZDE4MDNlNjNjOWZkNWFkZWJm
N2Y5NWUwHhcNMjUxMDE5MTAwMTQ2WhcNMjUxMDIwMTAwMTQ2WjAzMTEwLwYDVQQD
Eyg2MjJhZTRjZWYyMzA4NmM2MTUyZGE1OGM5NGQzNWY0NTAxZjkzZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5SEwRll4u/VFN06EMzlN8IDPN4c
R0T4BFfNiTgx0zwzC+hVvIzaMLhlDQTW0LvwBXFGlI8VweFSf6PAEm6EFBVLESXN
bwAEo7GcLrMrKh1WkWpGU2sDmRmQKBpuQ+1dyqFj2GVR0UD0b3rQ7BQ2aFtRwqqv
aBiJyFFnA1EUgRB6q5j5CO4b4eW2nCWoC4xEwAR/HF9Epd6FgKZ1ORhhKpfwG/IT
LB8XBVA7Smi9CB1AiP6Dcll5vOTgp2vvxthcioYvrPUsINsws9lORamSCzx2qKER
4uPUA3yIxq2hnj2nAPqw5tpdR8Wsm42DPJ2+5XQTR1uTAZ2LgFS1fNPFFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIq5M7yMIbGFS2ljJTTX0UB+T8BMB8GA1UdIwQY
MBaAFCf0jIWkKwCznRgD5jyf1a3r9/leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9TTWhhUXJBTE9kR0FQbVBKX1ZyZXYzLVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDRiMjQtOWI1OC00ZTNjLWE1MTUt
ZTMyNTYyMWU4NmRkLzEvSl9TTWhhUXJBTE9kR0FQbVBKX1ZyZXYzLVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZDRiMjQtOWI1OC00ZTNjLWE1MTUtZTMyNTYyMWU4NmRk
LzEvSl9TTWhhUXJBTE9kR0FQbVBKX1ZyZXYzLVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWS08lbIe
hFMEorbHSebyzzcRulE5vqSRU+XAu8cEJ6cbR/Ov7KpQJh4r9rVlpYP7D3YsXOo0
QP6fJfS5iqjB6buzD4vYOy/B/u3xU4E4SC3NIbg/X2VK7u1hfqryH/4NtLCDF0iz
CM/BHzIHlBnqhuxF2qMn7DCGP9BJi9xwqP6beFs7AbsHJfMtvAIphybgHUXHtqLZ
/oAhyVwDWTBhCddVb2yt1RYf9q1hWANkOvO6LtIZEi6VkBmRQOYKhu7IDvu8bs+c
6z3EuFHPIAtR1e3ZFCUHA5W4qjadto1goHskrVo0EVnpA5Hzcf18alNXM1WemfmY
Q79x4BGJb1BF5w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:32 2025 by rpki-client