Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
File:                     ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft (raw, json)
Hash identifier:          mp9RW42LnlLDqTBwKTt3Fm/n9pzd3CjGoJWqIJ4ntCg=
Subject key identifier:   93:5F:60:2E:A5:2D:3C:34:50:7E:A4:64:4F:87:6A:F7:3D:87:6D:30
Authority key identifier: 7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
Certificate issuer:       /CN=7a3f897117599fe839a9940e81a1788244caad06
Certificate serial:       0199FB7CFD8F6C3C8F34F1CB7C0EE3E3D441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
Manifest number:          0197
Signing time:             Sun 19 Oct 2025 08:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:36 +0000
Files and hashes:         1: ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl (hash: vicitVkZMrrM5e95ZEKOwfZPHbAJozzDh4SLUNTR01E=)
                          2: ml7ptFelR5O2ljd6S7JCFvTls6E.roa (hash: cO+LDJdHBbZdrBcqhhT12vaNmyrU4QVcTJjXWjJFtzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:fd:8f:6c:3c:8f:34:f1:cb:7c:0e:e3:e3:d4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3f897117599fe839a9940e81a1788244caad06
        Validity
            Not Before: Oct 19 08:01:36 2025 GMT
            Not After : Oct 20 08:01:36 2025 GMT
        Subject: CN=935f602ea52d3c34507ea4644f876af73d876d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6a:0d:01:dc:9c:36:7e:db:fb:62:95:be:41:
                    ed:4f:13:33:8a:d5:01:9c:7e:e9:d2:f8:61:5a:82:
                    48:2e:e0:c8:a8:0f:4b:9f:c0:c3:fb:e3:0d:3c:c6:
                    02:65:36:69:9d:96:b5:60:b9:11:8c:e8:2c:a3:25:
                    4b:91:75:02:34:f1:7a:d2:76:10:9d:f2:39:c9:d5:
                    0a:02:a6:68:45:da:af:b3:25:29:4e:b9:99:13:23:
                    29:fb:32:fc:68:33:2e:c5:62:2a:08:3e:c7:07:32:
                    e4:a9:5e:b8:76:e6:af:da:dd:bc:27:f3:e2:a6:59:
                    f7:f6:a6:98:48:29:85:64:76:bc:11:c1:7d:a7:18:
                    4c:b1:45:6e:28:94:a9:9d:84:99:df:28:87:3b:03:
                    e7:b1:35:1c:27:c6:80:1d:e5:fe:f9:42:a9:f3:c8:
                    52:f0:04:8a:02:33:1b:ec:f8:2c:13:ef:16:df:a2:
                    ab:3d:ed:49:86:b1:03:4c:06:f8:37:98:e6:7f:ac:
                    03:21:db:f7:aa:67:2e:26:ae:3e:36:05:27:05:17:
                    8d:ce:20:86:51:c0:81:58:33:df:c9:ef:e7:31:b5:
                    86:e4:58:a3:5d:6c:45:a4:39:52:ad:d2:e8:0b:f4:
                    3c:25:8c:43:e6:31:4b:fa:e1:78:46:76:2d:8e:75:
                    d2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5F:60:2E:A5:2D:3C:34:50:7E:A4:64:4F:87:6A:F7:3D:87:6D:30
            X509v3 Authority Key Identifier:
                keyid:7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f3:25:35:9e:87:4b:37:87:15:34:d8:6c:8e:cb:15:fe:d5:
         8f:9f:5b:f1:f0:c8:bb:31:f1:0f:f6:5e:9e:4e:b8:e1:b0:9e:
         4a:0d:d5:d7:5c:77:8e:d8:e3:e1:c8:a3:8d:b7:c0:78:4d:2a:
         e2:8e:a6:b2:8f:de:07:1b:b0:ae:80:fc:49:c7:44:aa:0f:cd:
         29:0e:28:0e:6c:18:22:3d:6c:20:50:ce:f5:7e:f6:e9:e6:4a:
         c3:df:bb:67:d0:95:7d:9a:e4:2a:2f:30:4b:2e:43:c3:e3:e8:
         a1:24:5e:dc:52:ea:3b:06:08:41:dd:6b:a3:c1:70:57:63:dd:
         6d:a4:94:c7:3c:9f:b8:45:11:38:7d:49:18:dc:27:84:51:30:
         1c:49:f7:56:3e:63:36:00:da:ad:80:0a:4d:11:ec:27:cd:51:
         54:38:2f:84:ee:62:bf:33:e2:2e:72:b4:60:9c:9e:66:f9:c6:
         e8:ee:93:2d:de:97:bc:b8:45:50:a6:93:4f:16:cd:75:38:14:
         84:53:0c:f0:13:a3:20:19:98:f8:67:8f:7b:59:c2:5e:4a:7e:
         a7:61:e2:3a:5f:50:12:88:f9:f9:5c:88:57:2f:66:14:c6:5a:
         e4:9f:f2:ff:e1:47:b4:db:c6:1e:e2:ef:1b:90:26:d8:de:40:
         91:2c:dd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:53 2025 by rpki-client