Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
File:                     J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json)
Hash identifier:          XqFnJOImDsRdQ3qNuJLhTSQ51BGo7JOApG7IKtcJG90=
Subject key identifier:   9A:37:47:5B:75:D5:93:CD:03:AC:45:03:C7:30:6D:75:83:8A:13:8D
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Certificate issuer:       /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial:       0199FDD8C012BAE9B8170C3BE592DBAE05C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
Manifest number:          0C43
Signing time:             Sun 19 Oct 2025 19:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:04 +0000
Files and hashes:         1: 3N9aZ8zTSdZQ6ZvfIiyQMbKeNPE.roa (hash: VzMo5OEH6WAO4xNi9N0ubLSFEAUrDTWn6IFMnfmYKL4=)
                          2: 4Q0OMlDeRzDSOzAw8LxkvQaDF7E.roa (hash: U7GjqbV2dOQXajvpmYRAMgZ0b0HIaEV5bZmn2apsyWk=)
                          3: BhUouDec_qIuL9ykpJ14UlZA-QM.roa (hash: 8yFW2hqVAr5xf6x8b1tEfXwA8rQJPiCbK72VY0EAl8E=)
                          4: GIpX64dJ6HZBn7pYOJNMhZ7z2Wk.roa (hash: PjZLxgP6snPECokGBM26BsZLn+FL8XwBYAL6/1qDHeI=)
                          5: IZdk74hSrnh74ZynVfW7EO53suI.roa (hash: 5Lf7wqH7b2uz1cEp7iE8xbZTzdwcRRNn/RAvAhVoRXw=)
                          6: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: SHQw1O78ae0EwBdn01ypLmHMny01dCwJ1JjxFb4GwWc=)
                          7: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=)
                          8: dGW1FU7WEhTZHuwZkZW6nRc7oyw.roa (hash: b3jMX68O+rKcLGgMZNQr4ecBhH3oDiVmJuYCs2ww/m4=)
                          9: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=)
                          10: sI3owle2SK5hDtoXgnXqvnb2Lig.roa (hash: h/A8g/6518BnZmSBn+Xa4u50/hcauxf7ASYtMTXTA3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:c0:12:ba:e9:b8:17:0c:3b:e5:92:db:ae:05:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
        Validity
            Not Before: Oct 19 19:01:04 2025 GMT
            Not After : Oct 20 19:01:04 2025 GMT
        Subject: CN=9a37475b75d593cd03ac4503c7306d75838a138d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:73:d2:96:ba:bb:05:95:9c:4e:78:5b:21:
                    19:53:89:e0:c1:0d:68:b9:eb:27:15:e4:a3:38:05:
                    6b:2c:ef:bb:78:41:45:d7:51:7d:29:74:ed:16:21:
                    6f:b8:85:d2:ce:7b:a2:67:b4:b2:bb:b5:58:a9:9d:
                    1e:8c:71:0e:34:ba:4d:e8:dd:2c:90:c6:a7:b6:73:
                    0c:0e:57:7f:39:17:97:d4:70:7a:cd:52:de:ca:73:
                    91:a2:7e:13:8f:52:b3:b0:6c:ae:11:75:50:ce:0b:
                    ef:e4:dd:eb:cb:08:c1:3c:db:45:99:8f:5e:3f:be:
                    35:16:70:90:85:00:3e:e8:e3:47:ff:f9:c9:67:98:
                    39:a6:e8:fa:ee:15:14:77:48:3c:8a:14:d1:d7:51:
                    03:42:da:87:45:e1:d5:8b:39:3e:19:8f:38:26:e6:
                    bd:2f:59:15:63:1e:48:ec:6d:1b:8b:0c:b2:4d:7f:
                    1a:60:fb:d0:0b:75:09:3c:5c:1e:b2:d5:7a:a4:5e:
                    12:e7:32:59:64:e9:7b:6c:fa:e2:0d:9a:02:92:51:
                    16:dd:64:f4:e4:58:21:36:3f:5a:42:82:6e:68:46:
                    c6:0a:d1:c1:e9:67:54:4e:bf:05:49:12:96:4a:94:
                    a4:7f:4b:81:5c:3e:77:7c:fd:4d:53:29:7d:f5:fa:
                    05:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:37:47:5B:75:D5:93:CD:03:AC:45:03:C7:30:6D:75:83:8A:13:8D
            X509v3 Authority Key Identifier:
                keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:64:83:c1:92:fe:eb:fc:1a:64:79:3c:b3:44:50:5b:4c:ec:
         28:c1:9e:2d:96:df:39:79:be:12:9f:28:d5:0d:75:19:15:b9:
         97:c5:3d:d9:62:9a:89:ff:58:7a:7f:a3:f8:70:5c:29:59:b1:
         14:37:09:b0:81:69:fd:1a:11:12:60:d4:4b:aa:f3:b7:b2:e1:
         92:26:4f:d7:a6:84:34:31:2f:5f:ff:36:de:d1:46:b2:42:17:
         ad:90:c2:81:e4:66:72:54:37:51:ac:7f:67:b4:9a:03:44:e6:
         f1:3b:86:6e:30:5a:c8:a4:a5:35:f7:48:76:51:ca:d7:05:6c:
         60:da:78:a7:ee:13:fe:c4:3a:17:ad:93:3c:38:61:74:f0:4f:
         2b:5d:9e:bf:fd:c3:94:d1:98:53:2b:b3:93:57:96:73:3e:d2:
         7d:9c:7b:33:a5:6b:2f:7b:ae:77:0e:a7:59:53:f3:ab:7d:3a:
         31:5c:ab:93:c6:69:96:9f:d5:4e:3a:4a:9b:d8:2c:aa:1f:aa:
         68:2c:7d:72:08:bd:b3:bd:3c:8e:7e:dc:c8:0f:8e:b4:3c:6d:
         45:53:d4:63:55:35:51:f1:ea:fd:d2:80:02:c2:e2:8f:8d:b4:
         29:52:50:54:48:db:11:17:75:77:d6:c3:c3:72:ed:ed:75:5d:
         9e:61:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:01 2025 by rpki-client