Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File:                     jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier:          FiX1wq7UmQahq1c7D/a0389OI8+6urxkJz7fI35K1cg=
Subject key identifier:   F7:D6:76:69:8D:4B:E8:C1:A0:81:B8:88:9F:C5:61:83:A0:8D:CD:88
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer:       /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial:       0199FBEB05E0B968FE9A9397892C5A72DA33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number:          1033
Signing time:             Sun 19 Oct 2025 10:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:47 +0000
Files and hashes:         1: IAhynHC3BeXQ5V6ipM00FrjrH7c.roa (hash: xUIuep5Mgj3+PGgYL02vof53aG5TJnfGHCNFQCcozjs=)
                          2: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: LPPox8LiNi6XWYPtCSQqr82TOBMLeUaKfCzyORWh8NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:05:e0:b9:68:fe:9a:93:97:89:2c:5a:72:da:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
        Validity
            Not Before: Oct 19 10:01:47 2025 GMT
            Not After : Oct 20 10:01:47 2025 GMT
        Subject: CN=f7d676698d4be8c1a081b8889fc56183a08dcd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:89:45:89:36:f3:dc:c9:f9:2b:d3:2c:c4:
                    6e:b9:85:96:bd:08:2c:05:20:aa:5f:5f:55:2a:06:
                    88:e5:1e:9e:91:e8:1b:d4:3c:c4:ac:91:9a:1c:0c:
                    d5:30:15:56:26:de:a0:40:bf:01:0f:91:69:da:4f:
                    9d:2f:c1:7a:30:c6:52:c5:d1:b6:23:3a:93:69:df:
                    85:2b:2f:67:7d:b3:5e:b0:dc:71:14:44:66:4a:c5:
                    b5:40:49:68:5c:2c:b6:0e:e7:80:c6:a4:97:0c:cf:
                    81:61:1a:2f:fd:21:de:c9:db:cc:ed:b7:52:c9:c1:
                    63:d3:aa:79:ab:28:15:71:bb:b1:6b:b3:0f:a8:70:
                    ab:97:08:b0:35:52:fc:a6:e3:68:70:3b:a2:87:3a:
                    d4:65:35:3f:c5:47:fe:ec:6b:22:2c:c3:68:fe:2a:
                    f0:7c:8d:17:a6:d6:cd:13:b9:bd:77:ae:2a:8c:fd:
                    5e:35:89:86:38:90:00:08:61:5a:e1:2b:6d:21:ce:
                    b0:dc:b6:cc:be:e7:0c:5e:1c:d2:9b:fb:55:a0:6f:
                    d5:d0:7b:6d:48:92:a0:ce:ff:16:f7:46:3a:8e:d6:
                    91:d2:59:66:c3:d9:b7:14:6c:cc:27:1e:12:db:91:
                    29:9d:93:91:ae:59:2d:08:80:71:46:f5:fd:59:4b:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D6:76:69:8D:4B:E8:C1:A0:81:B8:88:9F:C5:61:83:A0:8D:CD:88
            X509v3 Authority Key Identifier:
                keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:35:d4:51:04:8e:43:b6:72:33:15:90:e3:a0:7e:c2:da:03:
         7f:aa:43:b2:f8:c7:2e:9b:f3:fe:20:ce:55:93:4c:7d:36:f8:
         12:ac:55:53:9f:90:2c:55:06:fe:04:0e:72:c1:3a:53:c0:cb:
         40:0e:cd:bc:b7:fe:87:75:4b:ab:94:2b:c7:13:34:7d:94:4c:
         ab:d7:60:25:2d:f7:d5:3d:ec:8c:b6:8b:12:07:72:dc:e4:07:
         d8:d4:b1:c4:bf:f7:5a:d3:0e:e8:35:ac:b4:92:07:4f:37:b2:
         3d:48:24:ef:99:d3:9a:69:d5:f6:c2:6b:28:57:10:fd:a4:5a:
         96:08:5e:eb:ce:a2:74:a7:64:16:0c:fd:8e:e9:d9:16:b4:99:
         f0:80:eb:7d:08:29:18:9a:fa:3c:2b:a7:e0:37:14:5b:9f:3b:
         e4:4a:a0:bd:58:38:bf:d0:f4:56:78:9e:81:34:0c:0e:f2:d7:
         99:87:bb:0f:16:f0:94:be:dc:17:23:e9:c2:09:74:94:da:3c:
         ad:6c:68:47:69:fc:32:c7:76:21:22:0f:51:28:f8:c5:42:2d:
         18:9b:3d:73:d1:61:33:86:a3:cf:fc:be:c4:0c:72:ae:6b:98:
         31:82:56:62:8c:1a:3b:0f:47:8e:ec:1c:ed:d3:3b:53:f1:52:
         c8:5b:65:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:40 2025 by rpki-client