Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
File:                     JojvNz-PAOAcJc-SS08ujsaiGdE.mft (raw, json)
Hash identifier:          LcCK1AGu1hKq0MV1znOj1J0AKqQzVo2xuKxvGvR6r7o=
Subject key identifier:   E3:8F:4B:5F:8F:43:8F:45:02:15:81:02:73:A8:B2:A1:2E:E2:34:C6
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Certificate issuer:       /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial:       0198D65F61074AF294F9A3A2D88BB9DD9A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 10:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:31 +0000
Files and hashes:         1: 9QhEtvzl2xj1SVoQsDQ0WEDHjak.roa (hash: wwuZ4oEoEOc/Uq5HjzgRuotY259BWR4HTpXNj9bkQ/g=)
                          2: JojvNz-PAOAcJc-SS08ujsaiGdE.crl (hash: 6biYY6VFHf2SJn4iVO1CxmFUaA8vqQ9vUI/2wCQEknU=)
                          3: NLlq8DiYVFJMYAJlr9NHDav50Bs.roa (hash: 1feCq5rXN2U803Ez7sUO8zgEL070beNeKBUwCwKwE5Y=)
                          4: V9TCe7mXJBH58d-15AGeUYfc0cM.roa (hash: hoxc5Dur4oAZR+SCmAqnZb+/Hrq6+3AzAIRJJu/YQd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:61:07:4a:f2:94:f9:a3:a2:d8:8b:b9:dd:9a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
        Validity
            Not Before: Aug 23 10:00:31 2025 GMT
            Not After : Aug 24 10:00:31 2025 GMT
        Subject: CN=e38f4b5f8f438f450215810273a8b2a12ee234c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:49:cb:e2:ff:2f:63:4d:a5:91:fc:b4:3b:
                    1a:8e:70:c9:ef:ed:1b:04:e4:4a:a8:c3:56:ea:b6:
                    5e:60:80:52:6d:b2:0b:8f:a7:a1:09:7b:c0:15:b5:
                    02:ee:77:91:03:48:0e:54:bd:27:d1:9a:e7:9b:ce:
                    07:2d:95:ac:69:3b:ee:15:2b:4c:23:8c:11:17:50:
                    cb:7f:64:d8:be:f2:83:93:a0:2f:99:40:fa:9b:ad:
                    73:ea:d7:28:4c:02:91:e3:c4:38:26:76:9e:34:0c:
                    9f:b3:c2:c6:ad:b3:a1:75:c6:dc:8c:6c:22:b8:2f:
                    35:6c:f2:b3:83:89:e6:d5:a8:8f:af:3f:6f:29:15:
                    12:97:87:ce:2a:ec:8b:43:1e:63:55:cc:70:7a:2f:
                    e4:39:0a:fb:a9:a7:83:b4:bf:80:ca:dc:c9:7b:bb:
                    4f:8a:1f:9c:15:6d:2b:79:a5:f5:6c:da:5b:fa:20:
                    ec:0e:c7:4c:f9:c4:76:2d:17:f7:83:17:49:e4:b8:
                    38:fc:2d:18:27:55:9c:c2:a7:ab:42:9d:e0:dc:e8:
                    da:da:62:56:dc:b2:91:ce:a7:a3:21:5a:26:14:ed:
                    1a:96:f9:b4:d8:e4:35:23:96:de:b7:4a:c7:e3:92:
                    b5:32:a1:39:63:20:65:1f:85:e5:b2:c0:f5:9d:f0:
                    2c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8F:4B:5F:8F:43:8F:45:02:15:81:02:73:A8:B2:A1:2E:E2:34:C6
            X509v3 Authority Key Identifier:
                keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f0:6d:33:12:87:f2:ff:f7:af:40:36:b0:cc:76:dd:c7:8f:
         bb:28:59:1c:2e:32:57:98:a9:1c:b5:6f:d2:94:19:cc:33:66:
         7f:b3:89:64:3a:45:f2:7f:b6:6e:f1:5b:33:8d:76:12:b3:cc:
         69:62:b2:f4:33:3c:60:36:ee:40:f1:ba:07:61:74:fb:15:f7:
         89:dc:10:70:07:fd:14:b8:52:6e:be:94:2a:c7:e7:40:66:76:
         c4:02:46:55:61:d9:18:2d:5e:fe:3b:0f:5a:c8:1b:51:d7:7f:
         55:26:92:33:ec:ff:61:68:77:12:f7:1f:14:0f:8e:e5:bf:9a:
         30:7c:af:40:c9:3b:e1:a4:9c:b9:3d:a3:d0:88:62:56:9e:5e:
         68:29:83:ad:41:af:0f:f5:2d:f4:32:bc:c5:a1:ae:80:45:e4:
         fb:d0:33:1c:f2:e8:36:e7:09:89:df:a7:42:24:d8:25:86:d2:
         1d:45:5f:1f:df:a5:fc:fb:cd:5c:71:32:ec:03:04:6a:ac:51:
         4c:4e:54:c9:df:26:54:07:87:4c:ad:48:14:13:90:db:66:12:
         50:db:9d:0d:b2:9f:00:3c:39:f5:9d:cf:ec:cb:ec:a2:e5:0f:
         4b:33:c0:6d:97:f6:7e:37:6b:2f:ab:5a:5f:c4:ca:25:2b:2f:
         42:6f:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:52 2025 by rpki-client