Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
File:                     J_g-VravdgCD61S7W24Z3bQd2Io.mft (raw, json)
Hash identifier:          v0nIs67TiO8TEN4UjZhoJWeEfGiFWFUPuM+WLZSUiDE=
Subject key identifier:   E2:3E:0E:7B:F5:BA:58:66:EC:68:1A:36:09:BB:F3:35:2E:B2:C9:2C
Authority key identifier: 27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
Certificate issuer:       /CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Certificate serial:       0199FBEBE6A604C068A38F2DADB4B51F190B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
Manifest number:          1333
Signing time:             Sun 19 Oct 2025 10:02:45 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:45 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:45 +0000
Files and hashes:         1: J_g-VravdgCD61S7W24Z3bQd2Io.crl (hash: 7IKfd2IDmKScfAISEbDNLx4EsUwEvf3lG3JsbVPChlA=)
                          2: tqiyhAwG9vZGTuCBcB3Ep8Bsk0k.roa (hash: ViHxSsFsnpASXarlQUAHnVHJN7UM7cJ/sEWxYKdVpew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:e6:a6:04:c0:68:a3:8f:2d:ad:b4:b5:1f:19:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
        Validity
            Not Before: Oct 19 10:02:45 2025 GMT
            Not After : Oct 20 10:02:45 2025 GMT
        Subject: CN=e23e0e7bf5ba5866ec681a3609bbf3352eb2c92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:b4:1a:57:ee:cb:c5:04:bb:c0:87:4b:9b:
                    1c:2c:a4:7c:b8:7b:31:e4:99:bc:ed:01:d8:2f:ef:
                    48:91:56:22:9c:54:ea:2d:73:2c:9c:26:a4:c4:70:
                    2b:c5:7a:67:79:32:41:05:7c:b9:dc:61:ae:e7:22:
                    48:c5:39:04:53:64:d5:5b:14:6e:11:e1:53:10:1c:
                    cd:1c:68:e6:97:dc:92:06:16:3b:c7:e1:71:7f:a0:
                    4e:69:aa:ef:43:7f:05:e8:4e:2f:8a:6f:9b:21:8a:
                    e0:e4:40:fa:97:98:24:20:70:fb:49:b4:d1:27:89:
                    b5:28:1d:d3:ae:aa:36:a4:0f:bf:3e:57:02:de:49:
                    e8:64:fa:c6:d4:4c:5d:1c:ea:b3:12:ed:1d:88:72:
                    e4:84:d8:1e:1c:04:b3:e1:f1:13:38:bf:40:16:af:
                    c6:e9:96:07:5c:1b:61:50:9d:48:8d:0d:9a:c1:d2:
                    64:98:95:85:c1:dc:f0:4f:77:2b:bd:ac:9a:da:eb:
                    e8:81:a8:bc:ad:5f:db:20:7a:ce:30:83:3d:f1:3e:
                    6e:bb:f2:96:a8:0a:7f:7b:26:8b:5b:bb:8f:49:ac:
                    d5:6c:17:ba:6d:dc:57:03:b3:b8:17:91:7e:33:fb:
                    b4:b3:57:72:b9:e9:18:8d:dc:e7:94:6f:53:9d:b9:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3E:0E:7B:F5:BA:58:66:EC:68:1A:36:09:BB:F3:35:2E:B2:C9:2C
            X509v3 Authority Key Identifier:
                keyid:27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d5:ec:43:4b:26:ab:12:d9:c5:db:6b:a4:6d:a0:a2:90:44:
         96:d0:93:cb:dd:4f:e8:cf:ae:82:62:5d:cb:51:6d:94:51:48:
         f2:c7:65:f9:d6:44:7f:c2:38:df:ac:40:6f:56:2e:4f:0e:53:
         3b:b9:32:6d:47:40:59:a4:99:05:cf:c8:59:37:bc:21:ca:4a:
         97:4b:58:99:eb:86:58:24:ea:75:cd:04:74:f5:9b:51:18:ba:
         0b:05:9a:17:9f:76:45:15:2b:bd:33:d7:9f:26:1c:ec:67:0e:
         26:57:0a:34:6f:68:ca:96:62:7e:3a:9b:f3:57:57:cc:9e:3d:
         7b:60:b5:fe:01:ec:4a:1d:77:c2:26:31:a7:12:c8:c3:66:f5:
         95:bf:be:76:cf:68:55:4c:95:c9:96:8c:31:24:ec:33:a6:c8:
         d7:e0:fa:1f:12:e8:10:f0:82:85:b7:2d:5f:48:af:3a:8d:86:
         d1:77:7a:06:89:eb:42:14:36:79:32:f0:28:ab:46:d0:6a:67:
         59:6b:6b:88:56:df:82:ad:38:95:2b:8d:58:27:a2:49:04:ac:
         4f:88:f9:21:1e:02:13:8f:e6:10:0b:bf:ad:51:72:c5:c2:2b:
         23:7d:42:c1:4c:9e:f7:6e:fd:04:36:1c:e6:86:c4:d6:79:ad:
         9f:cb:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:44 2025 by rpki-client