Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
File:                     JoLIFvcmhv967eU1OGGMwuiGEDk.mft (raw, json)
Hash identifier:          FjePEBVCQ2z5dNupxSl3C+SmMGjz93sBiB0Nm9qHm4w=
Subject key identifier:   72:51:D9:C5:0E:CD:00:E9:E1:FE:2F:67:C6:96:F2:42:3C:46:15:53
Authority key identifier: 26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39
Certificate issuer:       /CN=2682c816f72686ff7aede53538618cc2e8861039
Certificate serial:       0198D65F267EB82416720C0D4FA28B238687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
Manifest number:          10E9
Signing time:             Sat 23 Aug 2025 10:00:16 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:16 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:16 +0000
Files and hashes:         1: DS8Rbt69Y278qge_4Hmc5o4yuwU.roa (hash: tTLyP2JhBCp2p2WsUyjl7JOVm5G5UBP2M/82U2+yJ6c=)
                          2: JoLIFvcmhv967eU1OGGMwuiGEDk.crl (hash: DlnbvPeORpP1nv6v6LO2dnF13X3LAmUwbgb2P3tp1qM=)
                          3: U8zXsGEWCBH4_8YcgXmHjVER-wA.roa (hash: QGCHO7XwYCcbkNmS/y1pKg7c9YRHZM93ZZOJP0WiYK0=)
                          4: rzDuEXo0h15tN1onQfvdfKOerNI.roa (hash: Rm0BFvhI+es2ozBderkrcSg2LqNFRQ+VOueKD9tKZoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:26:7e:b8:24:16:72:0c:0d:4f:a2:8b:23:86:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2682c816f72686ff7aede53538618cc2e8861039
        Validity
            Not Before: Aug 23 10:00:16 2025 GMT
            Not After : Aug 24 10:00:16 2025 GMT
        Subject: CN=7251d9c50ecd00e9e1fe2f67c696f2423c461553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:9b:24:75:d7:01:b2:c8:d2:39:be:d2:cf:
                    43:17:64:14:26:47:40:a6:ea:b1:df:cf:fb:85:99:
                    35:93:cb:2b:de:ac:5b:20:31:29:88:af:ef:27:7d:
                    c7:8a:e6:53:b8:b2:c0:c2:d4:36:3e:bd:7c:23:f3:
                    9d:71:f8:1a:55:ef:ff:5d:92:3a:e9:a7:15:47:39:
                    3e:66:19:9d:40:48:76:c7:97:fd:d6:9f:5d:60:78:
                    f6:88:11:b3:e4:ab:c8:24:d0:1e:58:4a:c3:6b:cc:
                    49:3d:1c:34:3d:4b:b5:d1:d8:79:8e:86:56:44:45:
                    e1:fa:d1:12:66:1e:b1:1c:d3:6f:f5:3a:d6:86:aa:
                    43:56:8d:1c:63:02:15:5a:9f:62:34:79:8b:48:e2:
                    91:44:7e:80:fd:12:f4:42:47:13:99:27:d7:09:31:
                    93:4f:8b:72:29:a1:50:69:af:20:6b:ad:8f:06:6b:
                    d4:16:65:52:27:ab:31:af:18:af:76:b7:cf:e8:f5:
                    c8:ad:1b:8f:50:52:24:ab:78:c8:92:52:d6:9e:0a:
                    24:85:29:de:7e:f1:27:f9:60:da:44:72:96:b6:5b:
                    15:fb:61:df:9a:f0:df:d9:43:ec:63:8c:fe:5a:f4:
                    2a:e1:13:2e:19:ba:2c:c7:99:d8:15:e4:92:b2:ad:
                    66:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:D9:C5:0E:CD:00:E9:E1:FE:2F:67:C6:96:F2:42:3C:46:15:53
            X509v3 Authority Key Identifier:
                keyid:26:82:C8:16:F7:26:86:FF:7A:ED:E5:35:38:61:8C:C2:E8:86:10:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoLIFvcmhv967eU1OGGMwuiGEDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a00090-6663-46a1-a5fb-661e8fe3c1e9/1/JoLIFvcmhv967eU1OGGMwuiGEDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3d:b5:56:70:b7:3a:9f:1b:a0:bc:59:e9:b2:5c:34:0d:89:
         c4:e8:8e:0a:f2:df:4b:a8:c4:ab:9d:f8:7d:ed:4b:24:d5:23:
         a7:49:74:3d:0c:f0:c4:e1:1e:59:54:de:e3:e8:97:c7:a0:e9:
         ee:d4:7f:dc:f4:16:3b:c9:bb:43:07:cb:79:22:6e:75:d3:b9:
         54:00:dd:3c:1e:dd:7c:4a:60:1c:45:f8:66:04:41:a4:55:ce:
         70:0d:f1:47:73:5a:b1:0b:72:e1:5d:05:8f:6c:57:64:cd:1c:
         9c:11:7e:ed:6a:ec:82:4d:93:31:29:52:3b:cd:15:51:ec:71:
         51:d8:f1:51:82:9f:14:d6:b0:8a:b5:08:ec:94:ad:2b:49:7b:
         3a:a5:3a:43:ad:8f:a3:ec:c7:3f:cb:a4:ff:54:ba:26:86:b6:
         06:4c:ee:7d:c1:85:b0:15:66:f8:73:39:ef:f1:fd:04:17:e3:
         63:4f:3f:fd:71:45:29:6b:4a:14:7e:4a:4d:84:e1:a1:ee:3a:
         b0:ae:76:1a:0c:5c:e2:44:d8:ee:4d:64:04:9a:5c:49:30:11:
         49:87:15:52:1a:df:30:3d:fe:18:83:82:6a:52:3d:a2:2b:54:
         df:32:b8:9f:4e:db:dc:2f:17:2d:18:87:3e:95:0f:9f:66:da:
         f8:4d:95:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:59 2025 by rpki-client