Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
File:                     JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json)
Hash identifier:          NAiSZGWfWJttMbpKminX6PWLUTpxKDpmKKCGS/zxbNY=
Subject key identifier:   5A:83:35:AB:75:72:BE:37:CE:8E:51:77:5D:35:A0:BD:C8:7A:BE:25
Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
Certificate issuer:       /CN=25717849a69ad8df87088da658b2305b8594c8c4
Certificate serial:       0199FC8FBBF6D18E9681A1C2D43F850EA95B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
Manifest number:          10FF
Signing time:             Sun 19 Oct 2025 13:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:42 +0000
Files and hashes:         1: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: W6RuA9kwz78a5sbwsVkzJMKgLbLtqH9O8EInk2ntLTY=)
                          2: lBGL9p4jnzQMYNOwvgWWIRMR64U.roa (hash: 3FeAIvuJzpUiBU31icxKTzpDUG89bC33mLCDCqaCBw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:bb:f6:d1:8e:96:81:a1:c2:d4:3f:85:0e:a9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4
        Validity
            Not Before: Oct 19 13:01:42 2025 GMT
            Not After : Oct 20 13:01:42 2025 GMT
        Subject: CN=5a8335ab7572be37ce8e51775d35a0bdc87abe25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:45:9b:9d:41:66:05:f4:25:9d:c6:f1:d8:
                    24:f3:a6:c0:41:f9:83:8f:16:d3:93:b4:c7:fa:7e:
                    0b:02:d0:09:14:5a:70:37:29:10:71:fa:e9:90:8a:
                    21:15:29:e0:a6:03:47:04:ff:b3:3e:20:52:bd:98:
                    bd:7e:3d:8a:44:3c:8f:e1:b8:c9:aa:de:8a:cf:53:
                    f3:4e:a8:d2:13:d7:93:6e:97:f2:0b:c3:e9:04:1f:
                    cd:89:26:7f:87:88:01:d1:36:5b:e5:be:3c:d8:af:
                    b6:d8:5e:51:fb:f6:0c:c3:60:fa:d2:15:94:9a:fd:
                    23:f4:f5:70:72:7f:fc:e1:e4:22:db:5d:c3:78:52:
                    a1:2a:ff:21:8d:dc:4b:3d:11:1a:62:b2:b1:c5:62:
                    06:cc:2c:d6:56:ad:be:cd:f6:b8:33:e9:93:f2:03:
                    7f:26:e8:0e:a9:94:3a:89:67:dc:93:97:08:45:c9:
                    cb:39:10:22:71:f0:93:fc:73:01:1e:b5:91:39:47:
                    11:59:f4:a4:5d:cc:a1:ad:33:35:51:23:6e:37:71:
                    67:d8:78:cc:9c:b3:83:fc:12:ab:79:1d:47:21:8b:
                    7f:5e:21:d3:a5:16:de:59:9f:55:c4:d4:aa:56:3b:
                    7f:da:95:ce:b4:4a:6c:61:cd:ee:20:3d:46:3c:1d:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:83:35:AB:75:72:BE:37:CE:8E:51:77:5D:35:A0:BD:C8:7A:BE:25
            X509v3 Authority Key Identifier:
                keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bc:cc:f6:5e:8c:48:9e:e0:33:5c:4b:6c:0e:b3:8c:fb:5d:
         14:de:70:b8:63:fd:38:70:75:82:70:03:a3:ce:c1:e8:60:b5:
         d4:b9:28:07:e8:5a:e1:cb:57:3e:c2:91:24:86:e8:16:aa:d3:
         ef:fd:a9:77:f2:fe:73:dc:40:61:72:fa:e9:33:c5:c3:9a:82:
         25:92:c4:59:eb:65:45:ce:02:4e:9b:70:ff:43:04:94:b2:16:
         7f:ce:32:d6:7e:60:ff:59:de:62:7d:8a:4f:ea:a3:28:48:e8:
         e0:d3:7f:43:1b:10:bc:25:cb:da:e8:fd:5c:57:bb:a1:78:9f:
         98:c1:f2:99:11:45:71:b6:9e:0a:65:0b:76:a0:a7:72:77:ea:
         be:25:0a:ab:9f:30:81:7f:54:ef:e8:2b:24:a5:c0:4f:7c:0e:
         a8:eb:03:e8:ae:3d:ea:f6:8b:3d:38:2e:4d:3b:c8:a5:30:7f:
         81:9a:ed:a9:5c:6b:b3:fa:ba:3f:79:43:df:66:c9:1b:72:94:
         1c:77:57:9e:9d:cf:9f:fa:bd:9a:e8:c7:75:ca:9e:ee:ad:cb:
         1d:0e:9f:25:91:4a:cd:9d:f6:7c:af:ed:d6:d3:59:ad:4b:d1:
         3e:ef:ea:f1:01:ab:4a:48:d6:0a:ad:f8:ee:fd:be:a4:ff:fc:
         5a:16:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:45 2025 by rpki-client