Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
File:                     JxlBKRimYn-ZzOVcesoTkFe4V04.mft (raw, json)
Hash identifier:          immN5To5tzWzI+a4u3tEh7KrvIbnLsJA6GgJiyvTFe8=
Subject key identifier:   67:81:97:69:60:F4:D9:FB:CA:27:C6:26:64:60:B7:1A:05:0C:A8:D3
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Certificate issuer:       /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial:       0199FFC849AED7904D3ED7161492BD0B888D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
Manifest number:          0A34
Signing time:             Mon 20 Oct 2025 04:02:20 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:20 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:20 +0000
Files and hashes:         1: 0egOCEDjjfjwdPmizCh3Cu6NbrQ.roa (hash: RjxfFq3fmsFbepGKowirBDzmyu+RZ3fSC5NUINYgMYU=)
                          2: 7W85Tt0gwzhkJWxBWSICyLMHvBg.roa (hash: JppPMnJbiXzbpD/Pc6qWhNpXFo8/+nx6fCwzyRamuQY=)
                          3: 8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa (hash: 2qr0DY7SshfmBWBMPElwvi/+AJH/67rJ01N4KKU7q1A=)
                          4: BRryBhcZ86QRcNyyWRQXIrGL940.roa (hash: TpVPlst5x/81i653yEbzbStWflfy2GReIp1Tn60B8L0=)
                          5: C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa (hash: KoYq60161i4xpC6NqHZA/Q8w9Njte/PcskDc5lUbshM=)
                          6: EJQRhvTA9imPwclwVgQbFkh0JFE.roa (hash: wCSwu07TXrbn08zc7CmiqRRyHHovVOMjCdUBle99/a8=)
                          7: JxlBKRimYn-ZzOVcesoTkFe4V04.crl (hash: ktnY0Sk0YQPyGA2Bco+HFgQknBoCwD740Any0PEIYLM=)
                          8: XP9c9FnVM83t2BcVhUGYjki34JA.roa (hash: 9MjxmhRyp3W6rmd2o7KozYAfmVW00slDjc1CHV4YtKA=)
                          9: ZvwtxuslzfQmqhln4NrT0EB6by0.roa (hash: /zi0GX6AY/hjXoyJfHeafiIns7K/28qT/TjfHjhKvFY=)
                          10: i6AMMlCBL4mI8fXSClWLBTgrr2w.roa (hash: ibC1icVFA9nVxcZkqXGl9glghEao/S766jYYimUgQ+I=)
                          11: noewYl5P0rkhAPD3Zn8s9bc2_qs.roa (hash: h2zqiA+vL/GF8rvskPe0YPXeCInpKFuXr/zZvqUEJgg=)
                          12: xdpBEJQBaSWnLzQMJf9F6VWUv60.roa (hash: rjp7KwUwTuEzo3eXkAycybNSdAwl1wu4fvs5dmuagvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:49:ae:d7:90:4d:3e:d7:16:14:92:bd:0b:88:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
        Validity
            Not Before: Oct 20 04:02:20 2025 GMT
            Not After : Oct 21 04:02:20 2025 GMT
        Subject: CN=6781976960f4d9fbca27c6266460b71a050ca8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:86:25:a5:38:f6:10:50:a2:2d:ae:08:f3:
                    12:30:fb:1a:98:f6:d7:b9:c9:99:24:c3:27:ee:8e:
                    ff:44:ac:2b:18:86:c8:ec:94:d5:74:59:64:5d:71:
                    a9:5e:4a:68:da:c8:38:e0:71:bb:a8:73:d6:02:07:
                    af:a6:ad:9a:0a:b6:6c:12:96:89:48:00:ab:1c:43:
                    93:69:89:cd:d2:cd:9a:36:e8:0e:0e:2d:30:e9:15:
                    89:25:2c:f6:90:89:b8:0f:5a:62:0a:bc:eb:f6:85:
                    d0:09:23:7f:8b:17:3b:76:c6:d0:02:dd:81:57:ba:
                    05:60:fe:f6:b8:92:3b:d0:c6:94:c6:14:d8:fb:7b:
                    f6:25:b1:e8:e7:ad:16:50:31:72:c0:97:fb:69:0b:
                    ca:77:8e:37:a0:c6:0e:a8:6b:77:cb:ab:03:3f:01:
                    4a:16:2c:95:5f:93:d3:c8:be:e3:6a:c8:6c:7d:39:
                    0e:f2:13:c4:a6:84:83:ef:8a:52:77:d9:09:c8:44:
                    7e:29:df:67:9d:36:49:99:5d:0b:84:09:00:c4:4f:
                    6d:4a:70:0d:f0:c0:8c:43:7e:95:81:92:e9:94:8c:
                    e5:21:ad:3f:14:e4:7b:ec:2e:bf:fa:4d:55:cd:b7:
                    12:bd:74:a6:63:65:44:e1:4b:eb:4c:5b:0b:61:4b:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:81:97:69:60:F4:D9:FB:CA:27:C6:26:64:60:B7:1A:05:0C:A8:D3
            X509v3 Authority Key Identifier:
                keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c4:10:a9:be:74:02:8f:ee:62:ed:fe:f4:62:d0:9d:fc:9d:
         d0:32:2d:50:fa:83:e7:66:82:85:0a:0a:73:6b:c2:1c:8e:bc:
         f5:1d:92:c6:21:f9:95:af:f4:06:ca:d3:8a:09:4b:b0:62:e3:
         85:47:12:4a:f7:61:9d:ab:43:1a:ee:ec:d7:a2:6f:55:cc:59:
         cd:9e:8f:06:63:48:cf:ce:64:30:97:e5:32:92:68:b4:2f:3f:
         76:b4:10:44:c8:3b:54:49:40:be:80:6d:02:c7:fa:30:4d:8e:
         08:2e:c8:cf:3c:dd:e1:07:d9:2d:2a:7e:13:17:18:67:db:6f:
         4f:98:8d:a3:f0:48:25:14:ba:e9:3c:92:cb:50:24:2d:75:0d:
         90:de:08:dc:bd:2c:f2:97:40:52:98:56:7f:8a:d7:db:f4:59:
         17:b7:96:e4:94:fa:c8:71:8c:e7:94:b2:f3:a2:9d:fa:3d:fd:
         13:1a:7a:df:50:15:2c:42:5b:e7:2c:cd:c8:ae:aa:5b:6a:c0:
         74:91:ae:58:cf:37:56:00:a5:77:0c:51:00:5f:fb:b4:c8:4c:
         dd:63:1a:84:82:33:6f:75:b8:cb:07:7e:a8:fc:a5:09:81:02:
         8d:8e:76:29:3f:1e:39:a1:16:44:d7:eb:81:4b:7d:34:c5:67:
         54:9a:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:11 2025 by rpki-client