Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File:                     J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier:          PZGxjLOcz54yxapIfOGSUOW40TQ17tULLGSEKidwHzA=
Subject key identifier:   1E:0F:10:7F:38:4F:1F:EB:BA:1C:1D:C7:59:41:95:82:68:08:D9:13
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer:       /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial:       0199FE1051762AAAD3F952B9D0FB10E33AAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number:          0EA1
Signing time:             Sun 19 Oct 2025 20:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:46 +0000
Files and hashes:         1: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (hash: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=)
                          2: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: VT0aCpmIdNHrYC+Irk1HFGi20xgpfzHOIRitHa8PzzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:51:76:2a:aa:d3:f9:52:b9:d0:fb:10:e3:3a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
        Validity
            Not Before: Oct 19 20:01:46 2025 GMT
            Not After : Oct 20 20:01:46 2025 GMT
        Subject: CN=1e0f107f384f1febba1c1dc7594195826808d913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:fc:f6:fc:c8:d4:19:ea:72:f0:93:b7:fa:
                    d0:41:cc:15:72:d1:b6:ee:b1:50:b8:5b:43:bf:d3:
                    b8:f9:ce:47:4c:65:b4:8b:9d:15:33:76:98:81:8e:
                    14:20:d7:71:83:d8:42:f7:cd:0c:ef:03:c3:52:e6:
                    d8:9c:2a:f5:a4:74:e5:46:4b:89:88:6a:aa:3b:41:
                    79:1e:8f:46:59:85:dc:ac:c7:0f:9e:af:12:32:ea:
                    50:ad:5f:c7:00:d1:ef:bb:f0:69:0c:e9:ec:7c:5e:
                    a0:f8:0c:7b:93:ec:f6:f5:e8:25:a2:54:2e:dd:eb:
                    13:dc:89:06:53:59:52:c6:6f:b5:75:95:d7:13:ec:
                    0c:72:64:0c:2f:df:8f:02:59:ea:97:c2:31:d6:1a:
                    cf:17:68:bd:17:0c:cf:40:d0:ab:14:7b:68:01:86:
                    c6:5b:e6:b9:a9:e0:61:2b:b5:6d:d5:dd:1c:92:6d:
                    66:10:57:cc:ac:73:6e:d7:c9:82:03:40:4c:8a:fd:
                    70:1d:44:5c:19:11:cd:21:10:ed:91:91:ec:d5:aa:
                    99:6d:5a:d7:af:33:89:21:29:5a:03:30:6e:25:3f:
                    c2:76:dc:bb:f5:d2:77:bd:ba:36:53:bc:4d:94:65:
                    f7:9a:f5:ad:14:fc:cd:35:43:27:d9:7d:9f:5c:0f:
                    b2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0F:10:7F:38:4F:1F:EB:BA:1C:1D:C7:59:41:95:82:68:08:D9:13
            X509v3 Authority Key Identifier:
                keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:05:76:eb:02:08:65:9b:2c:98:f9:78:89:dd:bb:db:08:bc:
         c2:ad:40:86:27:d9:a9:da:cc:5a:12:64:04:0a:26:e0:5c:d7:
         5a:0a:ed:82:de:10:cf:26:b4:b7:23:bf:55:fe:4c:8a:05:ff:
         67:c3:fd:72:a7:ca:00:97:f6:5a:56:f6:6d:07:a8:f9:eb:0e:
         12:82:82:5d:98:80:12:86:6b:72:97:7c:05:c0:8c:f7:ba:46:
         f8:6d:09:c3:dd:a1:6c:7d:d5:87:94:48:ea:c8:52:b5:da:9a:
         12:90:40:60:6b:7b:dd:37:46:11:06:0e:4b:ce:06:89:c0:41:
         5e:84:69:ab:14:a5:ae:d1:07:f4:af:7d:e1:4b:60:96:c7:89:
         cb:0b:6f:43:a8:8f:86:3d:54:00:83:59:57:66:7a:57:46:90:
         75:26:35:3c:ab:c9:e8:7d:38:0c:63:de:fd:e3:27:51:f5:06:
         09:0d:ca:88:c7:55:49:32:22:58:90:95:85:21:26:b8:25:01:
         32:73:fc:5f:bb:ee:2f:b3:fd:00:8d:d5:3c:84:b6:b7:0e:1a:
         7c:38:35:16:6e:65:99:90:00:ba:4e:1a:70:b1:99:0e:3b:cd:
         7e:38:66:69:92:0b:fe:44:48:41:2e:3b:58:2a:14:42:2a:af:
         a9:b2:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:55 2025 by rpki-client