Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
File:                     J0iJxEELQxcvQcjBSuqJm7sq2r0.mft (raw, json)
Hash identifier:          xBp/ACVpS2rt597SW/jcsBG10sTXnvwnXb8YVGgWpBs=
Subject key identifier:   A5:3B:72:2E:85:3A:3A:03:98:D3:FA:0F:55:AD:54:90:29:38:E2:57
Authority key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
Certificate issuer:       /CN=274889c4410b43172f41c8c14aea899bbb2adabd
Certificate serial:       0199FD34852B571C6D43E51605A0FC43060C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
Manifest number:          0CD6
Signing time:             Sun 19 Oct 2025 16:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:41 +0000
Files and hashes:         1: J0iJxEELQxcvQcjBSuqJm7sq2r0.crl (hash: 0puDAixCM5+Sch3/GpLL92MVZ7FeQDDhkpQ9t89j4B8=)
                          2: gFEXxLFUU8a__opADc1vfw8jMw8.roa (hash: GCpDj9Bn6kn9jlHLv2Vqxyqzwpl4Us46FPPhGtO7UYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:85:2b:57:1c:6d:43:e5:16:05:a0:fc:43:06:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274889c4410b43172f41c8c14aea899bbb2adabd
        Validity
            Not Before: Oct 19 16:01:41 2025 GMT
            Not After : Oct 20 16:01:41 2025 GMT
        Subject: CN=a53b722e853a3a0398d3fa0f55ad54902938e257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:85:fe:d8:82:9b:6d:51:86:c9:18:11:fc:
                    6f:60:e7:96:64:fa:11:d8:b0:fe:f9:1c:19:ea:3f:
                    bb:4c:ba:fc:a3:fe:97:95:24:b6:d8:2b:39:a1:e3:
                    de:3a:5e:44:51:ef:42:8f:36:8c:6a:62:8f:27:e1:
                    cb:3b:c5:34:25:b5:e0:5d:49:7e:13:a0:25:42:4d:
                    26:42:f7:40:ca:e8:f6:5b:3b:6b:06:96:7f:40:e0:
                    b1:de:67:38:91:be:7b:d8:69:a8:e7:6b:b3:85:7f:
                    3c:f0:84:f8:19:ae:2f:94:6e:a0:79:98:b7:99:35:
                    54:d0:ee:60:d2:a0:d1:2b:d8:1d:2a:7a:b4:77:46:
                    ab:dc:86:85:8a:cd:ed:cd:b0:1d:c6:68:64:ea:5f:
                    64:10:b8:7d:c0:56:5d:bc:24:96:48:06:b6:5b:85:
                    d1:d6:29:cb:72:b3:93:65:d5:37:80:7e:3f:44:54:
                    0f:21:de:1c:1e:6f:77:6d:dd:09:a1:7e:63:bf:35:
                    8d:a4:db:80:11:20:f3:7b:06:a4:be:3b:b9:1d:61:
                    b9:8d:2c:ba:54:2a:86:0b:f2:56:a6:0c:37:b0:f4:
                    e9:5f:fa:3d:30:25:67:b1:2f:e8:5b:1f:5b:83:21:
                    eb:a4:db:c6:1f:3d:b6:0c:bd:7c:4f:1c:8e:de:41:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:72:2E:85:3A:3A:03:98:D3:FA:0F:55:AD:54:90:29:38:E2:57
            X509v3 Authority Key Identifier:
                keyid:27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:72:ea:3d:f0:60:ce:3b:c2:b2:df:bc:a7:a6:69:73:19:a8:
         8c:cf:49:f5:ee:36:6a:b9:4a:02:ba:07:15:90:0e:da:92:2b:
         bf:be:60:f6:b1:58:9e:ad:13:80:44:a3:0a:62:e9:58:85:e4:
         b1:4a:10:bb:0f:48:0d:6f:42:b9:80:8a:84:a0:24:b4:ab:a9:
         30:e9:3a:21:fa:0a:b5:9a:c9:9d:92:ba:5c:ab:d5:5d:99:99:
         a0:7f:4f:1c:8b:0d:60:a7:7e:aa:3d:21:c4:e0:6d:05:a7:0f:
         97:99:b5:26:47:73:fe:fc:4f:aa:7f:0e:47:7c:12:95:65:1f:
         30:8a:ec:c9:f7:d0:0a:04:28:b8:d1:41:ca:aa:a1:c5:03:fd:
         da:c3:dc:ad:80:3b:a3:3e:17:b6:b6:9c:33:a0:4b:a0:46:d3:
         02:0a:57:76:44:cb:ab:51:94:6a:45:64:ee:71:3c:af:12:15:
         89:b1:fe:43:2e:11:6d:24:69:63:ab:f2:ed:12:9a:bd:54:e5:
         3d:94:fe:d4:f1:2c:e8:54:47:88:e0:ab:1d:ff:d8:81:01:99:
         76:b5:b4:50:50:eb:75:51:87:fc:76:24:ec:d2:d2:de:7f:8a:
         66:93:42:2d:27:9c:91:38:ab:26:a2:8e:49:1f:24:ac:0e:78:
         ea:3e:bb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:35 2025 by rpki-client