Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File:                     jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier:          GE+EXVSzNIls6urXoCslrnCKHEOeqzDJwmOqge7fJms=
Subject key identifier:   D0:3F:15:94:34:BC:B7:09:9B:A6:59:D0:1F:E9:F3:FD:09:01:B9:39
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       0199FD33FF0E29815B59E9E010A591563B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number:          1707
Signing time:             Sun 19 Oct 2025 16:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:07 +0000
Files and hashes:         1: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (hash: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=)
                          2: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=)
                          3: EPDe35N1azJEK8uok7-o_97sYh0.roa (hash: C38/gMZYXjRTrHa0PMtal6z5xQbsJ1VW9n35B2iBbfs=)
                          4: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=)
                          5: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=)
                          6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: CYxpAW+A8n0ANAQ6BvUeZxp2CWum3INfSB+hthDsfeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:ff:0e:29:81:5b:59:e9:e0:10:a5:91:56:3b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Oct 19 16:01:07 2025 GMT
            Not After : Oct 20 16:01:07 2025 GMT
        Subject: CN=d03f159434bcb7099ba659d01fe9f3fd0901b939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:3b:43:76:ac:44:12:62:04:b5:96:3e:a7:
                    87:b1:18:cd:ce:ea:52:e3:44:9c:46:ee:80:6b:31:
                    fb:0d:19:33:35:0f:73:76:53:de:2e:6e:76:0c:3d:
                    4c:3b:26:83:d3:8a:cf:0e:6b:58:18:ac:91:af:e9:
                    bd:22:17:6f:ff:75:26:90:c3:3c:72:80:3d:c1:32:
                    3f:b7:eb:69:36:33:c2:36:a8:f7:1e:d5:1a:92:58:
                    ad:ab:d6:ac:6d:d1:7f:a8:9c:8f:cc:ee:5b:3a:40:
                    28:68:c5:44:48:9e:0c:7f:69:1e:f2:42:37:50:71:
                    dc:df:13:e9:df:f7:af:a4:ec:c9:82:59:72:21:c2:
                    e9:c2:99:a0:fa:70:42:7c:14:63:f9:b1:31:b4:d4:
                    3e:92:f0:48:1b:22:75:54:02:9c:1a:39:1f:4a:39:
                    72:9c:3f:d0:b6:96:17:d2:97:87:e4:63:39:62:47:
                    e0:72:34:29:e3:ae:93:af:37:fc:81:18:23:ab:55:
                    ee:e0:6a:5c:ed:cd:8f:93:c4:40:ec:89:ec:de:21:
                    73:a5:e5:a8:fc:b6:0c:8c:bb:83:58:e6:4f:df:45:
                    bb:83:e8:7c:a6:2f:af:a7:8d:ff:15:3b:be:b0:56:
                    44:9f:42:1d:17:c5:eb:da:07:18:f4:17:2f:0c:b9:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3F:15:94:34:BC:B7:09:9B:A6:59:D0:1F:E9:F3:FD:09:01:B9:39
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e5:25:ae:08:86:5b:2e:b2:0a:0c:38:b2:f8:3c:a6:15:dc:
         8e:9d:8a:5b:c6:83:e3:3d:3b:c6:ed:5c:97:14:be:09:e3:85:
         8d:21:1f:4e:8b:27:29:55:17:de:6c:7b:e0:f0:bf:75:b5:f8:
         07:ea:aa:bb:f4:35:a2:07:e9:53:64:2b:b7:40:a7:52:2e:91:
         a6:fb:55:4c:b5:33:a9:50:3f:41:37:2b:24:37:61:da:17:a9:
         a1:06:4a:4a:63:dd:f7:d9:ee:a8:ad:9c:83:57:34:d5:f9:3b:
         68:87:8c:27:1c:59:4d:11:66:a4:75:ad:77:cf:0b:37:6d:11:
         8a:db:cf:98:4b:be:6e:d4:96:60:cf:df:1d:ee:20:ce:0f:b2:
         a3:95:6a:cd:fd:0e:f4:90:ed:13:ca:c8:0b:e1:1c:99:16:d2:
         b7:b6:75:c7:e8:35:41:70:52:ba:d4:1d:d8:6a:fb:51:74:32:
         64:89:f8:45:0d:a6:25:8f:97:17:52:6d:f0:b7:af:48:83:6b:
         d6:60:8d:20:ee:b1:ec:98:8d:66:ee:94:c1:49:aa:34:5f:a7:
         43:5c:1d:4d:3f:3d:9e:80:0d:a4:48:ca:3c:44:4f:2f:fa:13:
         08:8f:af:cd:13:9e:d3:ea:9b:52:2b:08:94:53:5f:19:93:ad:
         d7:be:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:56 2025 by rpki-client