Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File:                     _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier:          qpqxdpODQIty52cpJFgMMCJ3RQZdjSJaJ6F4jf/p+3U=
Subject key identifier:   61:04:61:E4:A1:BA:9C:FB:46:A3:AD:EF:8E:D3:1B:AB:32:25:A4:D8
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer:       /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial:       019A02C7610AC08DF252FD3911F34852C309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number:          05C6
Signing time:             Mon 20 Oct 2025 18:00:12 +0000
Manifest this update:     Mon 20 Oct 2025 18:00:12 +0000
Manifest next update:     Tue 21 Oct 2025 18:00:12 +0000
Files and hashes:         1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=)
                          2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: rmvVDH/AMxUEgBjXVwp67N9Kj2MjNstcjF5avdOW4mM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:c7:61:0a:c0:8d:f2:52:fd:39:11:f3:48:52:c3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
        Validity
            Not Before: Oct 20 18:00:12 2025 GMT
            Not After : Oct 21 18:00:12 2025 GMT
        Subject: CN=610461e4a1ba9cfb46a3adef8ed31bab3225a4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:50:bb:a3:4b:ce:b8:9f:f7:a5:b5:7d:d1:
                    3f:c3:05:4a:ab:03:bc:60:50:8d:0c:11:25:c0:c0:
                    22:2e:fb:7e:3a:7b:6e:55:5c:c0:3e:10:af:44:e8:
                    7b:e5:91:71:91:0f:a3:1a:29:2a:3a:5b:77:d8:6d:
                    91:e0:59:89:5f:63:dc:99:a8:5e:db:43:36:0e:9f:
                    bb:aa:20:77:23:32:92:43:e5:0a:8c:b8:6f:90:a4:
                    13:7a:17:ed:82:c2:7d:72:e3:83:a4:2f:1e:07:b6:
                    1d:b7:93:5d:f9:a6:80:17:b0:b3:ab:f7:b9:52:4d:
                    03:96:83:8d:ff:5e:ee:0c:b4:cd:8a:3c:9b:5f:27:
                    e5:1c:f4:ab:fd:cf:3d:4e:85:cd:ca:4c:b7:94:fa:
                    cc:96:16:55:ec:f1:a9:72:69:ab:3d:f3:e1:09:c0:
                    d6:26:99:28:05:38:16:95:89:f8:67:b6:e3:4d:74:
                    34:94:18:b8:92:be:df:66:c3:65:03:57:33:de:71:
                    e6:4f:57:1b:72:42:5c:fc:a3:be:dc:ee:a5:b9:1c:
                    b1:3a:f8:8b:d8:94:bb:fb:f8:52:ca:57:93:17:c5:
                    83:6b:87:53:a2:2b:11:26:f3:ce:6c:30:d7:5b:7e:
                    d3:78:aa:7b:fd:55:30:e0:30:31:cb:33:64:2e:db:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:04:61:E4:A1:BA:9C:FB:46:A3:AD:EF:8E:D3:1B:AB:32:25:A4:D8
            X509v3 Authority Key Identifier:
                keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8a:d4:6b:b5:4e:05:57:bf:38:3f:b1:77:03:1b:c5:c1:a4:
         d7:34:56:a2:81:c5:31:00:ce:2f:b5:85:07:d2:b0:08:3b:ca:
         4c:86:71:e8:fb:d1:1d:31:dd:d3:35:5e:91:8c:c1:6e:14:c9:
         ac:06:68:cc:fc:3a:23:69:c7:b4:5f:73:c2:2d:a7:56:4f:07:
         17:77:9c:aa:33:63:e4:bf:51:66:ef:9e:2b:f9:98:eb:0f:40:
         97:45:5d:8c:4f:c4:0d:e9:38:9c:40:fb:e1:b6:7c:57:97:c7:
         9d:ea:79:d0:f7:f8:93:36:48:d9:22:4e:4c:40:b2:a7:ca:52:
         96:58:d1:95:1e:ac:84:6f:7a:b8:d5:f8:fa:19:5d:5d:65:6b:
         c7:a2:b3:40:ea:b7:8f:75:78:c5:da:99:59:70:39:ee:fb:3c:
         bd:ca:71:2d:1b:72:ab:42:8f:31:4a:8c:7f:d5:72:8d:54:21:
         33:d1:49:ce:1e:c0:a4:bb:fa:e2:ed:e1:53:55:a9:34:4a:c0:
         db:e7:2f:82:87:ea:fb:6a:cd:a0:8c:c9:b5:c5:25:67:24:7f:
         4a:af:a3:d5:19:84:33:70:04:2e:ed:4f:79:84:8d:ed:89:47:
         ff:17:d1:7e:df:05:b0:7d:8d:51:9a:e8:36:85:f8:08:89:bb:
         1d:b6:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:36:41 2025 by rpki-client