Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File:                     JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier:          VgEowPTKzE0/ZajMJrvMw4lB6kUM3wbz2y0VrpXiTak=
Subject key identifier:   5B:67:EF:D1:3F:2A:81:34:2B:85:75:32:CE:CE:7A:09:62:CA:C5:4E
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer:       /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial:       0199FD341885A0092F103536F15A502B5004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 16:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:13 +0000
Files and hashes:         1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: p3mpmLwUGlFEenUz+egut/BbXAmhf2ArpdAuVGOczP0=)
                          2: Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa (hash: cJ7oC/tfZObuQa2Mj7JBLCFjsQinWzWvmcJSKHgfJM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:18:85:a0:09:2f:10:35:36:f1:5a:50:2b:50:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256be176b313e1a8a050f670af576771b655d611
        Validity
            Not Before: Oct 19 16:01:13 2025 GMT
            Not After : Oct 20 16:01:13 2025 GMT
        Subject: CN=5b67efd13f2a81342b857532cece7a0962cac54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:ba:9e:77:3b:be:08:e5:da:99:2b:91:a2:
                    c1:aa:fb:d9:62:c8:53:5a:0c:40:8a:74:2f:bc:8c:
                    fd:a1:a1:df:87:82:75:4a:fe:d8:6a:48:90:20:7f:
                    0a:09:8c:4b:50:d7:b8:2c:11:bd:52:d5:31:ed:23:
                    52:ee:3f:a6:6e:b7:5e:a1:97:b2:91:65:78:80:77:
                    c7:27:a9:73:20:9e:b8:2e:1d:cd:53:47:4c:cc:d1:
                    7a:64:44:e6:37:ed:81:5a:fe:c0:d5:16:a8:8c:ce:
                    72:6f:82:ca:84:11:dd:5d:ef:4f:58:8f:63:d4:42:
                    77:fb:81:10:47:8d:88:44:af:07:3a:86:09:34:f3:
                    38:ec:21:d5:7e:99:a7:ed:95:bd:d4:43:a4:4b:82:
                    11:b1:39:60:d8:c0:bd:a9:49:55:9b:23:01:d2:d0:
                    a4:fc:c4:19:30:f0:8e:ed:ba:19:5d:12:bf:01:03:
                    d5:a2:dd:f0:0f:2d:3a:af:af:8e:42:10:6b:3e:99:
                    9d:a0:b9:52:9b:9c:87:4b:bc:61:de:a0:db:f3:33:
                    53:1d:db:65:be:14:6f:4e:59:8e:b1:13:75:b0:46:
                    d3:0e:68:9e:3b:8d:36:40:d2:5e:b9:9d:62:93:a2:
                    fb:de:77:38:30:10:12:7c:34:fa:ea:8c:de:ed:91:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:67:EF:D1:3F:2A:81:34:2B:85:75:32:CE:CE:7A:09:62:CA:C5:4E
            X509v3 Authority Key Identifier:
                keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5e:b4:f3:5b:41:0c:eb:14:98:5d:4c:00:5b:0f:75:76:09:
         cb:32:f8:21:22:16:a6:23:9c:f1:f7:c7:3a:43:d8:f0:82:55:
         8b:2d:2e:98:8e:df:05:6a:cd:09:ab:1f:a5:06:b3:f2:25:3b:
         b9:be:fe:8f:42:ef:7f:6b:45:46:cd:cf:c9:2b:d3:fa:cc:2b:
         a4:f3:8f:39:4e:6e:81:96:66:75:71:43:94:c4:67:c5:65:17:
         09:1e:35:2c:ab:21:d6:83:95:78:69:19:4b:b8:d4:da:31:28:
         f4:c7:31:e2:6b:05:67:da:03:75:b2:24:41:1e:d8:15:cb:09:
         f0:c5:17:49:6e:f5:61:42:92:5b:b6:06:40:d1:8f:ff:25:dd:
         01:35:cc:6d:ed:63:35:06:06:4a:e1:8f:e2:18:67:63:59:c1:
         22:52:ea:3c:4a:62:3f:3b:58:33:00:56:31:40:69:38:31:15:
         14:64:a1:27:fc:29:cb:53:59:f2:c8:c4:ee:3a:ad:e3:fa:5b:
         6e:93:e3:c1:f1:94:8b:0c:6d:05:a6:57:2c:ec:fe:99:88:0c:
         19:a0:ad:00:1a:34:c0:ac:f5:28:17:0a:fe:fe:ba:1c:0d:fb:
         f8:54:46:58:ce:ca:c6:01:92:20:5b:46:4f:64:01:15:2e:d2:
         6c:26:c4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:10 2025 by rpki-client