Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
File:                     JlZJaRWR5VKhSIlDnP9w3lbAjak.mft (raw, json)
Hash identifier:          bw6sxTls+dvEAngVDk8N7B8buv3hZyb0A9X7iDGN+s8=
Subject key identifier:   EC:29:D1:94:7E:B1:A7:77:EE:44:41:EC:5F:4B:4A:46:4F:80:E5:6A
Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
Certificate issuer:       /CN=265649691591e552a14889439cff70de56c08da9
Certificate serial:       0199FB462C1F8239E5A59F46DBC5424980BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
Manifest number:          010D
Signing time:             Sun 19 Oct 2025 07:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:44 +0000
Files and hashes:         1: JlZJaRWR5VKhSIlDnP9w3lbAjak.crl (hash: FF4s+yOUNnkrKFXGcovwTOlXy67LOgqZ09qSdYQbND0=)
                          2: pZiY96ECGZ3enErASsqWJWksnRo.roa (hash: MEeiZ1S6byAdXpmL3x1KNRz/NrRtbh43pA6SZ1saEAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:2c:1f:82:39:e5:a5:9f:46:db:c5:42:49:80:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265649691591e552a14889439cff70de56c08da9
        Validity
            Not Before: Oct 19 07:01:44 2025 GMT
            Not After : Oct 20 07:01:44 2025 GMT
        Subject: CN=ec29d1947eb1a777ee4441ec5f4b4a464f80e56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:e4:e5:39:a4:1e:e4:c0:20:4a:9b:6b:58:
                    07:2d:6e:ef:26:11:43:93:d1:b8:44:18:65:19:10:
                    d4:85:c9:4a:7e:61:cc:e9:e0:6e:7a:2f:fa:7f:00:
                    79:e9:a4:19:5f:6f:1e:4b:ce:76:e6:7f:01:24:ae:
                    dd:5d:bc:98:c7:b9:e7:42:24:92:59:b9:ef:3c:fe:
                    b6:53:7f:9e:b1:e5:d9:c4:90:51:47:25:88:36:36:
                    36:0f:18:fe:08:a3:30:8f:46:ee:99:f7:1c:8a:db:
                    7c:e8:d5:26:6f:f6:b4:44:9f:01:d0:7f:33:7c:09:
                    21:52:cd:5b:bc:56:a9:ad:ec:58:25:55:9b:18:2e:
                    c8:29:98:65:43:d2:bd:c5:63:d4:a8:80:00:cb:58:
                    07:99:fd:a5:11:f7:1b:c7:5b:c7:ce:d3:0a:0b:37:
                    c9:64:22:9d:1b:fc:43:de:b6:ba:1c:6f:8e:d1:f7:
                    96:03:f5:84:0d:da:17:d9:52:cd:ef:02:86:61:bc:
                    57:1d:49:ca:84:1e:7c:8d:5d:94:66:7e:5d:c6:de:
                    b8:43:55:bb:4e:19:e4:03:f5:6a:6c:ca:04:93:0b:
                    25:30:4a:24:7c:10:58:f5:88:26:f2:d8:98:19:e6:
                    20:41:44:bf:f9:4c:20:e6:76:55:46:36:0f:d9:df:
                    b4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:29:D1:94:7E:B1:A7:77:EE:44:41:EC:5F:4B:4A:46:4F:80:E5:6A
            X509v3 Authority Key Identifier:
                keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:99:97:7b:c2:83:04:c4:d1:7b:75:b1:f0:95:20:49:c0:c3:
         7b:31:09:29:51:21:bd:e5:05:15:70:9b:f7:e8:b1:3b:a3:ea:
         79:69:df:8b:33:18:1a:78:e3:f6:ca:2f:0d:ba:7b:8c:9f:5e:
         27:d0:55:2b:df:d0:c7:7a:46:6f:6d:3d:e3:34:0a:d3:38:62:
         9e:51:61:e1:6a:8e:a4:06:c8:b6:bd:cd:38:bf:35:0b:56:70:
         cc:bf:39:05:97:6e:27:36:a2:a8:20:0d:03:12:63:1a:96:be:
         75:77:9f:23:33:f7:10:f5:70:fb:05:fa:dd:24:a3:25:3a:1c:
         e0:99:64:db:9e:0c:68:66:b6:cc:2c:01:9d:41:7d:fd:54:47:
         f4:78:ea:ae:ce:fc:75:3e:c9:9f:f7:11:bd:f9:5d:a9:2b:e8:
         d6:6b:f2:52:5d:7a:c0:1b:ca:1f:2d:4c:d7:b4:06:d9:53:de:
         95:06:dd:e5:f0:88:a3:6f:a2:ce:55:97:19:05:ae:17:eb:61:
         47:53:59:d3:0d:97:a7:cf:30:a2:6e:51:92:23:52:b2:36:38:
         ae:cd:40:58:6e:b0:db:ac:8b:40:c9:17:44:36:22:0c:d8:ba:
         46:9d:a2:13:4d:8e:53:7b:63:e1:60:0f:cb:08:8f:0e:c3:e8:
         0d:2f:6b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:11 2025 by rpki-client