Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File:                     Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier:          4Tu7P/k9HBwLTuh0fgIoPyw/gO/DGu0xfxw2EzumW94=
Subject key identifier:   12:1D:2D:6A:AC:10:BB:C4:94:97:E0:CE:8D:1E:AE:E4:FE:F0:5D:15
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer:       /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial:       0199FC585ECB7520E4199B0B65FF22E25CC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number:          16EA
Signing time:             Sun 19 Oct 2025 12:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:13 +0000
Files and hashes:         1: 6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa (hash: 0TX6RB/i/PYM+jHhKWcDxzPxSqvqvW8BUSQ5qekuotk=)
                          2: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: 8eyzECwzZNdooqIsnUmvVRqatcLyOWynkZdL/qLLo+0=)
                          3: On6P0oyCVsJaxIEE3GftNC4qztw.roa (hash: MHdX24gf5gM9PdREHRYQX0s+qP7Sh6jKR9PNtNbtiPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:5e:cb:75:20:e4:19:9b:0b:65:ff:22:e2:5c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
        Validity
            Not Before: Oct 19 12:01:13 2025 GMT
            Not After : Oct 20 12:01:13 2025 GMT
        Subject: CN=121d2d6aac10bbc49497e0ce8d1eaee4fef05d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:92:61:a8:83:bd:7d:84:12:79:81:bf:bb:
                    d7:53:c9:08:6c:99:9c:29:93:93:d0:9e:da:68:50:
                    94:1c:a1:fc:eb:f1:ca:34:a9:09:c3:f6:e3:d9:e9:
                    f3:53:82:6f:b0:c8:c1:1a:b0:d1:bb:cb:32:8c:d6:
                    c7:46:08:36:9d:df:57:61:19:ee:2b:3e:cf:83:c8:
                    bb:9b:a8:54:5f:e0:7d:f1:ed:c7:ec:d5:1b:24:bf:
                    75:a3:25:81:9c:e3:78:56:38:b9:66:bb:c2:d7:21:
                    74:18:23:ba:1a:c6:00:35:eb:66:f3:6b:b6:42:e6:
                    7e:bd:c4:a4:bd:eb:24:2e:d5:f4:35:0f:a0:c0:b8:
                    64:cd:91:d0:1c:a6:a5:db:06:ce:80:bd:47:77:27:
                    c4:49:2a:01:97:05:69:5f:e9:c2:d9:8b:ac:1e:9b:
                    a8:97:75:da:4f:71:5a:ce:ae:82:09:d4:4f:2d:bf:
                    0c:e7:54:87:b0:c1:2c:93:bb:3d:d4:67:37:a7:66:
                    cd:4d:79:49:a9:0a:67:77:9e:aa:57:06:af:69:f2:
                    4a:89:4b:45:35:ef:65:84:57:da:32:b1:bc:b8:c6:
                    6f:de:d7:80:57:15:6a:68:2c:c6:ac:bc:e3:39:0b:
                    6a:68:49:08:c7:ab:36:55:1c:5f:d1:5b:5d:15:e0:
                    c6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1D:2D:6A:AC:10:BB:C4:94:97:E0:CE:8D:1E:AE:E4:FE:F0:5D:15
            X509v3 Authority Key Identifier:
                keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a4:31:93:6d:1a:f9:8c:06:b1:46:c4:fc:ee:44:b3:26:b7:
         94:1b:bd:74:9f:f9:6e:e0:13:aa:8a:99:2c:16:8d:ad:a8:64:
         72:9d:95:d6:d6:51:91:c8:d9:4b:25:0e:26:98:7f:92:2c:22:
         ad:06:f4:ce:9d:e5:ab:a6:8d:c9:9f:db:a6:ef:f7:86:3d:0f:
         d3:f0:f1:39:33:9f:63:e1:ea:61:34:50:3a:16:95:f8:a0:54:
         c3:78:b9:a4:f9:1a:51:d4:b1:ad:c2:a5:a9:99:29:81:14:e4:
         00:a2:e3:3d:19:9f:a1:19:17:5e:4b:83:5d:f2:4c:af:26:fc:
         4e:f0:5e:69:ad:cf:05:64:22:30:c7:43:32:11:60:2f:4e:16:
         06:a4:ad:69:f9:6a:47:fb:2e:0a:6a:72:13:a4:39:d0:fb:d7:
         af:27:42:d0:64:d3:1c:de:dc:c1:37:55:10:20:07:ab:81:79:
         3c:b8:5d:7b:3d:f6:6d:3f:dd:64:ed:3c:dc:9d:c3:27:51:6d:
         36:17:c9:65:7f:35:4c:7e:02:c7:64:f6:16:a4:e9:85:7f:ea:
         7f:75:3c:ed:23:0f:0a:82:96:d2:8f:18:46:3e:08:13:79:d9:
         cc:38:61:35:53:fd:34:b2:d2:aa:42:14:40:e1:75:19:c7:db:
         51:86:ef:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:27 2025 by rpki-client