Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File:                     JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier:          TLmtvEuT0jus3BNXBCLyZ/bmFOjwyK7RrDqSUfA9Wgc=
Subject key identifier:   76:20:D9:5B:1A:64:D9:C6:E7:B4:59:5A:44:A0:94:16:24:30:62:DC
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer:       /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial:       0199FB7CA0D5F1F0940EA39631D55850BF9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number:          0DD8
Signing time:             Sun 19 Oct 2025 08:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:12 +0000
Files and hashes:         1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: eSdLTe2ZofEdILRuUH/gdNIZK8K6dGz5r9pW9E9fVsM=)
                          2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
                          3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:a0:d5:f1:f0:94:0e:a3:96:31:d5:58:50:bf:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
        Validity
            Not Before: Oct 19 08:01:12 2025 GMT
            Not After : Oct 20 08:01:12 2025 GMT
        Subject: CN=7620d95b1a64d9c6e7b4595a44a09416243062dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:97:6c:e8:ef:94:d2:7a:c3:18:18:45:5e:a5:
                    5c:4f:45:f4:bf:a7:6a:ee:06:e7:92:84:ee:48:8b:
                    ad:dd:5b:60:b1:e8:f3:09:95:9e:9c:a0:88:12:1b:
                    df:8a:32:0a:1f:48:c8:ea:30:89:05:73:f6:6f:64:
                    67:8e:2b:dc:eb:2b:20:16:d0:39:cd:db:31:85:08:
                    69:d2:aa:91:7a:6f:42:b1:6d:86:f8:f5:6f:a9:86:
                    24:88:27:dc:12:a3:ba:23:bb:8e:04:6b:47:64:7f:
                    e2:4f:90:58:26:fc:42:ea:7c:94:54:71:8c:ad:07:
                    23:7c:3a:b1:5c:fc:4c:b4:3c:7b:9a:4d:72:c3:b2:
                    c6:6f:c7:61:05:2f:58:e7:9d:89:01:0d:3f:6e:fb:
                    d8:fe:d1:5c:3c:91:2d:fe:98:e9:8f:d3:d1:60:e3:
                    54:1d:84:3e:49:f4:a4:7b:2d:3f:b3:4a:0d:ab:7c:
                    dc:e6:9a:bd:14:cb:a4:ac:f9:29:7d:38:f7:23:87:
                    4b:f8:14:31:20:dd:0f:7b:d4:04:68:01:3f:ba:84:
                    0b:37:73:39:a4:cd:3e:49:6b:c2:ab:ef:49:b7:0a:
                    1d:0d:eb:bb:45:ea:82:61:81:f8:1b:31:9e:61:0e:
                    ff:86:c3:6c:ac:da:f0:d6:b3:60:73:57:f9:20:d8:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:20:D9:5B:1A:64:D9:C6:E7:B4:59:5A:44:A0:94:16:24:30:62:DC
            X509v3 Authority Key Identifier:
                keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:12:8a:e5:59:c9:12:0a:87:dd:95:61:6f:70:cb:44:fd:
         44:91:ee:2e:eb:41:e8:28:90:29:38:1e:91:d2:e6:c9:49:a8:
         a1:85:2f:0d:a0:c3:1a:46:21:02:26:a4:99:fb:9c:27:cd:18:
         71:2c:2e:cd:a0:59:eb:3e:75:ab:fd:2c:ca:79:ef:71:ed:92:
         14:58:3c:ab:72:29:77:ee:cc:da:6f:de:b8:24:77:79:fb:79:
         50:8d:04:93:69:f8:e4:12:75:b3:aa:14:17:cd:1a:0f:32:0a:
         b3:89:c8:ef:7d:9c:64:5a:c7:8c:e1:00:1a:e0:00:29:c4:a3:
         3a:62:6a:40:d2:af:18:16:1c:b2:2a:4d:4a:ac:df:d7:b8:8c:
         3e:a7:a1:a9:dd:3b:4a:47:47:66:7e:9b:7b:6e:2f:85:22:57:
         c4:16:42:a5:10:70:a4:43:9e:dd:93:1a:47:a8:98:27:57:99:
         74:48:07:d0:90:09:22:e5:fe:a7:31:7a:22:60:a5:d3:14:51:
         fb:fe:1e:0c:fa:ac:6f:a8:6f:9b:3c:f5:31:5c:11:9d:7b:fa:
         df:70:38:e5:f9:d1:67:29:6e:be:ef:58:0d:54:dc:8c:37:4d:
         d2:36:39:f4:a3:7d:14:2e:9c:5a:30:fd:bb:74:8c:fa:36:3b:
         9a:42:2e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fKDV8fCUDqOWMdVYUL+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTU1YmQ2ODM5NzU2Njg5NWIxNWVjYjk3ZmMxZDY1YzBj
ODc5Y2UwHhcNMjUxMDE5MDgwMTEyWhcNMjUxMDIwMDgwMTEyWjAzMTEwLwYDVQQD
Eyg3NjIwZDk1YjFhNjRkOWM2ZTdiNDU5NWE0NGEwOTQxNjI0MzA2MmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pds6O+U0nrDGBhFXqVcT0X0v6dq
7gbnkoTuSIut3VtgsejzCZWenKCIEhvfijIKH0jI6jCJBXP2b2Rnjivc6ysgFtA5
zdsxhQhp0qqRem9CsW2G+PVvqYYkiCfcEqO6I7uOBGtHZH/iT5BYJvxC6nyUVHGM
rQcjfDqxXPxMtDx7mk1yw7LGb8dhBS9Y552JAQ0/bvvY/tFcPJEt/pjpj9PRYONU
HYQ+SfSkey0/s0oNq3zc5pq9FMukrPkpfTj3I4dL+BQxIN0Pe9QEaAE/uoQLN3M5
pM0+SWvCq+9JtwodDeu7ReqCYYH4GzGeYQ7/hsNsrNrw1rNgc1f5INhvEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYg2VsaZNnG57RZWkSglBYkMGLcMB8GA1UdIwQY
MBaAFCSlW9aDl1ZolbFey5f8HWXAyHnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQt
YzM0ZTkwZDdmOGVhLzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZGU4OTktMjJlMS00NjNjLWE0ZGQtYzM0ZTkwZDdmOGVh
LzEvSktWYjFvT1hWbWlWc1Y3TGxfd2RaY0RJZWM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMkSiuVZ
yRIKh92VYW9wy0T9RJHuLutB6CiQKTgekdLmyUmooYUvDaDDGkYhAiakmfucJ80Y
cSwuzaBZ6z51q/0synnvce2SFFg8q3Ipd+7M2m/euCR3eft5UI0Ek2n45BJ1s6oU
F80aDzIKs4nI732cZFrHjOEAGuAAKcSjOmJqQNKvGBYcsipNSqzf17iMPqehqd07
SkdHZn6be24vhSJXxBZCpRBwpEOe3ZMaR6iYJ1eZdEgH0JAJIuX+pzF6ImCl0xRR
+/4eDPqsb6hvmzz1MVwRnXv633A45fnRZyluvu9YDVTcjDdN0jY59KN9FC6cWjD9
u3SM+jY7mkIuaA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:05 2025 by rpki-client