Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File:                     jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier:          ldJXr2o5QzDIT4xvq0WC6mlovTAC+JAPVRdsILL8DdE=
Subject key identifier:   33:37:8E:C6:38:87:E7:28:9A:1C:FB:ED:68:6E:F0:9E:F9:D0:4D:B3
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer:       /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial:       0199FC21CE444F4DD3B4BA9E7811DBAC21CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number:          166F
Signing time:             Sun 19 Oct 2025 11:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:37 +0000
Files and hashes:         1: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (hash: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=)
                          2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: yP+aXcMVdk1XpQYev6AeMmdnL7C/sPEOCIt8hcYkDr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:ce:44:4f:4d:d3:b4:ba:9e:78:11:db:ac:21:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
        Validity
            Not Before: Oct 19 11:01:37 2025 GMT
            Not After : Oct 20 11:01:37 2025 GMT
        Subject: CN=33378ec63887e7289a1cfbed686ef09ef9d04db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:b2:fb:37:b2:78:ee:70:c7:5c:4f:ed:02:
                    53:b6:48:21:86:97:a7:9f:63:b6:57:95:cf:e0:31:
                    f4:f0:b8:af:c6:d1:84:09:73:cb:1c:0f:8c:79:11:
                    3f:2e:de:53:1b:3d:ed:0c:82:ab:61:5d:1a:71:4e:
                    10:a7:a7:f9:b7:9d:b9:d9:c7:88:60:8d:c5:4a:d9:
                    61:85:8a:9b:89:6e:5f:c7:2a:e7:42:cf:16:e5:0f:
                    61:f8:27:b8:86:55:c1:37:45:89:d4:1d:b4:56:7f:
                    7e:82:35:b1:d2:61:ea:2a:bf:86:69:92:98:a5:36:
                    c9:24:44:1c:49:82:e2:45:44:14:61:98:1c:6c:f4:
                    21:a1:4d:e8:74:3b:5d:f0:82:cf:51:b0:1d:3a:da:
                    17:87:a1:17:1d:f8:b0:4a:58:20:59:12:e8:75:21:
                    97:d3:91:06:be:cf:5b:7d:ec:8a:31:0f:a9:64:f2:
                    d9:9a:f3:19:ef:e3:72:e3:4a:08:8a:fe:43:be:05:
                    e8:cd:59:06:09:e9:e2:4b:98:89:44:4c:cf:b5:ce:
                    3f:f4:19:47:f5:e7:e1:32:ed:a7:49:f3:e0:c5:87:
                    54:86:b5:42:59:99:09:1e:2b:bf:bf:df:d9:90:2c:
                    d6:c6:6c:e5:4f:82:b1:34:3d:45:bd:74:26:5e:2f:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:37:8E:C6:38:87:E7:28:9A:1C:FB:ED:68:6E:F0:9E:F9:D0:4D:B3
            X509v3 Authority Key Identifier:
                keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0d:04:9c:81:1e:30:57:19:fb:62:3e:8f:4d:db:eb:a4:dc:
         93:46:25:b6:8c:52:ad:e0:3a:f0:fd:d6:48:28:84:8d:ba:39:
         2f:99:46:34:d7:42:c9:de:16:62:1c:c0:c3:05:c4:f3:6b:5b:
         cc:93:c1:71:df:b2:e4:74:53:3c:19:f3:9d:72:fb:b5:50:6e:
         07:71:a3:f9:af:30:d6:52:ce:61:13:aa:c5:97:3f:56:89:d4:
         41:9d:77:f7:90:f5:53:09:db:82:a7:a4:7b:01:93:d6:71:84:
         81:3a:a0:84:8e:6a:72:dd:05:0d:cf:6c:d3:59:4c:7b:62:bb:
         a2:d7:ad:91:47:68:a0:19:d4:7d:df:2f:75:db:6f:68:46:5d:
         d3:ee:2e:81:c3:4d:6b:06:0b:bb:72:e9:9a:23:7c:7d:18:e2:
         c6:37:cb:23:96:e8:75:77:45:14:4a:67:d3:a8:27:26:82:fa:
         85:c5:a5:63:a2:a9:38:7b:ff:5a:e3:5e:a7:15:01:93:7a:1b:
         9e:5e:11:e5:e1:df:3b:6c:4f:cc:19:81:55:a0:ae:72:e4:57:
         61:a9:b3:1e:8b:d3:ec:a0:6d:ff:8c:c6:92:1b:87:6a:06:02:
         81:32:1f:58:b3:04:c8:6e:91:e0:63:8d:ec:16:66:61:8c:c3:
         8a:66:3e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:05 2025 by rpki-client