Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
File:                     JiditzviJrFxmZQSYlrMcnAkQ0M.mft (raw, json)
Hash identifier:          1dnnGqVmNtiV7RtWnDDkrBQqcn2UlyMzSznK2h078gc=
Subject key identifier:   BF:38:8B:2F:68:DE:35:D7:2A:ED:04:92:93:F6:0E:73:DF:5D:70:F3
Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
Certificate issuer:       /CN=262762b73be226b171999412625acc7270244343
Certificate serial:       0199FD6B003C1393AA42AED02C7220650D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
Manifest number:          0331
Signing time:             Sun 19 Oct 2025 17:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:11 +0000
Files and hashes:         1: JiditzviJrFxmZQSYlrMcnAkQ0M.crl (hash: U2ApvTiAYqV5RzpHBE+uel5JZhMfk6c4JswRr/Uvdbk=)
                          2: SW0NmgN1MfeImMBLkTet_og-k3A.roa (hash: NuBlZaeVdzU+Qx3vpR2cHPvzMF2hd3qV04JT0+dx0Ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:00:3c:13:93:aa:42:ae:d0:2c:72:20:65:0d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262762b73be226b171999412625acc7270244343
        Validity
            Not Before: Oct 19 17:01:11 2025 GMT
            Not After : Oct 20 17:01:11 2025 GMT
        Subject: CN=bf388b2f68de35d72aed049293f60e73df5d70f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:dd:24:05:b4:da:b0:af:8e:2b:1a:1b:c1:
                    51:8f:5f:76:e5:14:e2:0e:2c:51:b7:b1:45:75:f8:
                    17:fc:6c:dd:a6:71:79:e0:9b:4c:b0:dd:79:46:fc:
                    bc:9f:2e:1e:7b:47:0c:d5:e7:6f:52:80:a8:32:84:
                    06:5c:d5:c9:bd:68:c2:d4:2a:ec:83:89:fe:84:0b:
                    d7:8e:17:a2:07:da:eb:5b:c2:b3:e3:a4:f2:87:ff:
                    ca:ec:57:30:11:98:97:a7:08:d9:83:1f:47:0f:25:
                    6b:ef:3f:49:80:f1:40:14:32:92:cf:5b:ed:91:2e:
                    dc:38:83:18:25:8c:6a:13:3a:27:65:96:12:8d:8b:
                    d9:4b:06:a7:34:9e:65:fe:43:fa:b0:ca:33:08:cb:
                    52:d1:da:41:d2:55:0d:bb:6b:21:bb:ab:80:1e:a6:
                    92:71:13:5c:bc:50:e6:b3:98:d0:b7:d0:a6:3c:56:
                    75:e9:93:d0:86:66:80:18:81:fa:ce:b3:59:e6:11:
                    ad:03:23:b0:62:d8:b7:0c:35:50:ac:38:62:e8:8a:
                    a8:f9:05:45:32:8c:be:82:9f:f6:44:d0:b9:56:e9:
                    bd:d1:af:f3:68:db:60:a1:82:fc:f1:56:de:53:c6:
                    d6:99:ce:81:1f:10:b6:3f:66:05:3d:bf:36:4d:d6:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:38:8B:2F:68:DE:35:D7:2A:ED:04:92:93:F6:0E:73:DF:5D:70:F3
            X509v3 Authority Key Identifier:
                keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:60:d9:82:9b:9e:93:89:89:81:75:3f:75:af:a7:49:09:1a:
         8e:37:68:71:02:be:1a:0e:75:d0:75:6e:a8:2f:2c:ad:83:bd:
         23:71:d6:c9:de:a3:e2:c8:89:d7:88:e3:67:b8:19:93:20:f4:
         41:89:82:ed:7e:3b:cf:53:5e:da:7b:6a:7a:ef:e8:32:35:df:
         88:01:bf:ff:19:00:b0:b6:a4:3f:83:81:f1:ab:f0:94:7d:b0:
         da:dd:03:5f:53:f6:2e:9c:f9:39:84:be:bf:07:c7:95:66:8a:
         97:c8:6c:52:31:48:6f:88:67:d7:d1:a5:a8:ab:97:65:76:7e:
         e8:53:46:fb:25:0f:48:fb:25:c1:b1:81:74:48:ef:88:ef:c9:
         6a:66:d9:c3:8a:6c:22:79:20:12:7d:18:97:ac:ff:d6:1d:5c:
         3d:b6:d2:69:b1:d7:6b:71:d2:12:4a:c9:22:2c:55:56:f0:41:
         8f:96:f8:25:a7:b6:aa:14:ec:7b:ed:00:09:3a:de:ea:77:7e:
         ea:a4:2c:1f:ce:aa:8c:c7:3d:bc:22:57:24:d3:d2:30:21:7c:
         4c:9d:34:50:ac:4a:d0:9f:cc:a1:71:9b:be:0d:1a:c6:84:f9:
         8f:2b:e2:4e:ee:2a:5a:e7:dc:52:a6:a2:14:63:3b:5d:38:00:
         fb:c1:b8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:05 2025 by rpki-client