Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File:                     JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier:          04cBFFV46TyVGuX5+4hwMRr26X6z6qUAkutHgyUM6h4=
Subject key identifier:   78:75:50:BB:09:67:3D:B9:29:AF:13:FC:D1:0A:51:06:3E:C9:88:6C
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer:       /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial:       0199FCFD4FD3EE0183DFDEFF3A5F8812D5DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number:          069E
Signing time:             Sun 19 Oct 2025 15:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:23 +0000
Files and hashes:         1: GBWUujhw8eL9ZQ-pESyjXqFWT28.roa (hash: t+QjroMr63PmLVQ1g3FZpryd+p1Rm7jgWOEl8kpZfl4=)
                          2: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: XkdsENbhedL8E16OOFyiFod+u2QeJOwluMlEgvfaAIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:4f:d3:ee:01:83:df:de:ff:3a:5f:88:12:d5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
        Validity
            Not Before: Oct 19 15:01:23 2025 GMT
            Not After : Oct 20 15:01:23 2025 GMT
        Subject: CN=787550bb09673db929af13fcd10a51063ec9886c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:6c:ba:5f:ba:2d:94:83:6b:3c:c4:74:cc:
                    7f:cb:df:1b:9d:57:1f:c6:8a:9e:ea:dc:5b:c1:4d:
                    77:a0:09:43:ad:a5:cf:91:4d:61:06:c3:2c:08:93:
                    1d:c0:01:eb:b1:9a:b2:27:94:94:36:1f:b4:11:7c:
                    66:96:40:b9:91:ad:d4:85:95:22:a2:e3:e2:f7:88:
                    ec:93:0f:81:da:9e:a1:32:61:f9:51:4f:b7:3d:d5:
                    25:38:db:be:13:8f:04:af:db:37:6b:15:cb:29:ec:
                    06:84:46:30:e2:4f:47:47:a3:a5:ca:9f:a8:51:3a:
                    2b:9a:d8:ad:48:26:cb:8d:06:4e:2e:bd:13:96:3d:
                    7e:a0:8d:f4:ce:d8:84:29:f4:d6:4d:fc:eb:d2:56:
                    73:e9:a9:33:14:d7:79:d2:4b:25:3e:03:16:8d:39:
                    6a:e1:4f:16:59:89:ac:f4:8d:c9:1a:fc:8a:e5:25:
                    eb:4a:2d:08:c5:69:87:ea:8b:75:83:87:2d:6a:86:
                    46:53:e7:3d:78:d8:62:21:75:a5:03:4a:58:f2:f2:
                    d5:63:ef:88:b6:14:f4:74:e6:0f:c6:61:ea:66:f1:
                    c9:5a:db:c9:2a:95:37:79:d4:06:92:e9:5e:a4:83:
                    4e:e9:99:ca:34:28:a7:80:2a:4a:1b:18:e6:92:0f:
                    72:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:75:50:BB:09:67:3D:B9:29:AF:13:FC:D1:0A:51:06:3E:C9:88:6C
            X509v3 Authority Key Identifier:
                keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:d0:33:e0:83:fe:31:c0:c6:d7:97:51:3a:77:f9:0f:6a:
         55:e9:bb:be:73:2c:c6:36:92:0a:74:49:d4:cb:d1:34:5b:a9:
         48:0e:01:78:77:a1:1a:92:31:17:88:f6:c3:9a:26:66:1f:8c:
         46:5a:69:81:b1:a2:6c:f8:03:a6:52:e8:83:15:0d:83:a0:45:
         d4:17:29:93:4f:23:1d:22:bf:5b:4c:61:af:89:47:a7:58:ee:
         9e:97:81:64:6a:ca:33:dd:7e:94:b1:3b:68:24:7e:b3:96:d5:
         d9:d1:5f:64:35:b8:4e:32:43:ef:13:33:be:b6:1b:f2:67:04:
         64:56:0e:c9:c0:12:d2:5e:d9:a5:e7:3b:9b:ff:f0:2c:42:4b:
         f1:f9:bd:ca:d9:02:3e:3f:80:d8:cf:81:f9:3b:37:a0:9d:7c:
         23:9c:e5:65:b7:cd:89:78:1d:08:54:cb:a2:1c:77:5b:b6:ea:
         b1:bb:ad:bc:9b:1c:ee:76:b2:4b:79:a5:ae:bd:ab:f5:89:d9:
         ea:1d:92:2f:49:eb:ab:1a:13:0a:ad:b5:0e:08:93:bf:8c:f5:
         a3:9a:b3:b0:94:1a:d8:f6:ec:44:47:53:bb:c3:74:19:b5:eb:
         15:0e:23:61:be:85:79:6a:f7:fa:0c:8a:ea:c2:0f:c8:77:40:
         1f:90:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:34 2025 by rpki-client