Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          FnqkcyyiZg3cYiHonSQ/34W2yETf9TNBRnJlst5oGPI=
Subject key identifier:   E9:A9:32:C7:28:B7:65:DE:C8:6F:B5:C6:14:BF:FF:4A:2C:FB:6C:B3
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       01984B546F5ED3332D5CE806CE6C21BA0496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          0EA0
Signing time:             Sun 27 Jul 2025 10:01:21 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:21 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:21 +0000
Files and hashes:         1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: iZIsOA7gIZ36aoOhr1Y2agOz2iy42FpOx/faNdK/yCg=)
                          2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:6f:5e:d3:33:2d:5c:e8:06:ce:6c:21:ba:04:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Jul 27 10:01:21 2025 GMT
            Not After : Jul 28 10:01:21 2025 GMT
        Subject: CN=e9a932c728b765dec86fb5c614bfff4a2cfb6cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:25:63:52:d0:6f:e7:b3:9e:11:c9:70:2f:
                    d3:90:5b:b2:90:eb:dc:42:2a:e4:a3:d2:4d:ee:dd:
                    6f:12:43:40:78:d4:68:53:70:27:44:69:5b:a2:e4:
                    ae:42:a6:77:68:6a:21:d3:41:8a:1d:9c:e8:9b:21:
                    2e:a3:78:5c:76:1a:96:c4:91:bd:4c:b8:c3:bc:5c:
                    95:60:a4:c6:85:ca:4b:ff:2b:7c:22:db:e1:1b:0a:
                    f9:33:d9:4f:d1:69:99:fd:42:dc:c5:b1:cc:d8:ee:
                    2b:7a:a9:66:14:4d:96:9a:f0:a4:25:31:a9:82:5c:
                    6c:48:54:a3:47:e4:47:89:55:b4:23:70:bb:2e:6b:
                    10:0f:7b:50:23:83:72:5e:b4:6c:38:c8:a3:c3:cb:
                    8d:80:12:75:ce:74:be:79:1d:bc:97:60:91:d9:d8:
                    96:7e:80:4b:2c:b5:60:5b:bd:db:a1:53:a0:95:03:
                    53:26:65:10:6e:54:9c:0b:c5:93:51:39:dd:74:60:
                    7c:1f:c3:a4:e2:ea:f4:c1:3b:86:a2:26:d6:bc:31:
                    2d:9b:93:9a:09:58:3d:71:6e:4a:43:de:3f:55:1a:
                    91:24:7f:02:52:db:4e:1c:e1:8f:30:20:c9:63:b7:
                    f9:0c:bf:a2:16:f7:4a:9a:69:0c:44:43:aa:0b:9a:
                    b3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A9:32:C7:28:B7:65:DE:C8:6F:B5:C6:14:BF:FF:4A:2C:FB:6C:B3
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:43:e0:76:c6:77:88:fc:37:49:5a:93:bc:79:09:05:cb:46:
         4d:c6:b3:cc:83:6e:3f:69:28:f5:58:ee:a8:fb:7b:52:89:25:
         25:fd:82:fc:6f:19:b3:1f:d8:d5:2c:62:bd:12:dd:47:ec:0b:
         64:aa:18:0c:d9:58:4b:9d:ea:9d:52:a9:20:e2:08:af:77:9f:
         6c:dc:ca:36:2b:5f:f1:ca:95:95:9c:54:69:c7:c7:ff:7c:45:
         57:a7:e5:00:d2:02:39:45:07:f8:7c:34:a6:33:2e:54:81:80:
         22:ab:07:89:ff:da:c3:1f:3b:fb:76:30:07:26:ff:8c:b6:4b:
         82:0e:33:25:a9:70:e0:4d:1a:bf:69:92:4a:5f:0d:6a:7e:15:
         8c:86:86:e5:b9:f4:70:16:c0:f0:e6:8d:9d:44:78:5d:19:5e:
         45:d3:1e:96:47:2c:7e:b7:54:ed:e5:f4:37:eb:68:dd:5d:f9:
         4c:12:9a:a9:dc:bd:01:d6:71:6c:bd:c2:07:f8:ea:57:f9:92:
         25:2a:cf:5f:43:84:b9:01:23:ac:97:d0:1c:cc:ed:e2:0e:85:
         94:27:f7:e8:56:52:1b:b9:a2:c5:ce:2b:3c:0f:5c:cc:d5:82:
         7e:cb:57:d8:7e:50:53:fc:ab:77:14:88:7f:94:c2:36:d7:2e:
         eb:f0:5d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVG9e0zMtXOgGzmwhugSWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDgwZmU2Yjk3ZjUyMjg2N2MzN2E4YzUzZjBhNThlNzcw
OWZiYzMwHhcNMjUwNzI3MTAwMTIxWhcNMjUwNzI4MTAwMTIxWjAzMTEwLwYDVQQD
EyhlOWE5MzJjNzI4Yjc2NWRlYzg2ZmI1YzYxNGJmZmY0YTJjZmI2Y2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunMlY1LQb+eznhHJcC/TkFuykOvc
Qirko9JN7t1vEkNAeNRoU3AnRGlbouSuQqZ3aGoh00GKHZzomyEuo3hcdhqWxJG9
TLjDvFyVYKTGhcpL/yt8ItvhGwr5M9lP0WmZ/ULcxbHM2O4reqlmFE2WmvCkJTGp
glxsSFSjR+RHiVW0I3C7LmsQD3tQI4NyXrRsOMijw8uNgBJ1znS+eR28l2CR2diW
foBLLLVgW73boVOglQNTJmUQblScC8WTUTnddGB8H8Ok4ur0wTuGoibWvDEtm5Oa
CVg9cW5KQ94/VRqRJH8CUttOHOGPMCDJY7f5DL+iFvdKmmkMREOqC5qzVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmpMscot2XeyG+1xhS//0os+2yzMB8GA1UdIwQY
MBaAFCXYD+a5f1IoZ8N6jFPwpY53CfvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMt
ODNhZDMxYWE0NWJmLzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kMTI4NWItZjNlNi00YmNlLTliZmMtODNhZDMxYWE0NWJm
LzEvSmRnUDVybF9VaWhudzNxTVVfQ2xqbmNKLThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUPgdsZ3
iPw3SVqTvHkJBctGTcazzINuP2ko9VjuqPt7UoklJf2C/G8Zsx/Y1SxivRLdR+wL
ZKoYDNlYS53qnVKpIOIIr3efbNzKNitf8cqVlZxUacfH/3xFV6flANICOUUH+Hw0
pjMuVIGAIqsHif/awx87+3YwByb/jLZLgg4zJalw4E0av2mSSl8Nan4VjIaG5bn0
cBbA8OaNnUR4XRleRdMelkcsfrdU7eX0N+to3V35TBKaqdy9AdZxbL3CB/jqV/mS
JSrPX0OEuQEjrJfQHMzt4g6FlCf36FZSG7mixc4rPA9czNWCfstX2H5QU/yrdxSI
f5TCNtcu6/Bdyg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 18:12:32 2025 by rpki-client