Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File:                     jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier:          hj7RJROy1/pT5uHPaBJm7TOXBc0tq4sI5j/nAhuVuSE=
Subject key identifier:   23:CE:7B:98:DA:2C:89:9B:4B:B1:A4:57:68:9D:45:33:45:6E:0D:E1
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer:       /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial:       019A0AEF07838CAFDE2A0112A315CEB1F8C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number:          07C5
Signing time:             Wed 22 Oct 2025 08:00:28 +0000
Manifest this update:     Wed 22 Oct 2025 08:00:28 +0000
Manifest next update:     Thu 23 Oct 2025 08:00:28 +0000
Files and hashes:         1: 8cHr2mkJzn1QpKoQW6YmFw7DlzE.roa (hash: t5szeV65SN4GVGDNCF4ePCjQmk1+gvyVxgvAgyz5YRg=)
                          2: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
                          3: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: OvabmZNU18JlXi2YQ7zJbgKLWTZpXil3J6kp1q8DgQc=)
                          4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0a:ef:07:83:8c:af:de:2a:01:12:a3:15:ce:b1:f8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
        Validity
            Not Before: Oct 22 08:00:28 2025 GMT
            Not After : Oct 23 08:00:28 2025 GMT
        Subject: CN=23ce7b98da2c899b4bb1a457689d4533456e0de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:de:c7:e7:6a:03:25:eb:6c:da:e5:80:d0:
                    45:65:cd:83:e8:5e:8f:86:d9:d4:e9:37:b5:4d:53:
                    ee:b0:e6:ad:7c:7d:95:02:75:a9:a4:90:b1:ab:ac:
                    32:34:92:9a:ef:f0:0e:5a:5a:27:58:8b:37:3d:28:
                    e3:50:b7:14:7c:9e:c2:b1:0a:df:eb:28:8e:ed:5f:
                    79:f3:5f:a6:72:c4:3d:6f:93:d5:1b:ec:ad:85:b9:
                    5e:6b:57:88:b9:b5:d5:1c:f1:0f:5c:61:92:63:de:
                    c0:43:d8:7e:09:bf:f4:09:a8:44:5d:be:29:9e:b8:
                    10:67:58:67:c7:2a:1e:51:0b:43:1a:d2:dd:7e:53:
                    c4:ea:f1:67:be:e9:70:5a:c6:25:52:e1:26:73:db:
                    86:d5:38:a5:15:5a:00:bb:11:0f:dc:49:fa:ec:25:
                    70:a2:a9:18:8b:68:af:5e:cd:c0:1c:32:ce:31:6a:
                    5d:ab:12:9b:33:45:24:1d:cb:da:eb:83:2d:ad:32:
                    84:69:20:1e:bd:3f:d7:86:84:0b:45:96:31:96:fe:
                    63:93:ce:f2:69:76:98:52:26:78:b5:8a:35:e5:de:
                    b3:50:8d:1f:bc:19:9f:f5:57:bf:a6:f9:42:97:84:
                    fd:94:aa:36:66:75:93:ab:15:a3:f1:b5:e8:e6:55:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CE:7B:98:DA:2C:89:9B:4B:B1:A4:57:68:9D:45:33:45:6E:0D:E1
            X509v3 Authority Key Identifier:
                keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:41:cb:d1:7a:84:83:e3:27:b4:4c:b1:c6:ec:d2:0c:78:35:
         2d:66:87:0e:49:1e:9d:e3:46:d3:13:41:76:c6:5a:f0:b6:7e:
         42:ec:e9:2c:79:35:16:05:a4:00:0b:e9:34:47:b2:e5:dd:95:
         7f:5a:d1:d4:9d:b3:6d:2f:7d:6c:15:08:06:64:9c:b9:c1:85:
         ca:6f:ae:7a:62:a5:d5:43:71:c0:1f:c8:91:ac:c0:72:14:65:
         c4:bb:cd:68:14:4e:d2:0e:e3:b6:48:7d:ff:e8:18:ad:cb:19:
         d5:f0:34:38:36:9f:95:d3:0a:f4:da:dd:d2:67:c0:35:12:d5:
         14:ec:c5:d7:aa:17:cc:57:ae:d8:46:b7:e4:22:99:e6:06:dd:
         87:b4:05:41:38:39:82:59:95:f7:06:3f:10:56:9e:c8:a2:33:
         f1:d8:b0:b9:84:dc:52:f8:89:03:ca:5c:bc:23:40:7b:3b:3f:
         d2:94:e0:33:e3:46:17:a5:80:71:31:df:f7:d3:5d:64:d6:21:
         e0:7f:a8:4c:7a:a0:d2:0e:02:d3:ab:7d:ea:d2:c5:ce:e2:18:
         a2:5b:33:6e:ed:4e:17:8d:dc:f8:c8:1e:60:bb:84:d4:e4:33:
         f8:7a:92:7e:65:7c:7d:9e:d5:d8:4a:92:d8:d6:5b:75:75:35:
         24:74:9f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoK7weDjK/eKgESoxXOsfjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZmZmMjE1MzhlMjI1NjE4MzE0NjE1ZTRmMGQwNjg4Yjdi
MGRkNWEwHhcNMjUxMDIyMDgwMDI4WhcNMjUxMDIzMDgwMDI4WjAzMTEwLwYDVQQD
EygyM2NlN2I5OGRhMmM4OTliNGJiMWE0NTc2ODlkNDUzMzQ1NmUwZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwLex+dqAyXrbNrlgNBFZc2D6F6P
htnU6Te1TVPusOatfH2VAnWppJCxq6wyNJKa7/AOWlonWIs3PSjjULcUfJ7CsQrf
6yiO7V9581+mcsQ9b5PVG+ythblea1eIubXVHPEPXGGSY97AQ9h+Cb/0CahEXb4p
nrgQZ1hnxyoeUQtDGtLdflPE6vFnvulwWsYlUuEmc9uG1TilFVoAuxEP3En67CVw
oqkYi2ivXs3AHDLOMWpdqxKbM0UkHcva64MtrTKEaSAevT/XhoQLRZYxlv5jk87y
aXaYUiZ4tYo15d6zUI0fvBmf9Ve/pvlCl4T9lKo2ZnWTqxWj8bXo5lXE1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPOe5jaLImbS7GkV2idRTNFbg3hMB8GA1UdIwQY
MBaAFIz/8hU44iVhgxRhXk8NBoi3sN1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUt
MjYxNjY2YzNhNTg5LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUtMjYxNjY2YzNhNTg5
LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUHL0XqE
g+MntEyxxuzSDHg1LWaHDkkeneNG0xNBdsZa8LZ+QuzpLHk1FgWkAAvpNEey5d2V
f1rR1J2zbS99bBUIBmScucGFym+uemKl1UNxwB/IkazAchRlxLvNaBRO0g7jtkh9
/+gYrcsZ1fA0ODafldMK9Nrd0mfANRLVFOzF16oXzFeu2Ea35CKZ5gbdh7QFQTg5
glmV9wY/EFaeyKIz8diwuYTcUviJA8pcvCNAezs/0pTgM+NGF6WAcTHf99NdZNYh
4H+oTHqg0g4C06t96tLFzuIYolszbu1OF43c+MgeYLuE1OQz+HqSfmV8fZ7V2EqS
2NZbdXU1JHSfwg==
-----END CERTIFICATE-----
Generated at Wed Oct 22 16:59:12 2025 by rpki-client