Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File:                     JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier:          ojg7poF6w7NUPecyXagaPVrJHs8gVtzpC3ihoJylZYI=
Subject key identifier:   A7:A0:F3:B0:3A:3A:E7:60:E5:F1:3C:1C:52:73:DD:80:E2:18:85:82
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer:       /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial:       019A194FD4AF4FB8C5691487F754E4137C33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number:          16F0
Signing time:             Sat 25 Oct 2025 03:00:53 +0000
Manifest this update:     Sat 25 Oct 2025 03:00:53 +0000
Manifest next update:     Sun 26 Oct 2025 03:00:53 +0000
Files and hashes:         1: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: lGw6UekzwkaaXkSBJHdVODAgkMsoieUpXgL8tVfyteE=)
                          2: r8Obi9IFhGpTy_Fq_kKt7tzU_pA.roa (hash: aKaPCyYUlKajFN86VFdggb+LUFUQbQdhAkrOshlrb08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:19:4f:d4:af:4f:b8:c5:69:14:87:f7:54:e4:13:7c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
        Validity
            Not Before: Oct 25 03:00:53 2025 GMT
            Not After : Oct 26 03:00:53 2025 GMT
        Subject: CN=a7a0f3b03a3ae760e5f13c1c5273dd80e2188582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:d7:da:b4:10:11:9e:23:f8:a3:82:1a:99:
                    d0:b7:43:ed:22:28:60:b4:6e:0c:56:23:49:00:53:
                    27:2a:f2:2d:27:72:40:60:1e:87:fb:aa:af:13:24:
                    72:df:6f:16:f7:68:50:11:71:8b:c1:27:df:15:d8:
                    fe:35:17:43:25:6c:ad:67:c5:95:32:13:92:93:95:
                    d7:01:c2:0b:da:87:2c:ee:7c:b9:61:7d:d5:cc:92:
                    ac:b2:95:c0:00:8c:6a:d0:fb:0f:e9:59:76:b8:ba:
                    db:8d:f4:5c:a5:ba:b3:48:38:da:75:85:09:c7:b4:
                    4f:fd:b2:42:2c:a5:ea:1f:1e:92:1c:e7:a5:72:5e:
                    50:1d:6c:30:c4:bc:95:a0:94:c2:6a:0c:60:a3:65:
                    06:ac:2a:b2:08:3c:9c:79:37:87:30:45:14:09:66:
                    ed:b6:af:b0:27:18:f3:95:55:2a:86:8d:fa:f6:03:
                    5a:9d:e7:fd:f8:e0:70:93:99:32:b7:44:f4:a0:84:
                    e8:ba:3e:a1:04:9c:15:84:ef:1d:f0:e5:9d:eb:8d:
                    b9:c9:fd:c2:43:c1:76:2f:24:8d:49:70:0b:b7:ab:
                    82:ef:d6:bc:21:85:f2:a5:37:36:8d:c8:48:1c:cb:
                    4b:6d:e9:42:7d:3b:f1:46:ff:ab:41:67:91:11:1b:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A0:F3:B0:3A:3A:E7:60:E5:F1:3C:1C:52:73:DD:80:E2:18:85:82
            X509v3 Authority Key Identifier:
                keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:83:31:24:1b:e2:3c:2f:88:71:43:a9:e0:0a:58:24:90:16:
         71:b6:b8:ba:ea:90:eb:52:b7:fa:06:ff:45:0d:d8:ce:18:86:
         6f:0a:6a:56:a2:ec:6e:f1:dd:2e:68:af:0e:e3:d8:52:bb:72:
         18:7d:8a:f4:64:ab:d5:12:a0:cb:d4:a1:df:ba:b7:5b:f4:c4:
         0a:2e:8e:b1:00:05:59:b1:c4:54:59:74:08:3f:b1:e3:0e:73:
         b5:0b:ee:34:cd:b8:22:e9:69:0a:ec:17:af:a8:b5:ff:cd:4c:
         66:0f:30:5c:63:70:66:ea:63:31:53:34:b8:21:59:11:65:01:
         0b:6a:e1:96:01:90:a3:ca:3f:b9:38:eb:28:12:74:95:8c:f2:
         9a:bf:ac:d3:6d:d3:8a:fb:08:85:85:d5:bf:08:98:ab:90:ea:
         8b:11:77:4b:2c:ab:d3:fb:73:ca:25:52:ef:30:64:e1:26:be:
         d1:c7:44:94:fd:96:5b:5e:0b:8d:80:5c:5f:4c:e9:b1:d1:1d:
         b3:85:b6:d7:7b:76:86:89:07:f7:b2:a6:c9:94:4b:cf:27:32:
         1a:7f:7e:15:f0:b2:3f:d3:b4:99:a9:6a:c5:7c:65:96:33:0b:
         63:1a:26:7f:e3:88:19:2c:91:c3:8e:9a:23:21:08:3b:96:b5:
         47:13:88:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 05:36:00 2025 by rpki-client