Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
File:                     J0hJVnNlSeqzsG4jqricpZk6gHY.mft (raw, json)
Hash identifier:          pwv92Lpef8XQYp6TWnQIJxxAtCcE5lqCNIp0l5qCioA=
Subject key identifier:   9A:19:97:C4:23:14:F8:A3:66:D0:81:75:6B:34:8A:37:0A:D2:92:85
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       019A722602BF6F8EF715B16D75A4C9784390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
Manifest number:          1324
Signing time:             Tue 11 Nov 2025 09:01:24 +0000
Manifest this update:     Tue 11 Nov 2025 09:01:24 +0000
Manifest next update:     Wed 12 Nov 2025 09:01:24 +0000
Files and hashes:         1: J0hJVnNlSeqzsG4jqricpZk6gHY.crl (hash: GyUOGqM2sPxvVoXUwMvHf1xRjpXmiPUDXfTsWx6xxAE=)
                          2: JSfSNBZp2sArMnNqgy7JPjlV3w0.roa (hash: AAxuDoIwBhXDcehYAfqhoDL4a0JHM/VmkCzff4ZSoTk=)
                          3: aHgUlmeQvXSLOAXmjY6OG9x7CHw.roa (hash: EkeJb1vk/DYNvMk3tNYmPq0HrdN72YN06ty6+3e7rPU=)
                          4: hOUd1wZ_zMaTKuCxsCn2r2bH2BU.roa (hash: bxwt1u/r3VzOjW3gEkeatdflQyeXrR7mqzyeYNfcLHY=)
                          5: tW9YcXZ53Rr1e1oEOmqCt5AR9Sc.roa (hash: O3S/RX4GnOSFqdUE+99ZJDVtp7vahAb9JLGw0JZrYQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:26:02:bf:6f:8e:f7:15:b1:6d:75:a4:c9:78:43:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Nov 11 09:01:24 2025 GMT
            Not After : Nov 12 09:01:24 2025 GMT
        Subject: CN=9a1997c42314f8a366d081756b348a370ad29285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:6c:58:40:b5:fe:36:d8:6d:52:41:3b:4d:
                    43:77:f2:44:c0:b9:9b:b6:a4:c3:f1:63:82:ee:06:
                    9a:be:9c:bb:44:8c:9e:fd:b6:4f:91:0c:f9:97:0b:
                    6e:f3:dc:eb:b6:6f:56:69:34:d8:5e:6f:47:e4:63:
                    02:95:61:53:f6:37:e7:ca:25:3e:0f:dc:42:af:96:
                    0f:78:01:81:96:2d:ba:78:d1:85:b2:c9:b0:d3:f2:
                    b2:14:7c:88:18:05:d7:15:e8:62:60:8b:be:e7:a3:
                    10:87:4d:a1:19:09:04:c4:06:83:54:22:73:7b:5e:
                    b0:6a:a6:6e:fc:90:c9:31:fd:83:4b:aa:5a:76:65:
                    5c:17:6c:18:d9:c3:e9:e4:59:07:1c:03:79:8a:43:
                    16:38:28:22:db:ac:3e:a6:aa:1d:4a:7c:dc:2b:af:
                    e3:7f:1c:25:5f:64:e4:cd:3c:db:90:00:b1:6a:d8:
                    48:e8:e0:d0:c2:c3:f4:15:3e:3a:d8:47:4e:4e:10:
                    64:b7:a9:3f:1a:f9:fa:60:80:5f:47:ce:94:0c:02:
                    97:98:51:65:2f:66:7c:1c:fe:72:46:a1:a3:55:90:
                    5d:99:27:1a:3f:39:f8:b1:81:36:54:bc:31:32:58:
                    88:ed:ce:20:94:03:03:3d:bc:c8:25:72:0a:29:56:
                    96:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:19:97:C4:23:14:F8:A3:66:D0:81:75:6B:34:8A:37:0A:D2:92:85
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:09:ba:51:16:82:be:b7:2f:ed:1e:23:b8:15:02:eb:4d:20:
         92:07:8c:26:d0:18:fd:d6:f9:35:3d:71:aa:38:63:6a:c5:3d:
         22:04:67:97:a1:ca:04:5d:9d:aa:34:27:e3:76:f1:f1:c0:fa:
         09:b3:ba:6a:87:78:91:25:03:eb:fa:30:de:8e:6a:57:82:14:
         92:78:7a:6a:55:0c:11:b7:53:fb:99:80:78:b5:f9:64:ef:69:
         8e:12:cf:5d:4b:b0:53:37:09:b9:25:90:64:99:ee:4e:a8:7d:
         b7:34:dd:c0:0f:0f:65:62:78:52:25:19:28:dd:d2:f2:59:75:
         bd:e3:23:c3:cc:e6:f8:76:f8:6d:2c:3a:0b:5e:7e:02:ef:85:
         91:f7:b1:ca:27:ac:b8:5d:e5:85:52:cf:4e:6c:2e:fe:18:07:
         cf:3b:67:d0:85:43:30:4b:c5:cf:61:85:80:73:cf:5a:1c:ba:
         4d:a2:64:66:19:af:23:ad:ce:12:14:4c:97:57:22:ac:a9:b6:
         ad:bd:83:00:80:8b:9f:47:16:96:3e:e6:58:4b:11:bc:1c:e6:
         af:b2:45:08:e9:b0:33:d6:dd:8c:c5:63:51:7f:b1:89:ad:30:
         96:fd:73:d2:9c:71:b0:49:f8:7e:31:75:40:77:66:c5:fb:64:
         d0:aa:a6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:44:20 2025 by rpki-client