Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
File:                     Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft (raw, json)
Hash identifier:          yukry0YD/DRJwe0r1OUkBbP5kiCYS90pCeJsLKLvP/8=
Subject key identifier:   E2:FD:81:07:F1:E7:75:CF:04:C3:23:9B:F2:0B:69:C6:79:37:73:C1
Authority key identifier: 26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45
Certificate issuer:       /CN=26f977779e908366dd2460e3a6f78ea00022d845
Certificate serial:       019A0FDEDCEE9F14851A8B97EC7C595B9947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
Manifest number:          039C
Signing time:             Thu 23 Oct 2025 07:00:54 +0000
Manifest this update:     Thu 23 Oct 2025 07:00:54 +0000
Manifest next update:     Fri 24 Oct 2025 07:00:54 +0000
Files and hashes:         1: Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl (hash: UPvRtbliuQNldPq4T/EVWZmNXuU3MTTPmsOR7zwe2Vk=)
                          2: Z8Jt0sta3A1LBMUR7NvayheVQNw.roa (hash: 8TbM0y/TLfXPDw9pjoFKLa5IZljcgBMxAI1pmS1uqtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0f:de:dc:ee:9f:14:85:1a:8b:97:ec:7c:59:5b:99:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f977779e908366dd2460e3a6f78ea00022d845
        Validity
            Not Before: Oct 23 07:00:54 2025 GMT
            Not After : Oct 24 07:00:54 2025 GMT
        Subject: CN=e2fd8107f1e775cf04c3239bf20b69c6793773c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:1f:44:22:24:17:19:63:77:d4:51:37:4f:
                    fd:e2:4e:aa:f6:6c:69:dd:07:69:35:7f:63:97:bf:
                    9f:e0:28:23:4b:98:8a:e0:d2:57:95:0a:7e:ca:8b:
                    94:f4:d7:87:80:e5:e5:1a:c0:59:72:08:da:38:08:
                    34:87:33:6e:14:1e:29:e9:3b:b2:89:d7:7b:db:8e:
                    1a:fd:d2:ab:8c:23:c4:42:d1:c6:b2:a3:b5:9b:1f:
                    e5:1e:42:5c:90:c5:7a:f3:67:b7:eb:21:60:70:a5:
                    ce:f3:3a:af:ff:a7:2f:f7:41:d8:19:ea:45:0a:c5:
                    06:2d:5c:2a:10:c2:00:1d:f5:7b:ed:27:7e:90:e8:
                    2c:06:a1:12:11:a1:82:0c:e5:39:3e:f1:f8:54:0a:
                    e7:36:3f:d3:7e:a5:6b:2d:88:a3:1b:45:c8:02:53:
                    a6:8e:34:aa:3f:8b:df:90:cb:b0:de:78:1f:c2:eb:
                    7a:c1:98:30:c2:1f:41:91:65:38:4d:d6:43:61:06:
                    75:ad:c3:83:59:ff:53:42:9a:95:4a:2d:74:6f:43:
                    0e:47:8c:a0:9f:d1:cd:5e:9f:2b:16:5f:eb:93:c6:
                    6b:ac:95:e2:4b:b1:e4:2a:63:2b:7d:26:f9:e4:0c:
                    3a:02:06:dd:f0:73:5a:02:e4:fb:3e:ad:9b:3f:dd:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FD:81:07:F1:E7:75:CF:04:C3:23:9B:F2:0B:69:C6:79:37:73:C1
            X509v3 Authority Key Identifier:
                keyid:26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:0b:51:c0:2c:5a:ff:07:dc:01:1d:c9:98:6c:b5:c6:fb:
         2d:a5:55:34:75:e5:43:75:f1:1d:d4:e1:80:07:59:4f:cf:05:
         bd:32:89:fa:f9:f7:c1:fb:cc:a6:ae:f5:f8:1b:43:c0:07:bb:
         24:44:b9:70:45:38:5b:07:d3:c7:13:68:e4:40:59:62:a5:f8:
         d1:86:11:41:6f:ce:07:bd:73:b7:25:a1:b0:b8:00:f9:9f:a8:
         ab:41:c1:c7:fa:6c:e8:ff:0c:89:e5:29:11:99:79:f9:7e:5a:
         a8:b9:c1:6b:e7:2d:5f:a2:fd:e8:88:54:7f:b4:43:73:95:e1:
         2b:bd:23:f5:9f:13:ec:d1:df:1d:05:ea:1a:3b:62:b0:43:ca:
         2c:83:b4:e0:41:27:f6:56:13:11:45:a7:07:6a:ff:11:b5:58:
         b3:33:b2:ca:65:9d:d3:23:66:88:5d:27:cc:bd:04:50:0e:8b:
         67:ae:60:fb:1f:db:29:aa:f0:50:b7:47:5b:4b:5e:3b:cc:d7:
         db:f0:85:21:66:29:7a:df:58:e1:ef:21:4d:0e:cb:0b:0d:fb:
         e8:80:bd:ae:36:53:33:ef:b6:72:84:72:af:80:6d:15:44:71:
         7d:78:9c:55:bb:fb:4c:8e:e8:c1:c6:fd:ed:b7:52:3b:63:c7:
         68:c0:cf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:41:36 2025 by rpki-client