Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
File:                     J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft (raw, json)
Hash identifier:          lyiPtZi6rEwIXcHYetLtsGEEfVfAHJQgMJY2Un5XVaI=
Subject key identifier:   C2:A3:3E:12:E2:45:2A:EC:98:A9:20:92:3B:93:6D:7F:24:C0:38:4C
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Certificate issuer:       /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial:       019A5C7AC396D75FA74DEBFD3B43E2D5AD5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
Manifest number:          1716
Signing time:             Fri 07 Nov 2025 04:02:20 +0000
Manifest this update:     Fri 07 Nov 2025 04:02:20 +0000
Manifest next update:     Sat 08 Nov 2025 04:02:20 +0000
Files and hashes:         1: 4FXB0W838e2KDL7-L_x6UPsRNAQ.roa (hash: LK8SbOkeipWhuTJTuor/1UupMV/BQue0Yrv+JoGi1Bc=)
                          2: J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl (hash: 5gdozenoJ6XeOKBfzZfbj7ctXJ8annKeKtCtEf6eGIw=)
                          3: VWEs-xVV5ND0GJkPhbytzQmCX2s.roa (hash: Lvidk3VL8SGZhZHfYCyzYvXPKQ2gZ6B2D2mdtv2GK9E=)
                          4: l5YxBP66J268QPpOfOKh6pf_dA0.roa (hash: VfFGld2mgne36x9HBpf5GPD2Bw0k6fbkaTy5yNO7fDc=)
                          5: vTTN7Jd0zPqa91uLSy540B9C-ks.roa (hash: OZfHJYsEdowOMA253v79GTAv8RCtV3bvgVGY0+xVsr8=)
                          6: z6ZchbUwtdpz1UJIozdf3Vyzbas.roa (hash: 9jBz1RUdaL6PLVqIdtXh6rvEfUHptMVuoQ/ptnKIDQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Nov 2025 04:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:5c:7a:c3:96:d7:5f:a7:4d:eb:fd:3b:43:e2:d5:ad:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
        Validity
            Not Before: Nov  7 04:02:20 2025 GMT
            Not After : Nov  8 04:02:20 2025 GMT
        Subject: CN=c2a33e12e2452aec98a920923b936d7f24c0384c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:47:be:c8:00:86:5d:59:25:e2:ec:8b:3f:
                    6e:3a:29:b2:01:9f:da:c6:16:3d:42:65:09:b6:56:
                    36:e2:e4:3c:80:7c:cd:74:ae:1d:71:70:cc:1c:c1:
                    87:0c:e9:12:c2:c2:a8:88:21:5c:3b:c8:e3:94:0f:
                    95:e6:5b:69:ee:6e:89:7c:ca:9f:94:fb:8c:06:d7:
                    59:64:7a:2f:da:c3:38:45:a6:91:c8:8c:ef:75:fd:
                    cc:09:e3:c0:2a:c7:42:e1:16:ba:86:03:78:21:3f:
                    cf:f3:3d:76:c0:f9:fe:ef:e3:90:03:09:47:69:50:
                    7b:ee:fb:1e:86:99:d2:16:0d:11:64:24:e7:8c:49:
                    b3:a6:db:7a:b2:8e:bd:ae:68:3e:c3:5a:96:4f:3d:
                    e5:6f:6b:fc:69:d5:20:90:7e:36:77:18:0c:12:e4:
                    98:d8:e7:eb:b7:7c:b8:58:ff:bf:c8:99:f7:37:00:
                    63:44:f8:f7:d7:cd:0e:07:51:68:05:3b:8a:72:bb:
                    3a:ca:8f:27:9f:d1:08:3b:5d:ca:39:91:6c:fc:de:
                    50:b0:f1:49:15:d8:a0:f3:97:a6:bc:79:a9:8c:7a:
                    97:ab:71:35:1c:88:4e:9f:60:4e:8f:91:61:b4:b3:
                    73:19:cb:63:21:0d:2b:9a:b8:d9:f5:6d:be:de:af:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A3:3E:12:E2:45:2A:EC:98:A9:20:92:3B:93:6D:7F:24:C0:38:4C
            X509v3 Authority Key Identifier:
                keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:65:61:a3:33:a5:10:1b:98:27:a0:7d:3a:53:40:a9:c6:29:
         dd:e4:16:95:aa:ec:1e:7e:c0:ab:e1:0b:39:e8:a9:9e:02:e1:
         1d:29:d6:0c:1b:3f:80:ab:c8:72:7f:55:d9:de:de:d5:0f:d1:
         63:b0:0c:e8:30:88:14:74:a0:36:ad:fe:75:fe:61:2b:e1:d6:
         34:03:f3:e4:a0:63:fb:50:8e:7d:e9:1e:23:8f:9f:4d:bc:0a:
         48:e6:f6:78:11:eb:ef:d0:9e:4b:36:f0:1c:8f:62:bd:ec:7d:
         62:d9:6a:55:34:5b:04:34:42:14:d2:f0:ce:cc:36:43:65:0a:
         a8:46:d8:1a:60:f6:50:56:1a:cb:23:89:e7:a0:75:e2:85:2e:
         7d:e0:9d:da:3e:82:9e:e8:f0:c3:90:dd:c8:60:f0:c1:9e:53:
         06:8c:ca:df:67:d0:94:52:b7:d7:29:40:59:1c:30:a6:24:cb:
         0b:7a:b5:49:e1:c8:a5:52:35:3e:a2:7b:73:18:83:93:36:aa:
         a5:60:d8:95:01:09:68:a1:37:8b:b8:fe:8d:31:8d:dc:4e:2f:
         da:32:79:9c:80:b2:d4:99:e5:07:77:e1:0c:05:81:46:c1:8c:
         fc:46:87:37:ca:3d:ba:fc:53:4a:20:87:6e:79:00:f1:1b:0e:
         11:f4:72:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 14:07:21 2025 by rpki-client