Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
File:                     JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft (raw, json)
Hash identifier:          MeZACno+d9UNlNGG/LwVolPESJZvPOQU9NaYj7e7eJM=
Subject key identifier:   7D:51:AE:09:2F:40:C4:D1:71:DA:3A:0C:BC:51:83:2A:DE:96:91:45
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Certificate issuer:       /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial:       019A089285C67E310BF041179C6DA19CAED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
Manifest number:          16F4
Signing time:             Tue 21 Oct 2025 21:00:11 +0000
Manifest this update:     Tue 21 Oct 2025 21:00:11 +0000
Manifest next update:     Wed 22 Oct 2025 21:00:11 +0000
Files and hashes:         1: 5QHAsQaUMAZIN1n6-pxK5K91a3o.roa (hash: AkFm08Afa/vhsA4n14Vo1RO04eK70G8MZ4yY3wwGuE0=)
                          2: 8__4CSysP9ewpgBTT4RjqVsmoag.roa (hash: 6Vh8B3R0vOjHWshOtYFXsA9V6+E+ovifthcqX5LH5AY=)
                          3: H0T0W0xTBnh83HIo130u3lMx0z8.roa (hash: EnvalVHH06GgGOutMJeFEacXQsa/Sw9Z2kcRlIH1HNM=)
                          4: HUjFpkDkE9aRW0oytyocQloUy9o.roa (hash: mq8+b8jC5/4J8LuF6BxD7TMcx7W9gEcExeXo6od8rqM=)
                          5: Hsa9B01wYzQuVgyvO2-bkNj0_wY.roa (hash: DdezXk60i94ZF2OulsTAeuZBcNuFWBHgNv3S98ro9B8=)
                          6: JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl (hash: gQaJbZdWwynjE9UbsfK1yMqs8aG9srVZKuKPDHDzSGc=)
                          7: KzhPBfzs40BMsYPfoaIPI29P5yo.roa (hash: 95zWAjg8ne0IL6qdhZTUSVplXSRiePGkqfZ93e5qlhw=)
                          8: dwkhaAERSm6uhMOz5nNpmKDQ82E.roa (hash: LJZ+/v8dXlJSBiFG/37Ys6az1iYi7KSm0TcOpKjllW4=)
                          9: uZ2FUQIy4-BglbDIW_Uj_e4ZY2c.roa (hash: cy6Tl3qgTi1iMP0dxF44E6e2zGcGBO8MstsvupGrtLU=)
                          10: wOiqWlIp7qHzaxKGCyvAK8UmpwI.roa (hash: hbL9mJeeAk3YwSAmT6WsY7K2Gkz/S4wOy9jWJcZcNps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:08:92:85:c6:7e:31:0b:f0:41:17:9c:6d:a1:9c:ae:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
        Validity
            Not Before: Oct 21 21:00:11 2025 GMT
            Not After : Oct 22 21:00:11 2025 GMT
        Subject: CN=7d51ae092f40c4d171da3a0cbc51832ade969145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:27:0c:d6:c3:25:f6:e6:97:65:43:a5:75:d7:
                    84:55:49:1b:b9:b9:c7:9b:a7:16:51:27:2e:06:15:
                    63:9c:17:09:46:f3:fe:08:0b:78:c5:72:bd:c2:0c:
                    a9:a9:74:39:25:76:bc:87:10:2b:00:f8:b6:e7:64:
                    59:35:76:e5:3e:44:8d:d7:da:69:ba:8f:12:f3:fb:
                    dd:b3:ee:19:34:f4:b7:4c:dd:79:b9:5e:41:09:ac:
                    aa:eb:d4:95:0d:b9:c0:dd:85:d7:01:6a:16:29:32:
                    c2:13:e0:d9:b6:bf:dd:70:22:60:54:a9:bc:00:5a:
                    e2:f4:c7:d7:96:17:02:cd:fa:a5:5e:17:98:ab:a9:
                    43:b0:f6:44:ef:06:a8:68:53:9b:a8:20:73:c2:fe:
                    06:c9:04:9a:6f:0e:bd:da:c1:df:6f:b3:b9:e3:56:
                    59:fd:19:5d:5e:7d:d8:2b:a4:04:20:23:90:8d:20:
                    c9:e6:37:f2:ed:5a:89:34:06:bd:a4:cf:c5:31:77:
                    b3:80:bb:8c:ce:c8:25:ca:67:41:06:6c:83:b9:8a:
                    be:ec:57:62:58:56:2e:db:3a:2c:95:c2:a2:47:a9:
                    29:f4:77:53:da:eb:1d:77:bf:4d:ef:84:6c:90:1a:
                    4d:37:7d:98:7b:16:59:a6:29:51:7d:a9:ef:45:95:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:51:AE:09:2F:40:C4:D1:71:DA:3A:0C:BC:51:83:2A:DE:96:91:45
            X509v3 Authority Key Identifier:
                keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c8:62:00:ca:4e:56:c2:81:65:ba:15:59:9f:c1:51:16:e1:
         6f:5d:06:be:89:df:91:d9:11:e7:2e:47:78:5d:94:7f:ca:40:
         50:61:31:fd:18:67:3b:ca:78:f7:06:d2:4d:5c:4d:51:b1:c7:
         ab:d6:ef:48:fc:ff:d3:69:11:be:d6:ba:6a:8b:96:db:32:eb:
         17:28:7d:f8:29:97:55:15:b4:2a:14:06:05:82:7b:37:97:02:
         1b:e9:94:fe:3d:01:1b:91:04:77:45:aa:9c:43:1c:17:a0:ff:
         f2:a1:2b:ae:ec:3d:7d:21:88:fd:43:e4:a2:b7:5a:c6:47:bb:
         ac:2a:c5:0a:3a:4c:96:d3:37:c5:10:7f:53:24:01:81:ba:c3:
         16:8c:18:2d:0c:5b:76:1e:bc:82:5a:62:cd:a4:26:6f:79:6e:
         c0:34:83:cc:17:8c:3b:de:f3:c0:e0:ae:41:01:05:52:a8:dd:
         6a:c2:e9:f0:3f:6b:11:fa:4b:63:d5:0f:bd:e3:5a:12:a5:ff:
         d1:26:0f:6b:d8:4d:2f:14:e9:26:8c:01:02:6a:76:8c:0e:71:
         c6:c2:e2:c0:a3:6e:a4:a8:09:fe:e4:be:f4:47:08:9a:84:63:
         96:f2:05:be:cd:30:05:35:9f:60:09:e7:08:a2:a9:21:f3:bb:
         e4:f2:55:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:29:07 2025 by rpki-client