Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File:                     jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier:          NWmX2aO4zpEkiprisPK7HfR75qfZRUUCfDeZdQZ0haw=
Subject key identifier:   0F:26:2E:10:CA:7F:96:F9:C7:6E:4F:41:1A:16:59:70:75:8B:F0:7D
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer:       /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial:       0199221E99F97F8F3FA2589B0C549DC03045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 03:00:54 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:54 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:54 +0000
Files and hashes:         1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: XTTbx5o5BBbelCFTWhi6ISpQD0QSJX2xqgC0REzBtn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:99:f9:7f:8f:3f:a2:58:9b:0c:54:9d:c0:30:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
        Validity
            Not Before: Sep  7 03:00:54 2025 GMT
            Not After : Sep  8 03:00:54 2025 GMT
        Subject: CN=0f262e10ca7f96f9c76e4f411a165970758bf07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:e0:56:89:83:4c:03:b5:c2:e9:74:d5:ae:
                    2d:db:c1:98:da:55:ad:bb:52:33:97:ee:e8:12:be:
                    a8:a8:e8:68:03:47:2c:69:ce:4e:2e:c3:55:c9:50:
                    8d:45:74:16:02:19:d3:df:f0:2c:04:59:60:47:1e:
                    cf:dd:86:5c:1c:5f:c2:37:e6:31:eb:fc:a0:e0:7a:
                    e4:03:21:cb:e0:5f:b2:49:bb:19:56:e5:da:f4:2f:
                    44:ee:6c:8c:e0:9b:4d:14:1a:24:6f:3d:cc:91:31:
                    c0:2b:80:1e:dc:0d:d0:5c:ad:b3:ed:d6:d4:af:6e:
                    4c:52:10:e6:9a:ef:5c:32:1a:e6:ff:6c:45:3f:9b:
                    a0:8e:43:e9:02:26:9b:d4:fe:b1:9a:73:04:a9:b3:
                    74:fe:d2:6b:07:34:c9:cf:2e:6f:ea:5a:ea:55:47:
                    69:71:aa:67:13:78:14:dc:d1:22:47:16:5d:b3:c4:
                    0d:c0:01:54:a8:7a:24:c8:5c:04:ff:88:20:3f:e8:
                    44:f5:98:1b:6f:c5:60:d2:6c:46:8a:fe:50:7f:54:
                    58:0b:b8:1b:c3:81:44:89:9f:cc:56:85:2d:43:08:
                    41:c3:1f:3b:32:37:bb:77:2a:5c:71:c3:bf:61:86:
                    9e:95:c7:23:a0:1a:8d:f5:82:af:8d:ca:ee:b9:c6:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:26:2E:10:CA:7F:96:F9:C7:6E:4F:41:1A:16:59:70:75:8B:F0:7D
            X509v3 Authority Key Identifier:
                keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ec:10:85:3f:01:5a:0c:75:37:0c:3f:cc:23:d0:38:71:b7:
         38:5e:bd:b9:87:28:45:f6:bf:49:a9:30:5e:91:44:00:9b:b2:
         e9:58:42:3e:cd:9e:e1:6c:95:f0:90:99:df:00:7e:33:e2:56:
         b1:b0:05:05:d9:aa:87:36:e3:12:eb:3f:d4:82:52:13:52:86:
         a6:ce:03:9f:08:f2:a9:fe:9d:af:17:93:06:b9:fb:98:93:e5:
         da:c7:ef:f4:4a:ec:e8:06:86:8d:10:ad:e6:c8:85:ba:28:fd:
         84:7d:cf:80:fc:43:d4:7a:34:fb:68:0e:d5:d8:da:7f:1d:d3:
         43:92:36:62:f3:5d:7f:2f:a1:10:a4:22:23:8c:0a:26:73:a1:
         23:75:f1:ce:c1:c0:f4:9d:09:97:8f:6f:d1:1c:d4:2c:d8:b3:
         3f:0a:2c:50:b6:f4:13:82:f1:09:c9:18:d1:a3:09:ac:75:fd:
         7b:05:20:f1:ee:76:9d:b2:6f:a5:41:b3:fe:39:27:c1:0a:fe:
         50:a1:a4:0d:94:29:32:aa:97:aa:57:66:a8:63:8d:e7:67:95:
         6c:8d:1c:a8:f8:45:fd:3c:ec:44:88:91:d4:fb:62:c5:e6:99:
         f1:b9:bd:4d:32:2c:b3:93:54:20:a5:ae:5d:3f:7a:d2:98:4c:
         b0:f6:0d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHpn5f48/olibDFSdwDBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTJiMjY5ZWI3MDNhYmMxMjJkNDc4NTEzYjA4MTcxZDRj
OTZkYWQwHhcNMjUwOTA3MDMwMDU0WhcNMjUwOTA4MDMwMDU0WjAzMTEwLwYDVQQD
EygwZjI2MmUxMGNhN2Y5NmY5Yzc2ZTRmNDExYTE2NTk3MDc1OGJmMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtbgVomDTAO1wul01a4t28GY2lWt
u1Izl+7oEr6oqOhoA0csac5OLsNVyVCNRXQWAhnT3/AsBFlgRx7P3YZcHF/CN+Yx
6/yg4HrkAyHL4F+ySbsZVuXa9C9E7myM4JtNFBokbz3MkTHAK4Ae3A3QXK2z7dbU
r25MUhDmmu9cMhrm/2xFP5ugjkPpAiab1P6xmnMEqbN0/tJrBzTJzy5v6lrqVUdp
capnE3gU3NEiRxZds8QNwAFUqHokyFwE/4ggP+hE9Zgbb8Vg0mxGiv5Qf1RYC7gb
w4FEiZ/MVoUtQwhBwx87Mje7dypcccO/YYaelccjoBqN9YKvjcruuca/NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8mLhDKf5b5x25PQRoWWXB1i/B9MB8GA1UdIwQY
MBaAFI8SsmnrcDq8Ei1HhROwgXHUyW2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kYmQzNWQtMWUzYS00NTkyLTg0ZjMt
NmVmZjE4YTJlYTQ0LzEvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kYmQzNWQtMWUzYS00NTkyLTg0ZjMtNmVmZjE4YTJlYTQ0
LzEvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASewQhT8B
Wgx1Nww/zCPQOHG3OF69uYcoRfa/SakwXpFEAJuy6VhCPs2e4WyV8JCZ3wB+M+JW
sbAFBdmqhzbjEus/1IJSE1KGps4Dnwjyqf6drxeTBrn7mJPl2sfv9Ers6AaGjRCt
5siFuij9hH3PgPxD1Ho0+2gO1djafx3TQ5I2YvNdfy+hEKQiI4wKJnOhI3XxzsHA
9J0Jl49v0RzULNizPwosULb0E4LxCckY0aMJrHX9ewUg8e52nbJvpUGz/jknwQr+
UKGkDZQpMqqXqldmqGON52eVbI0cqPhF/TzsRIiR1PtixeaZ8bm9TTIss5NUIKWu
XT960phMsPYNCw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:02 2025 by rpki-client