Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File:                     jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier:          qtor1nATRfznk8mtqaYu8/jFQgjWRTiY4PwroewONMo=
Subject key identifier:   19:B2:29:9E:81:9F:EA:CC:46:5D:12:5B:C5:EB:63:BA:AB:27:E7:B5
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       019A1CF595B4378035970715B6739C08FB47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number:          014F
Signing time:             Sat 25 Oct 2025 20:00:47 +0000
Manifest this update:     Sat 25 Oct 2025 20:00:47 +0000
Manifest next update:     Sun 26 Oct 2025 20:00:47 +0000
Files and hashes:         1: CfeQnBnwZnkX1exlA_8E_9J0HQY.roa (hash: zgoZGw80fZLZ+LHAElH5ez4Hyw5+xxVl0f9aIIP8B/0=)
                          2: acQ6lYQTZtPRww8nQnrYG_NCvIc.roa (hash: iGzqEuditXbBC1KhmCdk/H/HOvF/nSKYsyWwNpzoQME=)
                          3: hYZifB394Q_fg_dn2DSKA_YIZwA.roa (hash: qAci8Pygint2lrSaNgNslvSojUdYL0XMttlZXK/07DQ=)
                          4: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: 0dPQn32cemK+t74yZiT9wHpwnKG+AgDAMVjN24olsOI=)
                          5: uIJIuuAnt6td9AqkKzjwQT857_0.roa (hash: A6x0e2CvG+/bTGJF3SyM7Q0bPdqE0EXH0TDiPVe/x1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:f5:95:b4:37:80:35:97:07:15:b6:73:9c:08:fb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Oct 25 20:00:47 2025 GMT
            Not After : Oct 26 20:00:47 2025 GMT
        Subject: CN=19b2299e819feacc465d125bc5eb63baab27e7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:89:79:f1:fa:25:b1:4b:95:55:c6:5d:41:
                    f7:83:d6:d7:f6:4f:05:e8:f1:6f:78:be:81:a3:b8:
                    54:8a:d8:fe:30:41:24:2f:7f:58:a5:c7:06:8f:6d:
                    06:87:1d:58:9e:60:3d:31:88:6b:f3:ad:7c:45:e7:
                    59:9c:cd:1e:5f:7b:18:a2:72:fc:96:66:e0:df:b8:
                    a3:38:5d:75:49:53:f9:69:06:cd:a1:ca:58:dd:70:
                    b1:0f:6b:0a:75:38:df:ec:ab:78:4e:a0:54:29:2c:
                    a5:6c:f3:eb:76:c3:5d:6d:34:e3:40:97:9c:42:4a:
                    ab:99:9d:27:fd:dc:1a:b0:4a:6e:32:75:c0:59:19:
                    bd:74:84:ed:c4:45:1c:78:2a:85:d5:3f:35:37:1d:
                    fa:be:45:ea:b5:87:4f:86:21:b7:52:7a:a6:52:ad:
                    20:9a:0d:0e:89:31:3b:3c:c4:6b:96:62:6c:0b:df:
                    b3:8b:7c:c7:ef:59:a2:6e:1e:6c:6a:84:08:18:52:
                    ed:05:4a:2c:3d:34:90:5a:7a:88:d7:d8:c5:77:36:
                    be:43:0d:f5:7f:da:ae:5d:ac:a1:db:d1:85:92:e1:
                    c1:00:80:6a:b2:8d:eb:ef:59:60:a0:87:f7:a4:7d:
                    43:50:26:a8:ef:7a:45:f2:8d:d4:93:c7:87:0e:ce:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B2:29:9E:81:9F:EA:CC:46:5D:12:5B:C5:EB:63:BA:AB:27:E7:B5
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cc:b9:34:2f:7d:b1:dc:f9:69:09:34:2c:0c:66:ac:47:ea:
         0b:9e:a0:0e:e0:a9:f9:c4:a2:ea:37:22:6b:26:46:c5:00:1a:
         10:be:e0:7b:0b:ca:7b:04:50:26:d0:c0:13:26:79:fa:56:2d:
         7b:85:85:c6:1f:9c:87:bb:65:4e:d8:8c:c4:9e:0f:aa:fb:26:
         e2:d5:a5:24:6a:5d:d3:1b:ce:cd:5d:20:47:06:82:cf:81:b6:
         93:bd:15:cc:5a:9a:e5:2d:65:e2:46:8d:da:01:28:96:be:ab:
         d1:2b:b9:94:93:b8:a7:bd:44:eb:ec:57:eb:f8:9c:e2:ad:d1:
         63:07:c3:93:b4:7d:fd:7c:29:75:32:1b:51:2f:fe:97:4a:5f:
         61:d0:00:20:33:6f:50:5b:54:e7:f8:10:76:58:40:37:52:db:
         92:06:42:c9:ef:75:20:88:af:4e:10:da:d3:8f:67:ec:1f:24:
         42:d3:71:17:99:ad:f5:9b:5e:2a:8d:b9:e0:6e:0f:1e:ce:a0:
         c4:d1:e1:5c:04:f2:fe:11:6b:52:d1:5c:ee:a5:64:66:0d:48:
         ae:12:d8:77:6b:3c:1f:9d:29:76:90:c4:02:ec:fc:42:04:b3:
         09:8f:89:2b:7d:29:37:c7:db:c2:c6:a6:e1:5f:10:5b:4f:e6:
         0b:9b:1c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:50:42 2025 by rpki-client