Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
File:                     0jR5jgcS8VUpLTIR98RHIjzNSaw.mft (raw, json)
Hash identifier:          wVfk7QdyWuqDfEoJHtvw8zfhHf710c6O+F4VNPHQ/CA=
Subject key identifier:   FB:71:B6:4A:A2:9A:CF:04:37:57:13:69:55:84:E9:87:3D:F4:46:73
Authority key identifier: D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC
Certificate issuer:       /CN=d234798e0712f155292d3211f7c447223ccd49ac
Certificate serial:       019A2C328492D9D1996F588926B42C5CC776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
Manifest number:          141B
Signing time:             Tue 28 Oct 2025 19:01:39 +0000
Manifest this update:     Tue 28 Oct 2025 19:01:39 +0000
Manifest next update:     Wed 29 Oct 2025 19:01:39 +0000
Files and hashes:         1: 0jR5jgcS8VUpLTIR98RHIjzNSaw.crl (hash: 9KJyojP8aP74nCEJjIHoFjZdsYxhCm9c29HNxFh5RTM=)
                          2: 7i6CkxLW0y4-Eb1zqmEq2DrgTXo.roa (hash: 9coWzyh+KYo6PjWXvZi4r37a7LcyA66ZeCRl9p/oIqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 19:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2c:32:84:92:d9:d1:99:6f:58:89:26:b4:2c:5c:c7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d234798e0712f155292d3211f7c447223ccd49ac
        Validity
            Not Before: Oct 28 19:01:39 2025 GMT
            Not After : Oct 29 19:01:39 2025 GMT
        Subject: CN=fb71b64aa29acf04375713695584e9873df44673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:11:06:2e:37:22:b1:9c:07:14:52:d3:d1:a8:
                    08:32:26:50:a8:f3:c2:0a:40:b6:c5:b8:37:52:be:
                    ea:63:25:69:0a:89:db:3f:20:d8:19:9e:90:9b:eb:
                    35:e9:fa:9a:76:47:b4:57:4c:52:aa:a5:c8:ba:fc:
                    9c:53:1c:2e:c2:f4:a5:a8:d3:40:85:1c:db:57:f2:
                    13:7e:b3:c0:33:fa:de:5f:e9:77:20:ca:87:b2:be:
                    b3:8f:c4:41:05:5a:ec:40:72:21:7c:e5:ef:38:a9:
                    20:6b:c0:fa:50:da:7f:64:e3:88:a1:2d:f6:f0:ce:
                    b7:63:60:57:3d:f8:49:5a:19:61:86:3f:80:4b:37:
                    db:69:a9:26:0e:4a:f9:39:95:69:84:f2:11:3f:5a:
                    23:0f:61:8d:0e:db:0e:5a:a6:a5:33:e5:8f:23:5d:
                    91:5b:e4:fb:b6:0e:a8:47:97:c0:04:5c:dc:33:cc:
                    0e:e6:01:8d:d8:85:35:92:21:1b:3b:69:23:8e:01:
                    84:07:29:cf:45:96:a9:54:a1:be:ba:0d:3c:ad:e7:
                    a8:c5:68:b4:ca:43:6d:d7:e0:51:1c:f4:47:4e:f6:
                    d4:2d:db:c3:6c:25:26:1a:3e:c8:d8:4b:f7:72:6d:
                    f9:cf:ad:5d:10:97:20:74:ec:ac:5a:55:34:1b:99:
                    68:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:71:B6:4A:A2:9A:CF:04:37:57:13:69:55:84:E9:87:3D:F4:46:73
            X509v3 Authority Key Identifier:
                keyid:D2:34:79:8E:07:12:F1:55:29:2D:32:11:F7:C4:47:22:3C:CD:49:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jR5jgcS8VUpLTIR98RHIjzNSaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c9ddc-3191-44b3-88ba-82f7b99c5467/1/0jR5jgcS8VUpLTIR98RHIjzNSaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:85:2e:7e:a4:82:37:92:08:6e:f2:31:91:7f:01:b4:56:d9:
         23:7c:32:00:7e:fe:7b:87:43:61:07:41:72:21:84:35:1e:b4:
         83:5a:85:5f:46:fa:98:7f:3b:e9:b0:48:ec:f0:cd:6d:5c:f0:
         04:56:d0:88:58:e8:ed:22:e2:f3:df:53:41:dc:da:4a:98:3f:
         a8:06:89:75:a0:af:0e:be:79:6d:4b:34:9f:0f:20:5d:01:dc:
         ef:35:ba:83:24:54:f6:65:6d:f7:10:e8:44:89:47:3c:60:b9:
         32:63:fa:96:bd:8b:9b:7f:32:fb:e1:f4:da:ef:bd:2f:39:1a:
         61:83:82:07:45:95:74:4e:d6:01:65:4e:af:f4:60:98:35:50:
         15:7f:69:b6:77:ef:12:6f:a2:2f:65:61:9b:41:5e:a4:74:11:
         cb:93:8e:12:07:a8:9e:f7:8e:05:7b:ae:4d:ff:3b:b1:f7:73:
         6b:cf:cd:f1:0b:33:e8:7e:c0:ce:ca:49:7f:41:ab:65:c2:48:
         24:12:52:e7:29:c8:1d:fd:d8:ff:14:fd:3c:d9:74:95:8b:0d:
         2a:65:ca:c4:91:4a:81:b7:8e:96:66:35:9f:7b:1f:dc:9b:b3:
         67:32:25:78:dc:d2:58:bf:f9:4e:76:f8:4f:2c:89:31:75:28:
         88:18:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 02:30:24 2025 by rpki-client