Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
File:                     J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft (raw, json)
Hash identifier:          UeJ19YTATfXQoUPnjw6Cnz0tTOEfZhFuAmz7FRtZFL0=
Subject key identifier:   CE:59:52:73:E9:AF:48:7A:59:FC:04:56:11:1E:0B:76:7D:1E:43:DD
Authority key identifier: 27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E
Certificate issuer:       /CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
Certificate serial:       019A4EF438A5754D0506BDABE4DDC8391DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
Manifest number:          13EB
Signing time:             Tue 04 Nov 2025 13:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:19 +0000
Files and hashes:         1: J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl (hash: RtDU5WAK84dtKxXkSo4TGTGRdGa5yz8pfaXpQla02ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:38:a5:75:4d:05:06:bd:ab:e4:dd:c8:39:1d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
        Validity
            Not Before: Nov  4 13:00:19 2025 GMT
            Not After : Nov  5 13:00:19 2025 GMT
        Subject: CN=ce595273e9af487a59fc0456111e0b767d1e43dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:26:ad:46:22:e5:37:74:38:5e:50:c3:f8:
                    fa:b6:f7:96:0c:e6:23:b4:b5:e9:a8:6c:0c:49:b7:
                    e0:8d:41:12:cc:d2:d0:fc:15:45:7b:6e:7d:8b:3f:
                    7c:6e:79:48:72:b5:01:6b:37:73:7e:8f:9d:27:00:
                    91:9f:70:62:7c:3b:f1:36:7a:4c:99:23:82:53:ee:
                    e8:6a:e0:61:6b:49:9d:52:d5:56:7d:7b:71:89:ba:
                    f3:95:8c:73:2b:df:7e:3a:bf:b0:6d:23:09:12:a4:
                    69:34:94:39:fe:f6:1c:c0:7f:84:dc:b0:1e:43:d3:
                    27:85:80:90:15:44:63:86:0f:cb:fe:e0:59:1d:26:
                    01:69:24:62:1e:5b:85:bd:2c:66:8a:b4:bc:b7:0c:
                    1c:1d:60:c9:22:c0:9d:b2:7b:c2:78:b9:2d:f1:f1:
                    b9:b4:0d:d7:d7:1e:af:fc:fb:1f:b3:3c:7b:6a:2b:
                    3a:c0:0b:74:ad:1a:6e:9e:ee:66:28:db:66:66:a3:
                    f8:ca:46:57:fd:92:71:b3:7e:f9:36:9c:73:4f:7e:
                    d8:2c:ce:30:60:2b:fb:97:c5:92:6e:c8:fa:23:7d:
                    6c:88:87:ec:2e:4d:67:c4:f4:a9:1e:18:7c:a3:96:
                    5a:14:a1:4c:5a:0d:5c:1e:2e:25:c0:85:25:8f:98:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:59:52:73:E9:AF:48:7A:59:FC:04:56:11:1E:0B:76:7D:1E:43:DD
            X509v3 Authority Key Identifier:
                keyid:27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:22:b4:80:67:73:4a:9f:75:9c:6a:db:af:5b:56:32:51:
         ef:34:6f:f5:e3:cc:2e:a6:8e:a5:9e:03:69:bf:31:c2:0f:bc:
         d5:74:31:28:8e:13:7f:99:7b:a5:89:62:33:a0:6c:13:d4:81:
         f4:af:93:fd:c2:8d:bf:19:30:3f:e3:91:64:2d:ea:4b:62:df:
         50:e8:f2:67:ac:49:95:2f:09:f6:f6:43:7f:f1:2c:84:71:92:
         12:bc:51:0d:ee:ce:2d:fd:55:8f:e7:c9:de:17:86:52:67:d3:
         b4:16:01:43:79:60:79:52:33:95:72:dc:33:ae:86:2d:9c:2c:
         ce:19:bb:79:b0:61:48:d7:63:b5:89:f6:97:a3:9a:6f:41:c6:
         ed:1c:d8:4f:91:fc:48:80:17:57:cf:b7:ea:05:2e:72:3f:ed:
         e0:ba:10:67:ed:82:c2:65:31:56:fc:42:b2:f5:63:e3:02:f0:
         36:7d:f2:9f:71:38:3c:a3:87:cc:8c:7d:00:be:44:2b:56:d2:
         06:42:46:71:e5:24:04:3a:5a:ad:75:ad:68:2f:82:bf:ea:76:
         59:f5:c3:aa:15:e5:62:ca:72:41:85:0c:7c:e2:7e:54:c3:e5:
         b9:c3:a4:f7:df:ca:a0:00:7a:25:ba:ed:93:3f:93:a8:c6:af:
         07:86:8d:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9DildU0FBr2r5N3IOR2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZjQ4Yzg1YTQyYjAwYjM5ZDE4MDNlNjNjOWZkNWFkZWJm
N2Y5NWUwHhcNMjUxMTA0MTMwMDE5WhcNMjUxMTA1MTMwMDE5WjAzMTEwLwYDVQQD
EyhjZTU5NTI3M2U5YWY0ODdhNTlmYzA0NTYxMTFlMGI3NjdkMWU0M2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzcmrUYi5Td0OF5Qw/j6tveWDOYj
tLXpqGwMSbfgjUESzNLQ/BVFe259iz98bnlIcrUBazdzfo+dJwCRn3BifDvxNnpM
mSOCU+7oauBha0mdUtVWfXtxibrzlYxzK99+Or+wbSMJEqRpNJQ5/vYcwH+E3LAe
Q9MnhYCQFURjhg/L/uBZHSYBaSRiHluFvSxmirS8twwcHWDJIsCdsnvCeLkt8fG5
tA3X1x6v/Psfszx7ais6wAt0rRpunu5mKNtmZqP4ykZX/ZJxs375NpxzT37YLM4w
YCv7l8WSbsj6I31siIfsLk1nxPSpHhh8o5ZaFKFMWg1cHi4lwIUlj5jIlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5ZUnPpr0h6WfwEVhEeC3Z9HkPdMB8GA1UdIwQY
MBaAFCf0jIWkKwCznRgD5jyf1a3r9/leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9TTWhhUXJBTE9kR0FQbVBKX1ZyZXYzLVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDRiMjQtOWI1OC00ZTNjLWE1MTUt
ZTMyNTYyMWU4NmRkLzEvSl9TTWhhUXJBTE9kR0FQbVBKX1ZyZXYzLVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZDRiMjQtOWI1OC00ZTNjLWE1MTUtZTMyNTYyMWU4NmRk
LzEvSl9TTWhhUXJBTE9kR0FQbVBKX1ZyZXYzLVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQwitIBn
c0qfdZxq269bVjJR7zRv9ePMLqaOpZ4Dab8xwg+81XQxKI4Tf5l7pYliM6BsE9SB
9K+T/cKNvxkwP+ORZC3qS2LfUOjyZ6xJlS8J9vZDf/EshHGSErxRDe7OLf1Vj+fJ
3heGUmfTtBYBQ3lgeVIzlXLcM66GLZwszhm7ebBhSNdjtYn2l6Oab0HG7RzYT5H8
SIAXV8+36gUucj/t4LoQZ+2CwmUxVvxCsvVj4wLwNn3yn3E4PKOHzIx9AL5EK1bS
BkJGceUkBDparXWtaC+Cv+p2WfXDqhXlYspyQYUMfOJ+VMPlucOk99/KoAB6Jbrt
kz+TqMavB4aNug==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:45 2025 by rpki-client