Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
File:                     JmOMLLe4YM02lnnE0F1Q9wXgRik.mft (raw, json)
Hash identifier:          yOh7kBqr4z0JcK3i/Zai8yVu/bmBrq2sMrNBwv2OGPM=
Subject key identifier:   75:75:FA:EE:85:5E:0D:61:88:80:FC:2F:D2:CD:3B:74:CF:53:3E:E0
Authority key identifier: 26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
Certificate issuer:       /CN=26638c2cb7b860cd369679c4d05d50f705e04629
Certificate serial:       01988D6A9BCB8D6F35AF582506118606740A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
Manifest number:          0E93
Signing time:             Sat 09 Aug 2025 06:00:30 +0000
Manifest this update:     Sat 09 Aug 2025 06:00:30 +0000
Manifest next update:     Sun 10 Aug 2025 06:00:30 +0000
Files and hashes:         1: HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa (hash: sAAGeZp9KGc0mAVbloa7q59m7jUPjTaroGNIZ50YXxw=)
                          2: JmOMLLe4YM02lnnE0F1Q9wXgRik.crl (hash: hYFAMYkrtwRXXhDsibkM5pkXrmrRJyxdLht3hUHIJeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:6a:9b:cb:8d:6f:35:af:58:25:06:11:86:06:74:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26638c2cb7b860cd369679c4d05d50f705e04629
        Validity
            Not Before: Aug  9 06:00:30 2025 GMT
            Not After : Aug 10 06:00:30 2025 GMT
        Subject: CN=7575faee855e0d618880fc2fd2cd3b74cf533ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:dc:7d:3e:d4:54:a0:59:5a:f3:a9:9f:1f:
                    14:84:5d:f8:b3:e2:a7:b2:4d:0e:f6:6d:42:ad:56:
                    16:7c:9d:7b:6c:72:bf:6c:95:84:c0:a4:4b:d1:9a:
                    92:a7:ae:82:8d:d8:68:49:95:4a:3e:c7:55:4f:64:
                    7b:e3:61:4f:f5:7e:c2:b3:5b:d4:95:87:7b:44:1c:
                    be:24:82:eb:3f:21:eb:39:0c:e6:4f:bb:aa:6f:4d:
                    1b:a2:0c:2e:8f:90:4f:c0:82:1b:b4:d8:13:f6:0b:
                    08:1a:66:5f:57:e3:50:d3:15:b5:24:24:1e:ab:b2:
                    63:0f:d7:ec:0e:57:5b:db:9c:c6:5e:94:66:b8:83:
                    1a:9a:ce:c6:e9:8a:bb:7f:58:5f:17:b2:72:98:1e:
                    8e:d2:a0:68:1a:96:28:ce:7f:88:5d:ba:8c:17:f3:
                    d7:1c:f4:f7:3b:41:b7:c4:37:ed:09:52:5c:c9:6c:
                    c4:6a:f9:3c:07:56:fb:ec:a7:3b:d2:34:4d:11:e0:
                    36:bb:23:22:00:bb:60:f6:04:a6:31:de:f7:61:4a:
                    e9:07:7a:52:ed:a5:22:72:4b:04:af:d0:54:c4:b9:
                    8b:02:c2:c9:5b:06:d0:36:7d:39:16:05:f8:18:56:
                    23:50:1e:e3:71:58:35:b9:c3:f6:4b:fc:8c:52:69:
                    5e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:75:FA:EE:85:5E:0D:61:88:80:FC:2F:D2:CD:3B:74:CF:53:3E:E0
            X509v3 Authority Key Identifier:
                keyid:26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c6:9c:70:f0:3b:e0:ca:b7:ac:94:d6:72:b3:bd:25:5e:3c:
         a8:10:a0:27:68:dc:3e:30:cc:3b:61:b2:a3:db:ab:d9:72:06:
         51:29:8c:bc:d4:6f:b8:37:60:d7:73:61:21:51:27:d1:92:97:
         77:9c:c2:17:43:62:24:1f:e8:de:30:64:ed:30:57:44:c2:66:
         f8:77:15:fd:00:26:61:3b:ef:b9:d1:fe:c1:cf:ef:2d:39:f1:
         4e:f0:5c:4c:10:41:c1:10:8d:6b:30:6e:9c:4f:2e:45:f0:fd:
         ca:2b:1e:2d:82:64:53:74:14:6b:b7:c6:c8:b7:dc:bc:73:80:
         f0:55:5a:37:81:9f:ab:a1:09:0a:78:1a:79:a0:0a:31:52:99:
         25:51:71:5e:ea:f9:a2:14:4e:f8:e2:68:c5:e4:56:eb:91:fb:
         92:43:9c:c9:64:35:c2:93:04:96:ab:9f:ce:b8:3f:7d:f3:aa:
         e3:8a:f8:9b:99:14:db:f8:e6:d7:8d:bc:ab:a2:9a:1e:5c:93:
         60:29:1a:b2:e9:aa:45:fa:72:36:cf:d5:15:db:26:53:59:91:
         63:87:f9:e4:d9:fd:03:13:3a:f4:a4:f2:6d:6e:5d:48:08:b4:
         64:a1:25:ca:e0:11:0c:b0:c2:57:7e:19:2d:14:7b:f7:7d:f9:
         af:0c:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:08 2025 by rpki-client