Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
File:                     J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json)
Hash identifier:          bkdgt1MLCE6iLOo8LHGK9W5E95tHJhvNaR5oZM9DUKo=
Subject key identifier:   41:92:76:07:5A:77:E0:85:B9:82:8B:75:5A:D7:C5:10:A1:5A:87:94
Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14
Certificate issuer:       /CN=27b56eb25b05a08826c2648fff1acf36b494d814
Certificate serial:       019A4FD0928E75DB0D7CF97E6682E3C4E020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
Manifest number:          03C9
Signing time:             Tue 04 Nov 2025 17:01:00 +0000
Manifest this update:     Tue 04 Nov 2025 17:01:00 +0000
Manifest next update:     Wed 05 Nov 2025 17:01:00 +0000
Files and hashes:         1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: 27jwd1ZfbZRZ5v0bpOUYHI5EMjdLekCQ9JvDQNdvonM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:d0:92:8e:75:db:0d:7c:f9:7e:66:82:e3:c4:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814
        Validity
            Not Before: Nov  4 17:01:00 2025 GMT
            Not After : Nov  5 17:01:00 2025 GMT
        Subject: CN=419276075a77e085b9828b755ad7c510a15a8794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:ad:18:be:da:42:e1:38:27:a6:7b:f3:31:
                    55:4b:e1:85:02:e3:a4:59:36:bb:f8:b1:12:8a:5d:
                    38:fa:59:c6:57:a6:f9:f6:a6:37:87:1b:52:0b:e1:
                    ea:8b:ff:e6:9f:06:99:fd:c5:8c:a1:43:ad:fa:da:
                    30:36:45:c4:e8:03:91:ed:08:b4:52:d9:a9:c8:13:
                    39:22:26:fd:86:7d:1f:a8:3f:3d:ca:c3:3c:d3:62:
                    84:ff:ae:50:f2:e5:95:9f:31:1b:1c:92:43:aa:72:
                    f3:6e:c4:9d:4a:3c:19:46:7b:38:8c:b3:ab:71:e1:
                    8d:f2:1c:3f:33:65:c2:89:ec:29:cd:ca:2d:e0:08:
                    61:06:ab:cf:03:9b:07:1c:7c:29:3d:15:6e:1b:3c:
                    8a:b7:36:b3:33:1f:9c:db:4e:e2:5d:cc:93:d4:3e:
                    f6:d2:4d:cd:5c:6e:2e:45:5d:bb:5a:16:7e:e6:30:
                    10:ff:d0:cd:42:9a:16:df:4f:1e:48:c5:96:16:c9:
                    2f:e5:17:59:97:2a:c5:f4:b1:a1:d7:e1:a1:fe:6e:
                    2d:d0:48:af:e0:fd:05:6a:08:87:2f:c9:99:db:66:
                    d7:ee:4d:46:be:31:94:7c:25:1b:2c:de:b9:7b:6b:
                    2f:a9:ce:2c:75:72:44:7a:05:d2:f6:20:fa:95:b7:
                    9b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:92:76:07:5A:77:E0:85:B9:82:8B:75:5A:D7:C5:10:A1:5A:87:94
            X509v3 Authority Key Identifier:
                keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e7:f6:b5:ec:f8:05:54:98:c1:a9:39:62:45:7b:eb:fb:89:
         9b:80:c2:b3:9c:b3:a4:b5:61:17:1f:2e:a4:c3:53:88:30:5a:
         79:48:8e:8e:33:7b:21:3a:db:2b:72:ee:27:88:64:c6:f9:a7:
         c4:de:89:c7:fd:a5:db:eb:5d:3b:39:a1:f1:1e:17:1f:a6:d5:
         42:b0:8a:8e:13:b8:08:f4:2e:d0:d1:cb:ec:6c:0d:b4:ad:a0:
         5a:32:21:61:86:35:4c:58:0c:ae:d4:6e:ab:f9:4b:7f:2f:0a:
         fd:d9:62:4e:ec:34:48:57:e0:26:20:f2:98:27:6d:49:ba:a5:
         d1:94:cb:29:a1:4f:ab:c3:1f:61:c0:ed:08:76:ce:b9:0d:d1:
         9c:93:1e:86:b4:1b:06:ff:a9:e7:ab:0c:eb:e5:e9:55:92:be:
         21:2f:ad:65:e8:9b:04:8e:07:c0:f9:47:c1:b3:ab:d9:88:67:
         21:09:70:c9:5f:b4:ec:96:64:e6:0e:42:73:00:31:51:85:2c:
         79:e5:e1:56:a7:60:bd:bc:76:f3:44:43:1b:87:20:ef:f6:b7:
         38:df:b0:91:b5:d8:79:a6:18:7e:d9:a1:69:98:53:49:4d:87:
         af:a1:46:78:d7:77:f0:6c:ad:1e:61:0a:9f:03:0f:6d:3d:65:
         bb:ee:4e:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0JKOddsNfPl+ZoLjxOAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjU2ZWIyNWIwNWEwODgyNmMyNjQ4ZmZmMWFjZjM2YjQ5
NGQ4MTQwHhcNMjUxMTA0MTcwMTAwWhcNMjUxMTA1MTcwMTAwWjAzMTEwLwYDVQQD
Eyg0MTkyNzYwNzVhNzdlMDg1Yjk4MjhiNzU1YWQ3YzUxMGExNWE4Nzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspCtGL7aQuE4J6Z78zFVS+GFAuOk
WTa7+LESil04+lnGV6b59qY3hxtSC+Hqi//mnwaZ/cWMoUOt+towNkXE6AOR7Qi0
UtmpyBM5Iib9hn0fqD89ysM802KE/65Q8uWVnzEbHJJDqnLzbsSdSjwZRns4jLOr
ceGN8hw/M2XCiewpzcot4AhhBqvPA5sHHHwpPRVuGzyKtzazMx+c207iXcyT1D72
0k3NXG4uRV27WhZ+5jAQ/9DNQpoW308eSMWWFskv5RdZlyrF9LGh1+Gh/m4t0Eiv
4P0FagiHL8mZ22bX7k1GvjGUfCUbLN65e2svqc4sdXJEegXS9iD6lbebaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGSdgdad+CFuYKLdVrXxRChWoeUMB8GA1UdIwQY
MBaAFCe1brJbBaCIJsJkj/8azza0lNgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81OTk1NTUtNDNmNy00MWZjLWFhNTct
MDM4ZjE1OTU2M2ZmLzEvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi81OTk1NTUtNDNmNy00MWZjLWFhNTctMDM4ZjE1OTU2M2Zm
LzEvSjdWdXNsc0ZvSWdtd21TUF94clBOclNVMkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKef2tez4
BVSYwak5YkV76/uJm4DCs5yzpLVhFx8upMNTiDBaeUiOjjN7ITrbK3LuJ4hkxvmn
xN6Jx/2l2+tdOzmh8R4XH6bVQrCKjhO4CPQu0NHL7GwNtK2gWjIhYYY1TFgMrtRu
q/lLfy8K/dliTuw0SFfgJiDymCdtSbql0ZTLKaFPq8MfYcDtCHbOuQ3RnJMehrQb
Bv+p56sM6+XpVZK+IS+tZeibBI4HwPlHwbOr2YhnIQlwyV+07JZk5g5CcwAxUYUs
eeXhVqdgvbx280RDG4cg7/a3ON+wkbXYeaYYftmhaZhTSU2Hr6FGeNd38GytHmEK
nwMPbT1lu+5OJw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:53 2025 by rpki-client