Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File:                     JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier:          vmAVH9ihtV+X7YSIMCGGtL0I54HdvAFjTMdy3G5xkW8=
Subject key identifier:   54:E6:1C:AB:65:B5:F9:9C:C3:F7:90:12:00:03:3E:CB:E0:5E:8F:C8
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer:       /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial:       019A51F54BEC546930A5F9C63D9B7D335319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number:          13E5
Signing time:             Wed 05 Nov 2025 03:00:21 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:21 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:21 +0000
Files and hashes:         1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
                          2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: mW0EjVxBQpZVbAnqFTnQFscMg9bCi3WQrIeQ0zFqFSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:4b:ec:54:69:30:a5:f9:c6:3d:9b:7d:33:53:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
        Validity
            Not Before: Nov  5 03:00:21 2025 GMT
            Not After : Nov  6 03:00:21 2025 GMT
        Subject: CN=54e61cab65b5f99cc3f7901200033ecbe05e8fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:4a:ce:76:2b:31:7b:b5:20:58:a1:b6:93:
                    10:51:f1:ec:c4:fe:38:e0:62:76:b0:f7:5a:39:44:
                    1f:6b:90:1d:31:4e:8b:a2:b2:07:37:f5:6f:bf:8d:
                    c6:14:a6:f0:9a:c3:f8:f2:09:53:71:57:89:47:77:
                    5a:86:be:78:a9:61:0a:33:31:6b:44:21:89:0f:5a:
                    22:d2:6f:24:f1:d8:17:34:a1:eb:26:2c:85:19:ba:
                    4f:52:77:db:3b:a6:dd:78:78:30:ab:15:09:b1:fa:
                    77:de:33:e1:44:b3:50:76:8d:aa:a3:56:4d:65:6b:
                    31:14:38:db:59:45:48:b5:8f:de:88:d6:ea:67:4e:
                    56:23:e5:1d:6c:54:d5:e3:06:7e:0e:89:ea:e1:7b:
                    85:77:0e:c5:88:5f:4d:f9:94:88:1c:09:f5:37:39:
                    4b:ca:b9:e7:42:96:63:17:dc:4e:bb:5e:4a:0e:ea:
                    3f:15:bb:85:10:2a:a3:6e:7f:ec:cd:a7:5c:24:da:
                    e1:75:0f:67:1c:85:76:5a:01:73:8a:f7:76:2d:f4:
                    4b:17:32:69:dc:16:1b:66:6e:e6:45:90:af:b3:1f:
                    74:74:75:d6:78:83:a1:1f:05:21:83:ee:e3:bc:0d:
                    da:44:a5:66:d6:09:8f:b2:c8:85:81:9b:08:63:f3:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E6:1C:AB:65:B5:F9:9C:C3:F7:90:12:00:03:3E:CB:E0:5E:8F:C8
            X509v3 Authority Key Identifier:
                keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:96:e6:68:43:15:98:75:65:d7:ed:fa:a5:b1:f4:a9:31:04:
         2b:fe:87:cb:ed:e5:91:93:fb:3d:eb:82:fb:10:dd:36:60:76:
         75:22:d9:5d:7f:37:57:4b:53:e2:e1:8a:21:25:a4:ba:82:57:
         3f:90:0c:46:4f:82:1a:79:fd:34:9a:24:44:84:58:fc:64:9f:
         42:73:4d:60:5b:43:62:43:cb:52:7c:47:01:b4:87:7a:53:58:
         b9:09:f6:71:fd:6a:3a:11:80:cf:a4:bd:2f:bf:db:e6:a0:7b:
         1f:e7:5d:31:59:1d:c4:67:d4:8e:2c:70:66:37:e8:23:22:a3:
         67:de:8b:86:db:d7:63:de:8f:a5:e3:3f:6d:87:b6:5e:c5:b3:
         0a:d7:14:44:f4:e1:7c:7c:c4:4a:4c:19:dd:ed:17:9d:45:be:
         a9:f5:25:0c:1b:3c:ac:d9:03:9b:12:77:d0:8f:90:0f:c9:4d:
         59:0d:eb:ef:0f:3f:df:06:33:f8:51:ff:9c:4b:dc:70:f4:dc:
         13:c2:eb:e5:95:b2:05:de:2c:09:0e:51:71:eb:68:d4:8d:cd:
         6f:50:eb:91:04:af:08:88:12:2d:7d:43:ad:26:b5:cc:41:43:
         4b:1a:6c:cf:f7:db:7e:74:61:24:31:b4:9d:d5:fb:18:ff:11:
         ca:d6:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:16:56 2025 by rpki-client