Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
File:                     J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft (raw, json)
Hash identifier:          QXQs5F/my/Ps3jVzMDsAJmyZHsBNMz3NjNt//6ZsQ5c=
Subject key identifier:   85:FB:B1:58:55:6D:C5:08:90:55:70:3E:4E:12:1F:41:A4:8C:4A:E0
Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
Certificate issuer:       /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Certificate serial:       019A50E3F4F17CCAB04D73CA02C8773093AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
Manifest number:          170D
Signing time:             Tue 04 Nov 2025 22:01:47 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:47 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:47 +0000
Files and hashes:         1: 1Up92kLaciflZCGF6thZ6O_2gb4.roa (hash: MZjlg+hjkFznVUD2gKvbQop6qeX1ypK906BpNhUjgLA=)
                          2: JDa6SY9OudTO59Luwi4g9XuH-5g.roa (hash: 9WJ0L7baOHSNBgfr0oc7eP1UiTVZAMhpoL/3V6eL10k=)
                          3: J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl (hash: hY2eWWXn0p6WWROiZ3ogO8izD5K4Bs/PlP+4S+b6zsM=)
                          4: UjdRg-4YFjoxl_g8YXlmvQbDI8A.roa (hash: rgWrNq7qmzpWB8PQIHq/XPPdpuoL1N7tYUChf7PYf28=)
                          5: cvzTz2OXBB_yidJBNxcXZxwYdrY.roa (hash: YVNb7JT5aj8Grywf7uIQmWk7NHgm3JKfDMAhwde/BcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:f4:f1:7c:ca:b0:4d:73:ca:02:c8:77:30:93:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
        Validity
            Not Before: Nov  4 22:01:47 2025 GMT
            Not After : Nov  5 22:01:47 2025 GMT
        Subject: CN=85fbb158556dc5089055703e4e121f41a48c4ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:fc:d2:b0:91:f2:8f:7e:bf:8c:b7:5a:55:
                    bd:2c:09:77:cd:bf:1a:b2:5b:8a:b3:7c:55:dc:47:
                    0b:be:ca:2e:6f:42:d6:51:5c:07:f1:f2:38:92:a6:
                    e6:07:e0:8d:ab:f5:63:ad:1d:91:37:a6:75:b0:7a:
                    78:00:f5:7a:ba:1d:47:a5:f7:bd:d0:b3:28:89:9e:
                    55:79:53:b1:66:89:fc:c9:25:77:e9:5a:27:4e:88:
                    f6:77:ce:d5:9e:75:f6:e8:71:5b:ac:85:60:0d:12:
                    ea:a5:3c:e6:35:fd:b5:7a:3b:71:cd:d2:5a:6d:25:
                    11:ca:6f:5c:40:1d:01:99:ad:35:26:39:e9:e9:ed:
                    6b:c3:b0:66:58:09:28:11:aa:a7:21:c9:10:96:98:
                    9d:6f:e2:c9:e1:18:eb:08:92:15:40:fd:12:9a:d0:
                    1f:88:47:db:73:9c:e0:49:da:e4:d1:e3:bf:41:04:
                    21:87:68:f0:73:d4:57:0d:8b:d6:0a:2a:c3:a6:c2:
                    ad:bc:6b:4d:03:fe:3c:ed:1d:f6:a8:b6:e5:61:f4:
                    70:eb:42:ff:45:91:c7:93:c6:67:41:68:24:23:ba:
                    44:71:6b:47:60:a5:79:0f:16:29:54:50:cf:bf:0c:
                    ad:59:5f:c8:4e:ca:f2:6f:3f:d1:ba:4d:fe:ef:10:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FB:B1:58:55:6D:C5:08:90:55:70:3E:4E:12:1F:41:A4:8C:4A:E0
            X509v3 Authority Key Identifier:
                keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1c:f3:a2:39:b5:be:88:d1:17:3f:14:52:63:74:0f:19:0b:
         3b:0b:a9:23:08:28:3d:70:37:92:2b:ea:a0:94:68:5c:ec:96:
         f4:40:2a:ef:81:cc:8b:29:f8:b2:3a:ed:a5:81:c2:57:b2:42:
         a8:de:18:df:b3:8d:47:ab:51:92:04:57:45:c4:09:c3:62:05:
         ba:bb:9f:05:0b:03:f4:da:d0:8a:7b:5f:5c:07:41:38:7d:04:
         f9:82:7f:79:10:64:92:d2:16:a0:4d:9c:28:f7:3c:45:c7:1d:
         5a:90:b5:f1:f4:20:1b:60:fd:e4:52:f0:64:ea:66:93:0f:b9:
         75:ce:fd:0b:cc:bd:cf:78:dc:75:64:90:5e:56:88:0c:41:46:
         c1:fa:e4:b7:6a:ec:c1:f4:15:f3:c5:37:28:dd:73:b9:e6:09:
         73:9a:a5:5d:ce:f1:ad:a3:e5:78:de:0b:2b:73:a2:06:24:38:
         35:c8:d0:60:fa:dd:00:f4:c2:68:8c:b9:91:31:2f:01:5d:9e:
         c6:1f:72:cd:0d:06:37:28:2a:f5:b1:df:d5:1b:ab:14:cc:8c:
         36:e8:eb:13:64:4c:88:21:2c:8a:82:12:8e:07:73:c8:7a:2c:
         81:4e:00:d3:9b:ba:45:b4:54:f6:3c:af:e4:39:02:1f:d6:c7:
         f9:1e:79:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:36 2025 by rpki-client