Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
File:                     JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json)
Hash identifier:          JVke9yQ/dR5rcvagYpIEWeHT1F1/Yhi8e6VTuk2rBhw=
Subject key identifier:   07:59:00:75:E0:56:BA:AA:95:8D:96:61:5D:6F:57:20:EC:2F:78:38
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       01988B0E8360DEC0DEE355E27EE95D630568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
Manifest number:          165B
Signing time:             Fri 08 Aug 2025 19:00:40 +0000
Manifest this update:     Fri 08 Aug 2025 19:00:40 +0000
Manifest next update:     Sat 09 Aug 2025 19:00:40 +0000
Files and hashes:         1: 05T5QjbJNc87hT4My9l-JdCX1h4.roa (hash: iWvw7hOFWKPo65JahFO85oDHfJOnZV1Mm2k2unmLhhE=)
                          2: 1RAZSq7_BCIXMPLmCNYBwnRPVeM.roa (hash: iP8JwzeV1htPI5dhx1UE8Z1vTHtvlA2uWPOR/wMsfgs=)
                          3: 1wyAYxpyA9FCN1lyvO-C57LVFXA.roa (hash: y/6pL2V+BG6MuxMmBUR7F2hu5ij3F/ux58ms3Mk1R0w=)
                          4: 5m85a6z_82pxvCFTAubCZE3IDRY.roa (hash: yTwyQOsGZdUMHgKCUc+pKc+Yl8K88OgV6IbbvGfhyYk=)
                          5: CmOI9SR69ovMKrxlDxbUWh5QUU0.roa (hash: ebd4rV/RF1OTbOXyyPqPuU0N5clQOOerkc0GReb1J2w=)
                          6: Cw3KSb4w5fVGO1h3Oj_H-hpchVg.roa (hash: uQeSPU2EF8IdzkDhENLmsFnhh9oxYjUNdNs+h74gmgY=)
                          7: JAH3IXMvbG6Ys2dPmwodnWJGeoI.roa (hash: Gw60ldKvXUBK2ktt+kjbpS50udL3AC6hPM4eFLUJXXw=)
                          8: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: qqoEKBjXMNPELxNxxUSQ1yfXbhDkjRrM2e+QClX1Mag=)
                          9: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (hash: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=)
                          10: ZKvHQby0NQ22M7VFCjQ_KqulEx8.roa (hash: ivLBRNaqrPZubBjRNX4dYKOMZvwYNsaC4yTeWqcGhaw=)
                          11: g4rTsZZ6qTMpSVPR-7TASI0eYf8.roa (hash: H0dCl0trInj59i3ls7vMuF/05FWvOMm7A3kIRBvL3Rw=)
                          12: h7K92qiMiWFLtkqLXfWLx7T3RS0.roa (hash: SXAVcoWGoZlytOpyw4bPPikyafW7og6IlMVyTr7sX3s=)
                          13: kojEemV1y3p1Ig0PF0Qwwmhe1Bs.roa (hash: Oye8rISWv3W8lfSMiPLOOdMEyDfiF8khVTUsBLT1Pro=)
                          14: oWWO6Pva3OKGYV4SbuU_A-N5y1U.roa (hash: wiPRw1JJ6JQ3Y/GXPGUGO3wdWm/JMB2trum1N3IbVAQ=)
                          15: pPQq_lolA8g8QxXqDDucDfwuETo.roa (hash: L1m+KNUP0y0o8T6Tj0pDmrtwsUBi0b51YKd4t4w0w/g=)
                          16: qhjSfnViRtAuJX9-HloVGl6e8yQ.roa (hash: 0c4CC/UoASiPziDV/ISjZ0Wa5pg6sbXo1QCcNSiEk04=)
                          17: rGuulbHd9kRPQ-Vjw-QiFUOKt_A.roa (hash: B7yPzOPI+uMdkQOcYQEtalAjsrTFRRTxVc7BxeoQZ2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:83:60:de:c0:de:e3:55:e2:7e:e9:5d:63:05:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Aug  8 19:00:40 2025 GMT
            Not After : Aug  9 19:00:40 2025 GMT
        Subject: CN=07590075e056baaa958d96615d6f5720ec2f7838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:75:07:d1:43:8d:28:56:36:d2:aa:48:76:
                    41:f6:cd:49:f5:91:06:76:cb:58:e3:89:3a:72:9b:
                    e7:10:aa:83:10:b1:2a:2c:c0:de:13:14:de:9d:bb:
                    6c:97:09:2a:48:49:07:d9:6b:65:fa:c2:85:fe:ba:
                    a9:8d:d9:95:48:9f:bf:a2:10:69:d5:31:38:16:bc:
                    41:73:7a:56:66:b1:09:a9:53:fb:e6:e0:f3:31:07:
                    bb:2e:d4:c4:d0:ae:00:00:c0:d2:aa:f2:01:ce:65:
                    9e:ee:11:75:3a:59:01:2d:c6:9f:76:37:05:af:33:
                    5c:1a:3f:e1:4b:7e:da:42:cc:ae:7f:63:f2:d6:58:
                    cf:30:a9:2b:da:c5:4a:a7:8c:09:44:e3:f7:93:9d:
                    a2:cf:01:e4:32:74:ae:59:06:2d:d3:a8:0d:04:2e:
                    95:dd:71:70:7f:78:8f:bf:2c:93:ed:fd:5f:d1:70:
                    a4:72:47:35:c8:22:05:8f:cf:0b:43:78:da:fd:56:
                    23:22:19:7e:c4:92:b5:08:2e:d4:9a:fd:39:73:ab:
                    64:7b:fe:99:02:02:6a:f4:7b:22:bd:c8:27:9e:be:
                    4f:4d:77:cf:ec:f0:1c:7b:7d:24:c9:74:1e:18:1f:
                    ff:1d:ef:5a:28:3d:5e:a5:d7:b2:33:6c:7f:1f:96:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:59:00:75:E0:56:BA:AA:95:8D:96:61:5D:6F:57:20:EC:2F:78:38
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:cd:ec:5d:7b:a5:24:e7:7e:67:14:bb:24:58:05:77:1c:a2:
         f0:ab:d5:d1:a7:f7:36:68:fa:26:f4:d5:29:d8:0f:9d:7b:86:
         34:6a:d4:0c:be:d0:f0:15:4b:21:a3:e8:5d:98:92:2f:29:09:
         c0:c7:3d:d7:01:ba:2c:80:17:e5:d7:c8:ff:bd:e7:08:d6:f6:
         94:62:93:72:e7:38:8f:04:44:88:c0:e8:41:f2:e0:d4:a2:b3:
         4e:0e:e1:ba:88:20:26:4c:28:8f:df:3c:48:66:01:9f:b1:51:
         88:7c:74:3c:a8:a8:b9:fc:ac:35:66:53:68:fa:23:6f:e1:c2:
         4d:15:70:c2:01:3a:4a:ee:26:71:fa:a2:d1:54:83:43:f5:d5:
         20:26:d8:bd:14:7b:48:5c:5c:8b:8b:0c:82:af:fc:0f:1c:4e:
         99:ea:d0:64:34:a1:1c:d7:28:1e:d0:2d:7a:b2:c5:79:14:a6:
         1b:4c:ef:7c:1b:81:ef:ba:fa:f3:bc:46:07:a9:12:b4:37:6d:
         9b:67:60:d8:93:92:d3:5f:51:da:7d:98:32:86:ba:9b:ca:4e:
         fa:8f:5e:d1:cd:b6:5b:ff:38:5c:c9:15:c6:98:fb:c6:70:bd:
         ef:e4:e9:23:13:d6:01:ad:52:fe:cc:10:37:42:4d:87:61:f2:
         b1:0a:61:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:04 2025 by rpki-client