Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
File:                     rJvjcV48J7py7MaNHl_1yTZ30AE.mft (raw, json)
Hash identifier:          7xym8ZX6p5XeoeEh15A6n9a0e4pZWijj9NK6XhnqKWY=
Subject key identifier:   50:0C:18:94:C1:BE:8E:16:29:25:95:43:59:9E:6A:D6:E0:A4:62:ED
Authority key identifier: AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
Certificate issuer:       /CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Certificate serial:       019A4FD000335E68E1C47659796735F3F867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
Manifest number:          139E
Signing time:             Tue 04 Nov 2025 17:00:22 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:22 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:22 +0000
Files and hashes:         1: rJvjcV48J7py7MaNHl_1yTZ30AE.crl (hash: z9C1+0NBO8E6JS4c+/ZYZChQczJjuH53NBM16ntufWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:d0:00:33:5e:68:e1:c4:76:59:79:67:35:f3:f8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
        Validity
            Not Before: Nov  4 17:00:22 2025 GMT
            Not After : Nov  5 17:00:22 2025 GMT
        Subject: CN=500c1894c1be8e1629259543599e6ad6e0a462ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:93:cb:0e:75:9f:ba:ad:eb:7c:89:e2:e4:
                    d0:21:bc:db:fb:ee:08:74:ed:18:0d:4d:f8:78:78:
                    af:8e:ab:84:b5:51:f8:b2:82:ae:bb:7b:d8:35:a3:
                    40:0d:b9:ec:79:76:09:8e:3a:db:a7:62:d2:47:3c:
                    d5:dc:94:99:3a:df:b2:ef:dc:e4:03:12:94:ed:b7:
                    79:30:b9:df:2b:5d:50:f4:5c:58:5b:1f:20:ca:e0:
                    87:48:9b:bf:10:1a:2b:4c:50:68:d0:72:4c:4c:b2:
                    ed:a7:5d:01:f8:09:b5:4b:2c:f4:e6:c7:01:0b:bb:
                    17:7e:29:72:44:17:a3:48:17:2c:53:26:ec:30:cf:
                    86:4a:a8:dc:57:2b:47:bf:37:a9:b1:a3:a0:cc:8a:
                    cc:36:40:5f:b5:61:78:86:74:d4:90:37:5c:07:59:
                    36:1f:ab:13:3d:9e:c5:d8:c2:49:53:11:5e:4d:49:
                    d2:fd:85:f0:55:c0:54:47:cf:94:a0:0e:f5:d8:b6:
                    64:5e:97:3f:9c:82:12:91:46:d8:42:fb:8e:0a:98:
                    a0:56:36:74:d6:61:1a:6e:c0:82:d5:d7:99:8b:eb:
                    be:15:8b:4c:94:c1:41:26:83:9d:9a:34:f6:21:3c:
                    bf:89:48:c9:e9:a5:83:42:f4:7e:c7:d3:65:ad:72:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0C:18:94:C1:BE:8E:16:29:25:95:43:59:9E:6A:D6:E0:A4:62:ED
            X509v3 Authority Key Identifier:
                keyid:AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:02:5b:9a:70:77:ab:e8:d0:08:bd:9a:58:68:51:04:33:24:
         e8:f3:26:7e:d9:78:22:39:de:f3:fd:ab:bf:20:d4:12:44:f9:
         ce:76:79:4f:8e:03:dd:35:23:2c:48:b3:aa:6a:4d:26:26:a4:
         bc:24:e8:5c:05:45:1d:49:05:68:bf:75:f2:f2:f1:1d:0e:b7:
         b1:ad:23:e5:af:a6:38:f4:95:34:a2:ac:10:cc:86:2e:ff:73:
         b8:0b:3e:b9:b1:e6:0b:dd:bf:ca:ad:06:43:5e:00:2f:b8:d8:
         72:fc:2b:46:9a:4a:ec:78:38:a5:ea:94:ed:16:05:b7:5e:34:
         25:ed:e5:31:68:e7:1c:08:a2:c0:d8:48:b4:80:2b:ae:7d:da:
         ef:19:49:e0:0e:65:e8:e6:6d:8a:23:74:b1:07:23:a7:4b:c2:
         2b:d4:25:58:a3:94:7f:86:2a:85:c3:70:91:52:f4:d5:50:05:
         8b:e8:5e:c9:8a:3e:75:b6:b0:d6:1a:dc:6e:36:28:d7:c4:90:
         19:37:a3:8c:4f:8a:f7:2a:b4:bb:66:50:ba:a5:6b:dd:ab:4f:
         a6:26:e7:c8:f9:1f:e7:28:68:69:80:7c:fa:96:1e:4a:a9:a9:
         53:3e:80:6a:d4:a7:01:85:6c:07:21:99:b1:59:10:80:f0:e7:
         fc:73:19:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0AAzXmjhxHZZeWc18/hnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWJlMzcxNWUzYzI3YmE3MmVjYzY4ZDFlNWZmNWM5MzY3
N2QwMDEwHhcNMjUxMTA0MTcwMDIyWhcNMjUxMTA1MTcwMDIyWjAzMTEwLwYDVQQD
Eyg1MDBjMTg5NGMxYmU4ZTE2MjkyNTk1NDM1OTllNmFkNmUwYTQ2MmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSGTyw51n7qt63yJ4uTQIbzb++4I
dO0YDU34eHivjquEtVH4soKuu3vYNaNADbnseXYJjjrbp2LSRzzV3JSZOt+y79zk
AxKU7bd5MLnfK11Q9FxYWx8gyuCHSJu/EBorTFBo0HJMTLLtp10B+Am1Syz05scB
C7sXfilyRBejSBcsUybsMM+GSqjcVytHvzepsaOgzIrMNkBftWF4hnTUkDdcB1k2
H6sTPZ7F2MJJUxFeTUnS/YXwVcBUR8+UoA712LZkXpc/nIISkUbYQvuOCpigVjZ0
1mEabsCC1deZi+u+FYtMlMFBJoOdmjT2ITy/iUjJ6aWDQvR+x9NlrXLz6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAMGJTBvo4WKSWVQ1meatbgpGLtMB8GA1UdIwQY
MBaAFKyb43FePCe6cuzGjR5f9ck2d9ABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckp2amNWNDhKN3B5N01hTkhsXzF5VFozMEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hZGZhNzktMjM3My00YmY1LTgzNmEt
Y2EwY2E2N2E1ODZiLzEvckp2amNWNDhKN3B5N01hTkhsXzF5VFozMEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hZGZhNzktMjM3My00YmY1LTgzNmEtY2EwY2E2N2E1ODZi
LzEvckp2amNWNDhKN3B5N01hTkhsXzF5VFozMEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQJbmnB3
q+jQCL2aWGhRBDMk6PMmftl4Ijne8/2rvyDUEkT5znZ5T44D3TUjLEizqmpNJiak
vCToXAVFHUkFaL918vLxHQ63sa0j5a+mOPSVNKKsEMyGLv9zuAs+ubHmC92/yq0G
Q14AL7jYcvwrRppK7Hg4peqU7RYFt140Je3lMWjnHAiiwNhItIArrn3a7xlJ4A5l
6OZtiiN0sQcjp0vCK9QlWKOUf4YqhcNwkVL01VAFi+heyYo+dbaw1hrcbjYo18SQ
GTejjE+K9yq0u2ZQuqVr3atPpibnyPkf5yhoaYB8+pYeSqmpUz6AatSnAYVsByGZ
sVkQgPDn/HMZpg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:18 2025 by rpki-client