Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File:                     tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier:          n/nVuhnlwV37vfjw/gq5FlF/9IionWHSdcKzyeEmkS0=
Subject key identifier:   B4:30:7D:26:79:B3:F9:9B:6E:AC:09:7E:B5:6C:88:DC:2C:A5:A7:7E
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer:       /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial:       0199FB7CCEDEF0711C7FFD50F5195E35FD19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number:          1242
Signing time:             Sun 19 Oct 2025 08:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:24 +0000
Files and hashes:         1: 1-PqW8UmiSaov5LQilBVWMK5ZalY.roa (hash: TOVF5pxyQFktaD7ChGQ0pQzpTOW/D5b1AiH6KqbdxuQ=)
                          2: DaHb-AgbaohKBsaZFPAVDGbt_RI.roa (hash: T2KsBuhVxG35+5zMSgS7xBXEVKNyKlB23AKVgPghBi4=)
                          3: ZKaLH1RF9q1E6524_CLGwNAeKPU.roa (hash: NYm5o8T+AXl6BoN5iWRobD4OTRMc9uAM7u/9BRILK/4=)
                          4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: y1EVmz8286HPk55KuE+tAigaZZcblGET/TYwsA6dtVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:ce:de:f0:71:1c:7f:fd:50:f5:19:5e:35:fd:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
        Validity
            Not Before: Oct 19 08:01:24 2025 GMT
            Not After : Oct 20 08:01:24 2025 GMT
        Subject: CN=b4307d2679b3f99b6eac097eb56c88dc2ca5a77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6a:3c:63:9b:06:db:47:08:17:5f:ba:82:14:
                    86:77:0c:df:5d:0a:a7:e8:71:47:c9:59:4e:22:68:
                    b2:3e:29:37:29:05:4a:c1:33:3f:11:ca:61:38:11:
                    4a:98:83:47:fe:ac:b5:ad:eb:9c:dd:7c:8c:96:03:
                    74:da:63:80:4a:bb:4b:ae:78:65:be:16:e5:99:45:
                    4c:9a:6b:3f:5e:5f:0f:84:34:3b:0a:7f:d0:5c:68:
                    a6:58:06:e7:14:fe:83:28:44:00:63:7c:f0:bc:92:
                    5b:93:00:d3:60:2f:a2:38:2f:d8:c8:1b:34:27:f0:
                    82:34:cc:23:82:4a:00:6e:53:a4:12:74:75:0a:9e:
                    26:08:7d:8d:d0:ae:32:0f:b0:e3:b1:dd:2b:74:fa:
                    da:5f:f1:2a:8f:22:e3:ec:54:ad:4e:b7:ab:dd:5c:
                    8c:9c:1e:26:fc:6f:11:27:e1:4d:74:e8:f0:c6:ee:
                    fd:4d:d9:bd:a6:d1:9e:1b:52:be:4d:69:54:77:14:
                    75:2a:b9:f0:59:82:f4:7e:91:2e:01:aa:c2:bf:f0:
                    8b:2c:36:5f:86:f0:3a:cf:4b:48:ae:c8:58:f8:02:
                    eb:8c:67:31:f3:1d:05:b0:b4:c6:a8:5f:f9:3b:dd:
                    cd:eb:ae:e4:ea:dd:6c:3a:1d:69:df:14:28:33:8d:
                    2c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:30:7D:26:79:B3:F9:9B:6E:AC:09:7E:B5:6C:88:DC:2C:A5:A7:7E
            X509v3 Authority Key Identifier:
                keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3b:d3:dc:6c:24:c4:76:9d:29:d6:9b:fa:1e:c4:e8:c9:e6:
         b9:27:3f:90:b2:29:07:ff:2c:46:cb:ce:3d:7b:c1:ea:2c:79:
         87:92:1d:e4:52:0a:96:2c:21:a2:de:52:f7:c4:07:51:73:40:
         e6:24:dc:c3:52:73:53:d7:3e:93:76:0b:50:ce:0e:67:2e:c5:
         81:a5:e0:6e:fc:69:00:ef:32:7c:fb:29:89:4d:ea:2b:8b:e5:
         ba:3f:f9:2e:43:01:df:ed:0c:75:75:ed:0b:d1:f9:a3:33:49:
         ee:07:d9:33:d0:9a:21:b9:13:fe:4c:ed:78:3c:79:c3:1a:43:
         f5:04:9d:89:26:fd:22:9e:91:ed:8e:83:09:62:35:be:28:21:
         f5:64:b5:f0:7c:1e:47:15:6a:5f:b0:8c:ab:d5:cf:1c:b2:43:
         f3:1b:14:d9:a1:29:82:77:61:1d:22:6d:4b:58:6e:7b:a5:c6:
         09:61:d2:7a:45:91:21:73:b9:0d:f7:4e:9c:5c:6f:ad:e6:05:
         29:53:46:55:d4:b5:84:a8:d2:0f:db:db:50:74:24:15:49:68:
         fd:a5:cc:50:fa:80:e7:96:30:56:43:68:69:93:43:e1:76:63:
         26:08:cc:94:85:92:83:e1:33:d6:41:46:a0:f0:ee:4b:49:8e:
         9f:39:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:13 2025 by rpki-client