Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File:                     jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier:          kRWn66PpYMPgKMQs9S6Dm1VyNXYsd127LuUWT+TsoUk=
Subject key identifier:   61:BD:63:39:54:BA:E0:5E:FA:9C:74:95:B9:90:56:C8:C4:51:15:45
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer:       /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial:       0199FC8F9B87A3CC0EC5CE14222342542023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 13:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:33 +0000
Files and hashes:         1: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: hV+9faLokD/9fibR5veozx58r2vEM5o0GFo+eEc4Vws=)
                          2: zU1QL9oy395BMpoBXCQqGb7OlHI.roa (hash: 0y/PuHzLRqyjsx08CFJtTaBktvwjX6i+x/JKGRPNwrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:9b:87:a3:cc:0e:c5:ce:14:22:23:42:54:20:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
        Validity
            Not Before: Oct 19 13:01:33 2025 GMT
            Not After : Oct 20 13:01:33 2025 GMT
        Subject: CN=61bd633954bae05efa9c7495b99056c8c4511545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:73:8a:80:ce:bd:6d:df:0e:61:d6:92:a4:
                    9b:b2:22:f9:85:98:94:6c:93:31:04:8f:fd:9a:71:
                    ae:fa:31:c5:b4:f0:a8:49:ea:03:65:36:d0:6b:2c:
                    64:42:24:a5:3c:d0:ae:6b:6e:8f:83:cf:0b:58:c0:
                    50:84:40:30:c3:6c:22:bb:3e:6c:3d:3e:8c:60:6b:
                    01:32:61:46:ea:5d:6c:c2:5f:5b:90:c8:d1:a6:ed:
                    50:48:98:45:b5:75:fb:c8:0b:ab:66:92:98:3c:fe:
                    99:e5:74:90:24:8c:f0:a9:75:b8:82:69:9b:81:66:
                    74:f0:71:77:e0:a7:9a:16:cc:82:6a:f5:34:1f:ff:
                    8b:e7:09:d0:25:c0:01:a8:f1:bc:0a:6f:8a:83:cd:
                    93:f8:c1:1a:71:1c:8a:39:ce:90:0f:df:70:b2:e1:
                    c0:cc:96:27:b4:6b:04:a9:23:70:8f:ca:7e:1e:0b:
                    1b:1e:81:4e:05:5e:f0:15:3c:c0:19:93:f1:ce:ae:
                    f6:6a:af:1c:65:23:71:34:4b:05:b0:c6:80:48:25:
                    0c:5b:1b:87:10:98:2d:8b:cc:8a:dd:a4:a5:74:69:
                    54:1d:03:ef:70:46:5a:d7:07:5e:d5:3e:6b:ed:79:
                    f0:cc:a7:7f:de:48:41:81:c5:49:e3:c3:f4:d6:af:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BD:63:39:54:BA:E0:5E:FA:9C:74:95:B9:90:56:C8:C4:51:15:45
            X509v3 Authority Key Identifier:
                keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:06:47:57:7b:a5:df:94:e0:bb:13:99:16:6c:58:e2:23:
         a0:d6:0a:ee:ef:2f:f8:ce:cb:12:cb:74:5f:86:d4:e9:12:77:
         4c:03:96:aa:be:9c:1e:7e:b0:c8:e1:c0:50:be:41:11:76:92:
         9f:d1:6a:29:43:90:0a:5f:23:38:e2:f4:42:12:c7:51:c0:1f:
         13:c5:45:f1:18:7c:a1:a6:01:75:f9:0c:a9:7e:d5:f9:4e:6f:
         95:5c:d0:cf:86:fb:8f:7c:41:d5:10:7a:e4:40:44:fa:71:32:
         16:90:b7:d1:91:96:eb:f4:98:7f:48:8b:46:1a:62:d1:2e:e7:
         ac:ea:66:4f:4e:32:ec:e8:c5:e1:c3:68:98:e0:bd:38:cc:8d:
         54:3f:a1:63:a9:03:7e:ee:aa:db:15:16:91:42:08:07:e9:34:
         09:4e:b6:20:82:66:3b:67:ea:3d:6d:9f:09:2e:d2:14:5c:77:
         5f:47:37:c6:a6:e8:d4:b7:9a:5b:2e:3d:4e:9b:e0:a0:d5:f3:
         aa:f0:7f:1b:98:58:4c:a0:08:5f:85:d9:4d:2f:6d:60:a2:09:
         f7:38:74:80:bc:c1:31:92:f6:55:2e:4f:e5:e1:ff:14:98:a1:
         5e:b7:e2:49:59:1c:e2:8a:c8:0c:ea:ee:d0:26:5d:54:58:1e:
         b4:f0:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:19 2025 by rpki-client