Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
File:                     jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json)
Hash identifier:          HVmFG6q4GYvDeJKzw9Vro1LvBbpP/vo4xodq/ZfrAU4=
Subject key identifier:   5E:70:B8:78:51:E7:01:34:7C:EB:94:D4:89:38:76:4C:A9:5E:05:8E
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Certificate issuer:       /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial:       0199FDA1CAB18B00272779C898152BA8E2F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
Manifest number:          1628
Signing time:             Sun 19 Oct 2025 18:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 18:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 18:01:02 +0000
Files and hashes:         1: DYRo5UxpUtRoBr5siZIGMHmDOmk.roa (hash: CNeg8TW20mVMGXVcVuZCa6OMSEOFftuPH5JmAwDqWJM=)
                          2: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: ymduQW7wmo/1DMXgiHkCFmkSIxMQ2sX1NuAO8q9NMO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:ca:b1:8b:00:27:27:79:c8:98:15:2b:a8:e2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
        Validity
            Not Before: Oct 19 18:01:02 2025 GMT
            Not After : Oct 20 18:01:02 2025 GMT
        Subject: CN=5e70b87851e701347ceb94d48938764ca95e058e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:39:67:5b:7a:98:bb:cc:d8:2c:17:55:79:97:
                    b9:48:35:77:f9:3a:b0:12:89:63:fa:97:c6:7b:1f:
                    cb:6f:54:3a:7f:d4:22:df:48:a6:d8:76:31:80:35:
                    90:60:4b:ec:db:84:99:17:8e:21:7f:1e:17:d2:12:
                    71:d9:80:e2:e2:78:41:35:0f:11:53:43:e9:7e:11:
                    f2:c8:74:d9:9b:37:80:2d:3b:f5:5c:bb:c1:78:c2:
                    d8:cc:df:b7:0e:fe:86:75:31:63:62:0e:42:73:6e:
                    4c:f3:43:f9:d6:8f:40:52:55:5f:3c:e6:95:49:51:
                    7b:62:2e:aa:55:27:43:9c:1f:ab:85:09:29:9d:51:
                    2d:8a:71:b2:6c:98:6f:d3:16:cc:28:ef:0a:32:c2:
                    d8:77:42:1d:68:12:3d:ad:cf:80:8b:0c:f7:b4:65:
                    35:10:23:5b:09:66:bd:18:b2:01:de:47:f6:7b:44:
                    7d:e4:48:bc:7c:c0:8d:2c:4a:6a:47:e6:92:2f:7a:
                    ba:e6:63:85:64:16:0e:9d:5a:bc:7a:81:00:08:f9:
                    ed:14:d8:a0:b2:37:70:53:64:e1:d0:cb:0d:b7:0b:
                    fc:f2:3a:f6:d2:23:b6:4a:42:06:a3:c2:39:7b:49:
                    1f:40:50:6e:8a:be:52:37:ba:d1:5e:74:60:15:5f:
                    7a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:70:B8:78:51:E7:01:34:7C:EB:94:D4:89:38:76:4C:A9:5E:05:8E
            X509v3 Authority Key Identifier:
                keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:44:b2:28:87:6a:f9:c7:1c:9f:3b:84:1e:06:df:e8:98:81:
         a7:f0:d0:2f:80:66:8c:24:c6:a4:85:cc:d3:43:bf:b7:48:ce:
         b7:ac:96:3c:1f:04:54:ea:35:e5:83:87:51:66:d3:50:f1:20:
         44:50:06:4e:1c:17:50:b8:a4:53:05:4c:d2:8f:6d:f7:5a:68:
         46:a9:28:ec:10:25:b2:ec:c9:59:13:f4:ee:cf:fe:73:0b:9b:
         be:e5:ce:57:47:b1:e8:c5:45:36:b0:5b:f1:b3:d8:2f:2d:0b:
         77:c7:ba:b7:85:95:68:53:06:a7:6e:b3:f6:03:5b:09:49:66:
         dd:11:f1:4d:46:c3:5d:20:98:e1:ff:96:40:c5:28:78:d0:8c:
         bf:fe:68:bf:aa:8f:d7:40:ac:1d:a5:47:ca:8b:0a:a3:8b:f8:
         17:9b:3f:21:5b:5b:1b:23:de:56:01:e5:89:06:b0:b9:36:04:
         7f:ae:4d:c6:98:d9:17:82:b6:96:60:9b:40:8c:fc:a0:11:91:
         68:5a:ac:19:a9:03:ce:45:91:63:2d:6c:0c:53:cc:56:35:b5:
         ff:d9:7c:f0:63:b0:d0:fe:7b:15:b2:43:9f:90:d1:c2:7f:1a:
         5e:33:94:54:6e:c6:c6:47:20:7f:e3:3f:c2:84:1e:00:39:f6:
         b1:8c:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:31 2025 by rpki-client