Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
File:                     jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft (raw, json)
Hash identifier:          GuTzGI8DiyWV7SNsOMGrBq/q5uVR2n8bDwGLJOQWrvc=
Subject key identifier:   90:65:31:A9:E8:95:7B:49:E8:F8:1E:47:11:6D:ED:7F:83:A4:E8:C9
Authority key identifier: 8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3
Certificate issuer:       /CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
Certificate serial:       0199FD346FA3D1DDD59EE07F2BCB5D678410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
Manifest number:          0B8B
Signing time:             Sun 19 Oct 2025 16:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:35 +0000
Files and hashes:         1: SGMdDeiUFAfk2xwIdXVeKa_LLHk.roa (hash: ZKIHPynyXeoLlT2qw3+kEeOK0uvKuoHZvZmp3cJSFCw=)
                          2: jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl (hash: ST0750VcwhECIt25sPPJ37MWM4PhEAwAG1m9pb37KC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:6f:a3:d1:dd:d5:9e:e0:7f:2b:cb:5d:67:84:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c20753dd51633aa2e17a92c59f4c4845d876cd3
        Validity
            Not Before: Oct 19 16:01:35 2025 GMT
            Not After : Oct 20 16:01:35 2025 GMT
        Subject: CN=906531a9e8957b49e8f81e47116ded7f83a4e8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:4d:3e:26:c4:d7:55:c3:3f:b2:f5:3b:33:
                    73:38:3f:9c:fb:b1:4c:3b:f5:4a:59:78:e2:07:1f:
                    3a:2a:53:7a:36:ec:42:5b:da:c6:53:d8:0a:e1:f2:
                    0f:14:dc:17:52:cc:d5:1b:1a:b4:68:17:7b:9a:be:
                    4c:7f:2e:14:2f:bc:87:a3:f9:92:8c:1e:fb:dd:89:
                    bf:b5:0d:fb:ba:9e:6f:b7:16:b3:44:8d:a7:16:de:
                    a9:83:62:dd:20:eb:96:69:c1:83:fd:99:dc:80:2f:
                    79:4a:ba:89:a8:1e:07:60:21:a4:c0:3e:9c:40:ce:
                    fc:d6:5b:b7:c9:69:32:39:cd:e2:b5:a6:0e:91:5a:
                    ac:0f:89:38:b3:42:64:b3:ba:51:dc:04:08:ea:2f:
                    eb:69:c0:35:6a:d9:ff:5a:d5:16:99:ee:4f:3e:59:
                    80:f0:50:9c:d5:3b:97:6f:bb:8d:1c:01:86:e0:fd:
                    48:eb:91:71:6b:38:f5:a2:5e:59:c2:e0:b7:a9:93:
                    52:66:7b:10:15:a0:dc:41:3a:7f:d7:de:2e:e8:2a:
                    1a:d5:54:12:87:e4:e4:c7:93:6c:71:e4:5e:8a:b0:
                    30:8d:80:44:fb:72:a6:cf:0d:8a:eb:ca:f0:3f:35:
                    ab:98:67:e6:50:b0:eb:66:62:14:3a:68:f6:7c:df:
                    75:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:65:31:A9:E8:95:7B:49:E8:F8:1E:47:11:6D:ED:7F:83:A4:E8:C9
            X509v3 Authority Key Identifier:
                keyid:8C:20:75:3D:D5:16:33:AA:2E:17:A9:2C:59:F4:C4:84:5D:87:6C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCB1PdUWM6ouF6ksWfTEhF2HbNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5c3cfa-a363-40a4-bfa6-c29beb1a4734/1/jCB1PdUWM6ouF6ksWfTEhF2HbNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a6:59:56:3d:2e:a0:85:c0:5d:f0:df:01:b7:08:e2:8e:92:
         14:4a:60:f2:09:69:16:ab:8e:13:0a:4e:5f:46:18:34:62:a2:
         2f:ad:b2:10:c2:1f:a0:19:48:9d:53:86:1e:93:42:e7:db:c6:
         8f:45:f4:a6:ce:ac:da:65:59:7a:77:f3:3d:c4:cc:fa:f1:d5:
         91:4d:1d:d5:f2:a0:e7:1b:c3:ec:b4:67:67:9a:e6:28:f8:b5:
         af:55:e0:99:60:fe:41:28:5a:ba:a6:4a:98:bd:b3:83:07:02:
         97:72:01:af:30:f2:85:3a:a1:fa:01:7b:c2:d0:37:82:92:28:
         00:fc:32:1d:ba:29:61:da:0c:c3:18:59:a7:aa:9d:46:4b:e3:
         50:28:b5:7f:2c:b4:5f:1e:87:83:da:e0:4d:9d:b4:91:9e:80:
         6c:40:7c:44:ea:73:07:b9:6a:4b:b2:c1:af:a8:9e:27:a2:97:
         fa:0e:b2:d5:5d:b9:75:be:4c:b2:2f:b4:a1:65:ac:da:10:07:
         50:aa:49:48:38:b9:25:96:0e:9d:f0:23:50:c7:05:43:c7:87:
         d7:79:0c:c9:f6:61:85:34:3f:ae:9f:d6:87:d5:e9:c8:42:8e:
         6d:ee:a6:cd:62:18:fb:1b:55:52:ac:5e:d5:4f:e9:9c:5e:9f:
         8f:6b:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:22 2025 by rpki-client