Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
File:                     jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json)
Hash identifier:          c/vKQdnozedJBah19415ACKFkLiZ5Zn8T1llyU8eHf0=
Subject key identifier:   91:C0:4A:B4:76:6E:82:90:DA:07:85:7D:8B:7F:F4:89:BA:F2:D9:7E
Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79
Certificate issuer:       /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
Certificate serial:       0199FCC64E5B52074C539FA44C311E4A4541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
Manifest number:          1389
Signing time:             Sun 19 Oct 2025 14:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:18 +0000
Files and hashes:         1: Q9DwS1QYdCXG_TZ3Zx_W06dNw9Q.roa (hash: PyoWrDBozM9pi7C6rpjZaVEl3kgNUqzqzcKl0+NVZC0=)
                          2: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: QnpFn2ocbK6CF3qc08BXagmeJwOt1xM3Vp/OrocrTRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:4e:5b:52:07:4c:53:9f:a4:4c:31:1e:4a:45:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
        Validity
            Not Before: Oct 19 14:01:18 2025 GMT
            Not After : Oct 20 14:01:18 2025 GMT
        Subject: CN=91c04ab4766e8290da07857d8b7ff489baf2d97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:d5:79:d4:04:05:d0:3c:66:c5:09:02:f7:
                    63:c2:e3:bd:b5:31:7b:7d:81:b4:39:db:25:e5:bd:
                    f0:4e:19:c6:95:54:29:6f:7c:77:dd:57:37:42:1b:
                    d6:6f:e6:30:32:26:a2:93:52:1e:2f:40:0e:4a:23:
                    75:0d:00:85:25:ce:84:85:32:02:44:5d:ed:89:1a:
                    37:65:f0:59:af:16:c6:97:3d:bd:5e:33:ef:4e:e7:
                    a8:dd:aa:7f:3d:2d:0c:55:ff:d4:37:5d:3e:f0:8b:
                    da:e4:21:04:4c:ae:06:15:fa:19:95:3f:f0:69:f0:
                    d9:e3:eb:84:0c:14:97:77:33:52:64:c2:40:1f:6f:
                    94:ae:26:64:8c:60:5b:61:c9:fe:60:1a:72:37:57:
                    36:9d:1b:f8:97:6b:47:eb:c9:a7:5e:81:ce:dc:6d:
                    dd:50:d3:b6:6a:31:26:8d:4a:5f:a0:54:74:47:ed:
                    9f:e6:22:be:86:ae:62:b0:cd:b1:e4:ba:3b:62:8e:
                    ce:2a:8b:d0:13:aa:0a:95:3e:35:46:41:46:27:2f:
                    e8:95:0f:b3:96:71:a5:61:4c:3d:33:62:1f:61:b6:
                    c0:7d:f1:75:a6:76:69:82:53:83:e3:cf:65:f4:bb:
                    a5:d1:40:35:04:13:15:16:a8:9f:d7:ce:c4:a5:7e:
                    d4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C0:4A:B4:76:6E:82:90:DA:07:85:7D:8B:7F:F4:89:BA:F2:D9:7E
            X509v3 Authority Key Identifier:
                keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ef:bd:c2:bc:bb:73:fa:87:ca:b2:5f:b9:b1:a1:b8:cd:e1:
         b3:5a:79:21:2b:34:36:04:e1:2a:9c:6d:52:cf:b5:58:6a:d9:
         45:23:85:f3:ca:43:28:7b:39:32:be:3d:0e:c8:16:93:26:a6:
         1a:d7:6a:d5:cc:9d:20:74:33:83:98:d5:43:35:cf:5f:70:af:
         0d:2d:dd:4f:d6:71:70:ba:ee:b1:53:e7:61:ba:1d:ac:f6:91:
         e1:1e:cc:9f:13:d4:04:87:01:25:33:bb:64:d3:db:49:38:16:
         53:54:ed:60:73:ec:5d:ff:93:55:86:9f:e2:bc:14:c3:3e:dc:
         24:79:98:a6:4e:0f:2f:bc:7f:a5:4c:fc:d1:60:de:42:2f:7e:
         d6:9e:fd:dd:78:ec:10:81:4e:be:44:c0:77:15:ab:60:4c:eb:
         9a:69:89:23:0f:42:d4:cc:3b:d0:8d:32:e1:8b:7b:34:50:e6:
         ab:85:07:8a:d1:ac:bb:96:73:4e:20:3a:9d:20:30:38:70:c4:
         8c:16:ad:25:58:34:e3:24:40:65:87:28:0c:55:15:04:d7:14:
         4f:79:de:04:19:9d:a4:1e:84:27:d5:07:ab:c0:6c:a7:f1:1d:
         9b:cb:64:a4:7f:dc:e6:0c:68:7e:0b:18:d1:30:d3:59:cd:9c:
         be:4f:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:21:50 2025 by rpki-client