Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File:                     jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier:          7WqNarStuX0s5PwQWRvVuj5WSWn7+82mYpBB8GIzwrI=
Subject key identifier:   FA:0C:D0:C2:94:02:96:08:43:59:D9:CB:26:88:F8:68:90:0A:BE:98
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer:       /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial:       019A0290F9E3194955A795B6399D7343ECFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number:          B5
Signing time:             Mon 20 Oct 2025 17:00:46 +0000
Manifest this update:     Mon 20 Oct 2025 17:00:46 +0000
Manifest next update:     Tue 21 Oct 2025 17:00:46 +0000
Files and hashes:         1: FjU0H7vPdjT4WlcuRh8u9jonq80.roa (hash: FVDMMIfr/P3OKDJ02oDTFPsyvxmI1cgf33doeyF5iQw=)
                          2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: my1xiI28AlplitqXCRHZPwKppcsaDofwNcuOXZl0E70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:90:f9:e3:19:49:55:a7:95:b6:39:9d:73:43:ec:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
        Validity
            Not Before: Oct 20 17:00:46 2025 GMT
            Not After : Oct 21 17:00:46 2025 GMT
        Subject: CN=fa0cd0c2940296084359d9cb2688f868900abe98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:f8:85:c2:ad:8b:f3:76:b2:fb:13:5a:6f:
                    85:08:f8:45:1f:18:67:46:b0:51:1c:d6:90:e8:f6:
                    62:85:44:33:3e:1c:a0:ab:61:66:d5:b8:af:d4:8c:
                    43:1e:00:af:a0:00:72:2e:44:67:04:e1:e4:40:3c:
                    e2:01:dc:df:bf:af:11:a1:71:f8:3b:bb:9b:e7:09:
                    a5:21:f8:8b:2c:7f:4a:43:cb:38:b3:23:3e:69:8b:
                    30:7c:ef:79:16:fe:4c:3f:6a:77:1a:4e:ab:b7:f5:
                    8a:16:44:65:f6:3a:c0:31:45:ab:3b:b2:eb:7f:ba:
                    cc:71:b3:93:13:b7:7f:89:2d:ec:94:8c:c4:cb:ff:
                    9c:2c:9b:a4:95:13:8d:e9:67:38:e0:14:d1:f4:9d:
                    6e:99:4b:54:5e:43:d6:89:95:df:54:d6:5b:3e:02:
                    0b:33:39:4e:83:ab:38:34:7e:f1:78:da:6f:ef:c4:
                    9a:d5:6a:0f:9f:79:c0:b3:f5:99:91:86:91:94:15:
                    96:dc:45:43:72:2e:b4:c5:5f:e7:c7:3b:cc:94:10:
                    42:6c:4c:cc:8b:90:79:ee:36:41:ce:c3:ab:7d:a5:
                    97:4d:f0:10:98:61:1c:1b:dd:da:88:b1:54:63:96:
                    d8:a3:eb:bb:d1:78:d9:9d:f3:7a:4a:9c:95:b7:27:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0C:D0:C2:94:02:96:08:43:59:D9:CB:26:88:F8:68:90:0A:BE:98
            X509v3 Authority Key Identifier:
                keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:39:5c:cf:49:20:f4:1f:d4:9f:64:5b:9c:95:36:2b:4b:f9:
         05:b5:97:84:51:1a:b4:8d:c9:12:8c:20:bd:ea:f7:36:89:63:
         21:f0:89:a6:74:b5:57:b0:16:d4:ec:18:db:80:7a:1a:78:a7:
         17:cf:16:b4:ce:de:59:d7:57:64:1c:de:41:da:03:f2:d1:93:
         35:64:77:7c:31:31:c1:1f:13:0c:27:4a:93:9f:24:53:ed:33:
         d7:18:b9:a1:2c:aa:3e:da:bf:40:21:7c:c9:b7:44:9f:30:32:
         e4:de:72:b1:5a:75:ee:b9:8e:94:00:58:fd:48:89:05:1b:87:
         43:13:3a:bd:88:5b:c1:2a:9e:66:d1:b4:94:bf:01:4c:a9:a0:
         4a:8f:c5:98:91:47:5c:f1:75:29:fd:a9:b0:23:eb:30:61:f9:
         03:e0:e3:11:bb:a3:1a:53:3d:be:46:01:2b:a7:09:24:4a:20:
         8c:e7:ec:6b:ca:b9:77:f7:a0:87:c2:da:3b:16:d8:bd:03:ee:
         31:08:95:57:8e:1a:4e:c1:3c:d2:2e:e0:a8:de:50:9d:8f:ba:
         d6:18:ad:da:0e:cf:ca:12:a9:79:ef:c2:2c:c8:6a:7b:98:f5:
         0a:7a:b9:89:57:39:a1:9e:82:59:20:b4:db:9c:a2:f9:3e:75:
         c3:8a:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:07 2025 by rpki-client