Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File:                     JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier:          e3fs0vDOGmNcYMtjguxKpT0DpXgCUeDkWh+H2qAdzyw=
Subject key identifier:   BB:D0:CB:84:A1:A0:87:74:FA:8F:76:FE:54:67:0B:4E:C2:3D:7E:D2
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer:       /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial:       0199FCC669D8570E19984F04381AD1235338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number:          0B93
Signing time:             Sun 19 Oct 2025 14:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:25 +0000
Files and hashes:         1: ByXM_Ln1i6sp51H3UoiAVLtk9H4.roa (hash: WkKv5GmFkjNS11QcfAX/i3RvuDqUCdANkXDcqukdiOw=)
                          2: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: hJImEFGV8b+y6EQwdo7GACrdch9RufyyXYPIoQhOsuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:69:d8:57:0e:19:98:4f:04:38:1a:d1:23:53:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
        Validity
            Not Before: Oct 19 14:01:25 2025 GMT
            Not After : Oct 20 14:01:25 2025 GMT
        Subject: CN=bbd0cb84a1a08774fa8f76fe54670b4ec23d7ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:9e:48:96:9e:6f:32:8b:df:9d:60:13:10:
                    3c:40:4a:1d:d6:b8:2c:73:aa:a6:93:02:48:7c:67:
                    90:20:08:2f:01:61:9f:82:06:3e:72:35:58:7c:d8:
                    6c:26:8a:f0:6e:2b:81:18:5b:ed:37:d3:ff:05:87:
                    e5:31:ad:09:3f:86:fc:ac:9f:34:36:0c:0e:a6:d0:
                    69:c0:71:6c:30:2f:6c:df:ce:f0:0d:e9:57:89:4e:
                    56:2a:4a:59:4c:ad:61:3e:1b:66:0b:47:e3:7e:02:
                    a7:42:09:db:a3:a3:26:07:82:91:cb:8f:89:7e:0e:
                    4f:c9:50:13:eb:0d:ca:b3:44:76:a6:9c:79:b5:e5:
                    f9:06:07:a3:84:2b:9d:63:a1:15:0f:50:77:db:ba:
                    cb:b2:ab:e6:ae:fa:d9:60:33:c0:82:28:38:d2:54:
                    86:e8:9d:c7:ee:bc:af:84:04:86:e2:c7:3f:75:bc:
                    8f:1d:3e:52:61:36:a2:28:5e:fb:83:96:94:6d:db:
                    35:cb:86:c7:6e:cc:cc:9a:b3:75:f9:df:06:92:2b:
                    61:61:24:36:7f:20:e1:6a:b2:ad:34:c6:e4:11:1e:
                    7d:48:96:03:60:7e:bb:dc:e3:48:2d:98:85:2f:b6:
                    a3:bf:d1:75:73:66:2f:df:40:2a:e2:04:15:6b:ab:
                    37:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D0:CB:84:A1:A0:87:74:FA:8F:76:FE:54:67:0B:4E:C2:3D:7E:D2
            X509v3 Authority Key Identifier:
                keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f0:32:9d:3c:8c:01:5f:e6:14:2b:81:8d:6f:85:b2:40:af:
         31:85:fd:75:eb:ff:32:9a:a3:fa:d7:08:34:83:da:66:62:ff:
         6d:3f:2e:f4:00:03:7c:ec:6d:e3:85:06:aa:fd:65:ab:06:a5:
         0f:f2:3e:10:72:7e:65:3b:af:54:17:09:27:f4:b5:e2:69:47:
         10:4f:0f:12:bc:86:dc:63:80:67:f3:fe:c2:46:cb:ff:a6:bc:
         9e:9d:b4:41:24:50:92:c8:3c:76:e0:9c:3e:9a:51:8e:c8:9f:
         21:8e:af:91:0c:66:bf:fa:f8:30:34:f5:43:d3:69:78:a7:40:
         97:0b:8e:11:bc:ba:77:55:d8:11:b5:77:0d:56:27:81:97:7d:
         0c:3e:bc:c1:71:c6:28:7b:55:c9:1d:0d:e6:ed:80:c6:76:99:
         c8:bd:f7:90:57:93:48:bb:bc:77:4b:d6:24:6b:fb:3d:da:7b:
         8a:6d:bb:77:ef:2b:5d:5c:39:2e:b9:ab:78:d7:da:cb:95:66:
         05:53:70:ec:39:1e:60:ad:9c:95:c3:3a:08:49:d8:11:98:5d:
         77:8e:6d:27:d5:28:ba:c9:28:70:b6:d5:ba:79:c2:71:cb:ee:
         bb:33:0c:08:01:24:53:b8:c0:3b:8d:09:5a:58:04:d1:72:b3:
         bc:df:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:46 2025 by rpki-client