Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
File:                     mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft (raw, json)
Hash identifier:          Zy6MjI/1HmhWq6sRGd8JRJI1iUMfbr3Kf8Bgv6qPULE=
Subject key identifier:   99:F2:EA:C6:B6:1B:AE:B9:CF:39:CA:A2:BC:50:74:3F:67:B0:65:BA
Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
Certificate issuer:       /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Certificate serial:       0199FC8F348D7ADC140F40B91A376CDB3A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
Manifest number:          0B46
Signing time:             Sun 19 Oct 2025 13:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:07 +0000
Files and hashes:         1: mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl (hash: 6OlQ2EqRZ8x1JUxkCoIgq8X6lNVNA3Pb0jPnxGgm0Ng=)
                          2: yetABbyl2MadBOs3otjwQ2Snhiw.roa (hash: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:34:8d:7a:dc:14:0f:40:b9:1a:37:6c:db:3a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
        Validity
            Not Before: Oct 19 13:01:07 2025 GMT
            Not After : Oct 20 13:01:07 2025 GMT
        Subject: CN=99f2eac6b61baeb9cf39caa2bc50743f67b065ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:8f:29:2f:58:aa:19:85:52:49:1e:c3:c2:
                    b1:83:8d:7c:5a:73:fc:d6:8f:86:c0:c4:b5:0f:3d:
                    18:b5:77:a6:f2:7e:7a:a6:77:ed:4a:25:3e:c5:34:
                    39:c8:f0:02:cb:f4:4b:eb:d9:68:42:24:5d:d5:92:
                    72:fc:8d:51:45:ab:9c:17:5d:f9:49:3c:c2:0e:98:
                    6b:d5:be:0f:2e:4e:42:48:76:ee:45:35:3b:b5:36:
                    76:48:7f:8d:d5:2c:6a:dd:f8:93:24:98:2c:e6:ff:
                    b9:7e:00:cd:27:a0:0e:13:b7:d6:bf:2d:06:d0:aa:
                    03:6a:56:31:a0:cd:f0:bc:81:8f:7e:96:a0:c0:c8:
                    21:2f:bf:48:ad:d9:5b:53:4e:53:50:ec:3c:1d:be:
                    bb:35:3c:81:bf:da:6d:d4:b5:1d:9b:fb:d2:a2:9f:
                    4c:2c:50:04:b9:5d:38:6a:c2:af:72:37:0b:34:7c:
                    fb:d5:2b:83:0b:9e:80:f9:c1:a4:7b:3b:a2:3d:57:
                    2d:a3:3b:c1:db:97:3f:a7:15:fa:e1:24:02:ee:d4:
                    b7:af:12:35:19:2e:6a:06:21:a1:d4:16:45:67:d8:
                    6d:46:b9:9d:d8:e9:16:de:26:2b:46:af:51:87:db:
                    86:36:6f:5a:db:93:3e:cb:92:7d:5e:eb:40:69:4b:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F2:EA:C6:B6:1B:AE:B9:CF:39:CA:A2:BC:50:74:3F:67:B0:65:BA
            X509v3 Authority Key Identifier:
                keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7f:dc:5e:d5:56:97:13:4f:25:8c:e4:d2:d0:20:e5:33:9d:
         78:2d:a5:e1:42:a7:78:15:19:41:4e:f3:f8:83:2f:e7:3b:81:
         83:d0:33:e4:18:c4:9e:72:24:70:eb:1a:62:95:af:29:9a:d6:
         46:de:eb:e0:21:2a:e9:e3:31:d2:5b:0c:1b:74:66:b6:0c:fe:
         1e:5b:d9:17:f1:68:b4:56:5d:cf:e9:78:7e:c8:ec:8f:7e:c0:
         4c:59:6c:cf:2e:1d:a3:35:e4:80:76:e6:0a:8f:27:ee:c0:20:
         b1:1f:19:11:f7:e2:cd:ef:7d:67:24:1a:ad:9e:70:26:1d:5c:
         de:ac:01:d0:5a:6f:6d:aa:f4:f1:f0:09:91:b2:8e:93:e6:1f:
         13:ba:23:04:0a:db:20:56:5c:16:7b:43:51:84:ca:a8:38:3d:
         56:d6:c1:c7:c0:73:6f:f3:a2:64:d9:f1:69:7f:9f:45:47:3d:
         19:c5:53:8e:6e:90:d0:36:bf:69:dd:fa:bd:a5:35:cd:68:cc:
         09:4c:d9:27:26:2e:63:f1:a0:3b:a5:89:d4:e9:2b:a0:00:a2:
         df:c3:df:d5:15:30:06:e2:c8:e0:34:b8:f8:6d:4a:23:2d:11:
         66:8a:a3:4c:7e:d9:b7:71:a2:60:43:a8:9b:97:b9:8f:10:58:
         5b:65:d5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:35 2025 by rpki-client