Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
File:                     Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft (raw, json)
Hash identifier:          eDQXEfIybQCg49c2Zn42NXOsxdfjeQoRxTKWlVoIs58=
Subject key identifier:   6D:18:90:98:77:56:C2:44:8C:89:88:4F:8D:66:B0:2C:78:29:5A:D1
Authority key identifier: 26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E
Certificate issuer:       /CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
Certificate serial:       0199FBEABB26FA99FDEF1B0AF87979D52EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
Manifest number:          1672
Signing time:             Sun 19 Oct 2025 10:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:28 +0000
Files and hashes:         1: Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl (hash: Qob9gRTO/JgvK+AthAoPAeffdDP7PlgsUleF2ehOifg=)
                          2: s_vj38_GYCn4aemkK1p2_MaatWQ.roa (hash: 3JnnhuGGZqjdBr8pR/nRqhjcsI/Mjb5T38Y9Ho7lfvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:bb:26:fa:99:fd:ef:1b:0a:f8:79:79:d5:2e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
        Validity
            Not Before: Oct 19 10:01:28 2025 GMT
            Not After : Oct 20 10:01:28 2025 GMT
        Subject: CN=6d1890987756c2448c89884f8d66b02c78295ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:67:2d:b3:4b:72:62:ff:49:27:7d:c2:32:1c:
                    15:e1:70:9f:26:53:c9:82:be:7f:e1:44:a3:74:c8:
                    37:67:61:5f:57:7b:43:e3:02:b1:d2:e6:86:24:26:
                    1b:7b:12:a8:42:a7:e0:70:a8:53:9f:e4:03:c0:43:
                    82:03:a4:2b:8a:51:36:39:26:a9:3a:9e:67:a0:54:
                    d8:4f:b1:4a:cf:16:eb:cf:3e:2f:a6:30:a1:17:f7:
                    46:f5:83:f8:69:b0:8b:73:da:53:02:2e:f3:01:b0:
                    55:9d:eb:22:1f:c7:2f:6d:f0:c5:88:70:99:3c:21:
                    33:69:d7:b5:15:ca:2c:4b:36:71:6c:1b:4f:44:ca:
                    9a:bc:d9:cf:5b:2e:a0:a8:eb:cd:37:1f:28:8b:e0:
                    7e:80:24:50:f2:27:4b:e9:65:c4:39:91:2c:af:2c:
                    07:27:46:14:db:5f:06:df:77:2a:8c:c6:14:67:21:
                    b7:3a:c3:06:e5:02:b7:03:14:e6:8a:ab:eb:c7:72:
                    09:e4:ea:dd:c3:e5:07:77:9b:b5:20:51:37:d2:7c:
                    64:93:9a:a1:46:1f:9e:98:c0:2f:23:b6:b8:d4:cc:
                    06:e1:90:da:76:c9:91:7a:93:f1:35:fb:10:e2:2d:
                    2d:46:db:3e:47:9b:e4:a5:2b:a8:dc:10:cc:d0:ce:
                    84:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:18:90:98:77:56:C2:44:8C:89:88:4F:8D:66:B0:2C:78:29:5A:D1
            X509v3 Authority Key Identifier:
                keyid:26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:89:61:0f:ed:cb:81:65:38:92:18:f4:e5:ad:1f:de:9e:
         5b:20:58:07:f2:22:fa:26:53:60:40:8c:2c:5a:30:94:4f:9c:
         a7:7e:e1:a7:a5:65:13:f3:46:26:86:db:11:ec:39:34:48:4f:
         f6:26:45:95:99:1f:46:89:eb:1e:88:25:56:43:9f:8f:72:52:
         c9:cb:a1:31:c1:65:3d:3a:71:19:af:3a:f8:18:a6:0b:6e:d1:
         ee:62:37:14:49:78:f1:7e:7b:fd:3c:c2:66:54:58:f7:52:4f:
         35:4f:04:d5:e1:3a:c4:c9:a0:44:7c:bd:fb:18:10:97:f3:44:
         f3:2d:50:a2:55:7c:af:61:13:05:01:a0:76:9c:9c:99:6c:d8:
         56:ed:c7:4c:f4:84:af:70:97:7e:a5:27:26:8c:e4:83:99:6e:
         ba:e3:b3:6a:1a:39:61:5b:f2:e5:50:02:13:13:13:ec:92:01:
         0d:7b:a2:60:71:cb:57:8d:f7:75:09:8e:73:8e:c5:c5:fc:8f:
         c9:0a:f8:9b:05:c2:e6:13:8a:43:9c:70:c4:83:de:74:68:da:
         40:b9:3c:43:fe:64:26:2f:50:14:bc:44:dd:2f:52:96:49:75:
         11:25:5e:75:f8:e9:89:51:29:19:37:d4:e5:0e:55:a5:95:6d:
         36:f9:d2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:40 2025 by rpki-client