Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File:                     ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier:          APSFS0XCANw+AwYEuTlzwK+UU9yTgkAsptXYOBagBJQ=
Subject key identifier:   2B:5E:5F:11:DD:7F:AA:68:F4:69:C2:1F:F9:B1:D5:9C:B5:37:BB:56
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer:       /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial:       0199FAD86A94DA60B3CFD54F6186ABB8D53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number:          1622
Signing time:             Sun 19 Oct 2025 05:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:50 +0000
Files and hashes:         1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
                          2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: IG1dx5mr7u/JDg0+c0hFtcl919xFJbw/mUTO3VCW0nM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:6a:94:da:60:b3:cf:d5:4f:61:86:ab:b8:d5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
        Validity
            Not Before: Oct 19 05:01:50 2025 GMT
            Not After : Oct 20 05:01:50 2025 GMT
        Subject: CN=2b5e5f11dd7faa68f469c21ff9b1d59cb537bb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5a:e3:62:34:58:ad:b6:97:95:22:e9:6c:ef:
                    e3:b6:fd:d3:16:c0:d5:f8:ff:41:c6:e3:42:3e:3c:
                    2c:aa:c6:03:c1:d4:b6:28:d7:59:fc:31:c1:23:68:
                    20:72:0a:2e:ce:30:91:52:bf:28:6c:f5:75:e8:69:
                    70:b5:ed:16:9b:5b:7e:c8:90:7e:9b:12:28:a8:3c:
                    ea:05:73:dc:69:32:29:77:57:1f:67:97:53:35:06:
                    ee:57:fd:f0:93:63:d6:6e:f8:3c:fe:6e:5b:24:ea:
                    4e:ed:ff:1d:33:87:2b:00:e1:ed:f9:0f:40:14:95:
                    cf:de:f8:7e:d5:79:15:be:55:75:32:11:85:b6:68:
                    4b:62:f6:59:b5:2e:2d:5f:0a:75:3f:f3:8b:78:75:
                    a9:2c:19:ba:d9:60:b8:91:a6:79:a5:1f:4b:d6:4f:
                    f3:5e:2d:d4:ae:84:36:34:38:70:42:ae:e2:1b:2a:
                    a2:1b:ed:f1:a7:91:6c:75:1d:b8:9f:4d:9c:98:35:
                    57:a2:cd:58:fe:3a:3e:35:51:83:d8:8f:b5:ff:04:
                    3a:8e:3d:a0:cc:49:f1:57:2a:5a:5a:5b:2e:70:9e:
                    cb:52:60:1e:38:3d:ac:39:fe:e2:47:14:23:6d:40:
                    92:43:7a:d9:a0:57:5c:23:d9:2d:ac:d8:4b:90:ce:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5E:5F:11:DD:7F:AA:68:F4:69:C2:1F:F9:B1:D5:9C:B5:37:BB:56
            X509v3 Authority Key Identifier:
                keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f8:0d:b4:79:05:b4:4e:73:c3:4e:e7:bd:89:ae:7a:1e:c1:
         62:3b:a6:bb:c8:83:4c:7d:fb:59:3f:8e:b2:6d:07:83:80:45:
         b6:57:f1:d7:39:95:ad:d2:fd:b3:c6:19:a0:f8:3b:ba:60:44:
         06:73:a9:5b:f7:c2:00:8e:7b:83:83:43:8d:64:80:ec:a5:b5:
         97:e6:90:bd:a6:f8:e4:2f:84:d1:b2:7b:e3:bf:01:e6:a9:46:
         9d:4d:6b:15:4b:e1:05:c4:de:62:c5:f8:0e:09:84:41:bb:62:
         05:6a:9e:14:ee:e3:3f:ff:5b:21:f3:f5:00:03:4b:bf:81:8b:
         e8:d5:62:80:fc:10:04:2e:16:1e:c6:fb:3f:2d:a3:0a:3b:24:
         79:29:1f:7d:2b:4d:86:3e:59:82:21:53:6b:25:a3:08:a1:1f:
         ae:26:51:c2:a7:f8:68:ef:8b:34:da:d9:d6:e8:3e:db:53:36:
         d0:7b:a0:70:fb:b7:26:0c:eb:c2:d9:45:4c:b6:22:bb:61:50:
         7c:de:fe:8c:b9:d7:dd:fd:8b:aa:39:ba:be:e4:87:ae:74:bd:
         d1:c4:96:03:b5:3b:3c:51:cf:e3:d1:69:86:83:30:1f:af:e2:
         5c:fe:60:a8:aa:71:5a:e6:68:62:e6:d4:22:71:ec:d4:25:bf:
         80:1c:9b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:49 2025 by rpki-client