Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
File:                     bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json)
Hash identifier:          dnr7GihYAzR+VVmaIAVH23PC3hPGREdZKnQ19+bjubY=
Subject key identifier:   24:64:6F:8C:0B:4B:4C:B4:35:09:69:6F:7C:56:FD:F1:E8:F3:6F:66
Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Certificate issuer:       /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Certificate serial:       0199FCFDB839FDA05A43D839E631BD9CCCB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
Manifest number:          0D74
Signing time:             Sun 19 Oct 2025 15:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:50 +0000
Files and hashes:         1: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (hash: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=)
                          2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: auXLINF0rulptWvFVvBdtKcBv4HQ+LPVDFI9cMt5hnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:b8:39:fd:a0:5a:43:d8:39:e6:31:bd:9c:cc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
        Validity
            Not Before: Oct 19 15:01:50 2025 GMT
            Not After : Oct 20 15:01:50 2025 GMT
        Subject: CN=24646f8c0b4b4cb43509696f7c56fdf1e8f36f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:9e:bb:1b:be:0c:18:66:81:7c:1d:33:5f:
                    76:0c:55:23:86:4d:e4:9c:d7:9c:ee:ae:2e:84:46:
                    a2:03:4d:c4:ed:de:73:57:38:9a:4c:e4:b7:9b:04:
                    0f:ad:de:62:ba:47:d1:28:aa:12:69:13:87:5b:a3:
                    f1:ca:b3:e2:6f:6a:4d:f8:4f:c3:d5:16:cc:f4:61:
                    48:8c:ee:32:33:da:37:69:c0:4d:38:ce:9e:a9:e9:
                    0b:6b:b2:34:f8:ae:f0:37:3b:43:81:28:49:9b:41:
                    3c:a8:3d:93:4a:03:53:75:9c:24:c4:5f:38:11:42:
                    78:1b:be:19:a2:46:ac:44:fb:be:32:d1:d0:af:50:
                    2b:8b:a0:70:0e:16:f6:c3:4c:cc:82:27:3b:17:40:
                    03:4d:d6:6f:16:f0:b4:27:8b:2e:e6:59:73:24:49:
                    a1:5c:92:0a:bb:72:a5:e3:87:46:6e:ee:d8:66:2d:
                    7b:0d:07:2f:36:27:a2:53:73:17:b3:b7:59:40:fd:
                    9b:9f:27:c9:a3:48:1b:d1:d4:08:d4:d5:2c:82:f5:
                    a9:fe:0a:dc:98:62:33:02:88:cf:9b:d1:3e:d7:bb:
                    40:9b:6e:c4:b2:e1:d6:bd:64:8b:68:7f:8f:a3:cf:
                    04:9a:cc:56:65:42:bd:78:49:51:ce:33:f3:71:99:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:64:6F:8C:0B:4B:4C:B4:35:09:69:6F:7C:56:FD:F1:E8:F3:6F:66
            X509v3 Authority Key Identifier:
                keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4e:e4:ee:49:e7:15:97:1c:28:69:2d:1d:6e:cb:26:ce:74:
         78:04:fe:e3:18:8e:38:e3:d2:12:b0:79:d6:bc:b4:0d:fc:3a:
         b5:dc:3c:eb:4c:12:5a:d8:87:50:d3:4c:ce:7e:bf:c8:7b:3e:
         61:27:0e:3b:bd:46:dd:15:ee:b6:35:28:82:9a:7e:47:3b:e5:
         25:0a:9d:ac:ec:aa:bd:a6:70:16:e7:7e:02:8f:af:22:11:33:
         a9:19:09:7a:a2:6e:11:7d:be:3c:95:53:08:0a:83:b9:86:ea:
         3d:e4:96:e9:89:6b:3e:12:89:a4:67:3e:95:80:d5:18:2e:8e:
         53:63:5b:d1:f8:ed:11:ac:2d:31:4c:36:bb:49:5f:12:82:78:
         4a:f0:05:3c:53:63:4e:8a:9a:26:87:1f:08:27:1f:84:94:a5:
         13:7a:a6:c1:57:b3:a6:d1:82:ba:31:75:53:03:a6:b7:0c:fd:
         da:03:13:61:3e:dc:c0:c1:ac:8d:74:99:e3:7c:e2:a9:2c:0a:
         50:37:2d:44:15:2e:69:96:71:c0:2c:d9:42:e4:4c:ed:d6:c4:
         09:fa:0b:70:06:4f:01:25:a8:35:2e:d0:8b:e0:3a:df:d8:2c:
         1b:49:76:76:72:a8:3e:b9:0c:15:26:83:da:c9:e6:de:a6:e6:
         bf:2a:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:53 2025 by rpki-client