Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File:                     JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier:          ekGrqKU0zOW3jx5fDqp88dkhoy0nwlHv0jZj5ieVxnM=
Subject key identifier:   B8:1C:85:83:31:00:22:75:4A:CE:AE:A5:56:00:02:A0:3B:69:B4:03
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer:       /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial:       019A01EBF081EC482E37C3FD224B1273100D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number:          0166
Signing time:             Mon 20 Oct 2025 14:00:30 +0000
Manifest this update:     Mon 20 Oct 2025 14:00:30 +0000
Manifest next update:     Tue 21 Oct 2025 14:00:30 +0000
Files and hashes:         1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: rRc1CfnBQteHgq7hPTX2g5awB4Qx1WQhT23EqV/LsMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:eb:f0:81:ec:48:2e:37:c3:fd:22:4b:12:73:10:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
        Validity
            Not Before: Oct 20 14:00:30 2025 GMT
            Not After : Oct 21 14:00:30 2025 GMT
        Subject: CN=b81c8583310022754aceaea5560002a03b69b403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a4:4f:ec:0f:cb:5f:7b:e8:29:54:ee:9e:b0:
                    8d:9c:34:c0:25:94:f9:76:2e:51:91:c3:3d:b2:6c:
                    53:56:e1:9b:c9:a6:49:9e:ab:f0:b4:2f:21:7d:3a:
                    87:d7:38:3b:5f:4a:7c:0c:e1:ed:65:8c:ed:b4:e8:
                    1d:1b:b6:13:41:27:76:87:53:14:c5:18:4f:83:ee:
                    86:cb:ff:e1:fb:a9:ee:5d:90:60:74:06:f9:2f:38:
                    19:1e:62:05:81:0a:a5:10:aa:fc:73:77:ad:9e:f3:
                    cf:7e:de:a0:c1:e8:e5:43:3f:4a:02:a0:f4:2b:e2:
                    11:14:50:7f:2d:d0:00:9b:71:39:8d:e1:3c:60:4d:
                    8e:5f:d1:e0:48:e8:c9:d4:7e:15:9b:1c:42:8d:49:
                    7b:3f:f1:25:8f:08:19:5f:17:10:bb:ed:4b:23:f4:
                    0a:4e:8d:1d:52:e1:1b:a7:20:25:36:2e:48:cf:49:
                    f2:1f:4b:db:20:07:33:8f:35:91:2f:54:e5:0b:65:
                    35:82:1b:41:3c:99:2a:be:59:b8:b5:80:74:a0:7b:
                    91:72:66:17:b9:80:3b:96:fb:c5:79:fe:da:f5:94:
                    33:7a:4f:24:fd:27:48:37:f0:fe:ab:46:2f:a8:8b:
                    46:d5:23:12:37:91:70:47:a2:03:1c:5a:4e:96:1e:
                    f5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1C:85:83:31:00:22:75:4A:CE:AE:A5:56:00:02:A0:3B:69:B4:03
            X509v3 Authority Key Identifier:
                keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:8d:a2:09:63:53:b4:cb:6b:17:7a:19:69:cd:99:ff:6e:
         3a:f5:8f:2f:d6:7f:7e:87:fa:d6:7e:7c:e7:1c:e4:e4:8d:87:
         15:5b:38:e3:4b:80:94:b6:d1:6b:72:32:4d:a4:5b:cf:4a:36:
         15:38:0d:8b:f7:d9:0c:f1:25:77:95:f8:ea:53:0e:fe:94:7d:
         93:9d:7c:f7:a8:05:f8:fe:ae:65:03:c7:d4:e5:43:75:fc:96:
         53:6c:8e:d1:1c:a3:7b:90:ca:7b:1b:9e:a2:6e:30:b6:65:b0:
         d5:62:e2:6d:e0:9a:9e:24:c2:74:3f:2a:2e:a8:f8:3b:8a:2c:
         5b:98:bf:89:65:e1:ae:cb:cb:36:49:a0:d7:74:d3:d7:20:a3:
         bd:67:2a:e9:46:ba:b8:48:03:7a:b3:21:72:67:92:b4:8c:e1:
         69:de:fc:9d:ef:0c:51:f1:c6:c4:14:af:6a:45:88:29:60:c1:
         da:b5:e1:ae:68:72:57:ca:ff:db:60:a5:35:fc:e6:6f:f8:c9:
         35:30:59:a3:f5:0b:d3:ae:61:ee:ec:c9:e0:e2:1b:96:4a:08:
         9e:0c:de:34:d3:6e:74:75:3b:c7:b3:03:6e:54:42:40:be:3b:
         a1:b5:59:d2:3e:9e:82:48:73:c9:cb:e3:47:10:8d:ac:6c:06:
         a3:c5:70:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:51 2025 by rpki-client