Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
File:                     0jxZJVkZvdmrA73hxceIBixLmfM.mft (raw, json)
Hash identifier:          lAhCfLue376VhZhvtz8HqldqnabnzdDKsWzBM5pomUQ=
Subject key identifier:   88:14:84:7F:18:1B:FA:2A:C2:AC:3D:FE:91:48:5E:25:88:60:F3:7C
Authority key identifier: D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3
Certificate issuer:       /CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
Certificate serial:       0199FCFD227A94FEAAA73167FF0F3A3D2F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
Manifest number:          0815
Signing time:             Sun 19 Oct 2025 15:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:11 +0000
Files and hashes:         1: 0jxZJVkZvdmrA73hxceIBixLmfM.crl (hash: U539ARAWdDECGmeokJjNMmQOsSO/FMXThZjEQBHLR/w=)
                          2: JC586knHAJCWuyAHAdSdP6vCZvc.roa (hash: 5tWj8kAF7Tk8U+7sz2E535dJcNrZC7NIfrQwoPJI7rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:22:7a:94:fe:aa:a7:31:67:ff:0f:3a:3d:2f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23c59255919bdd9ab03bde1c5c788062c4b99f3
        Validity
            Not Before: Oct 19 15:01:11 2025 GMT
            Not After : Oct 20 15:01:11 2025 GMT
        Subject: CN=8814847f181bfa2ac2ac3dfe91485e258860f37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:f7:57:74:54:91:53:7a:bb:1c:5e:7d:a5:
                    27:d1:c3:30:3d:d8:94:8e:76:9d:2e:1f:17:77:36:
                    d0:c9:74:e5:0a:b7:44:ff:dc:45:64:ac:3c:c1:09:
                    33:b2:aa:a3:de:af:55:5a:52:a8:13:1f:0d:17:dc:
                    d7:67:7a:1d:1d:fc:a6:73:ec:5a:e6:09:ce:25:92:
                    31:b5:d8:f4:89:1f:ef:88:17:7f:54:ce:34:4c:e0:
                    b6:31:09:62:62:63:67:eb:79:eb:9b:a3:0f:21:ef:
                    cf:82:2e:87:7b:04:2a:d6:1c:92:7e:dc:95:39:3f:
                    77:97:2d:d2:db:37:c7:7c:b2:f7:3c:e1:e4:29:a1:
                    59:76:c0:98:de:3e:bb:91:4b:c3:3e:cc:d1:45:f9:
                    6c:28:e5:fa:5b:19:96:89:29:6a:90:9c:c2:7c:a2:
                    21:5b:f3:2b:05:07:0f:f5:34:d6:f4:a5:5b:71:05:
                    bb:b2:2f:41:a0:83:cc:c6:78:7d:d1:c4:b0:2e:8d:
                    b3:c2:45:19:35:07:74:63:b0:54:b3:ef:37:3c:d0:
                    a3:3e:c3:3e:ae:66:16:ec:0a:80:38:8b:aa:b4:c2:
                    8c:20:4a:c5:cb:6c:49:b9:30:7c:b1:85:5f:99:c3:
                    80:f5:6a:47:f9:49:7b:b4:e1:14:0b:f1:66:43:56:
                    f6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:14:84:7F:18:1B:FA:2A:C2:AC:3D:FE:91:48:5E:25:88:60:F3:7C
            X509v3 Authority Key Identifier:
                keyid:D2:3C:59:25:59:19:BD:D9:AB:03:BD:E1:C5:C7:88:06:2C:4B:99:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jxZJVkZvdmrA73hxceIBixLmfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0fc3f6-6a1a-4cdc-a147-da8b2d576bf1/1/0jxZJVkZvdmrA73hxceIBixLmfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d4:16:ce:26:c7:38:2e:bd:b3:4b:d2:41:b5:b1:81:2d:9f:
         1b:c9:91:2f:9b:67:c4:28:9f:58:42:c1:58:bf:04:c9:53:be:
         01:dd:fd:ce:d8:ea:da:33:90:ee:6e:1b:92:56:0d:be:0b:a8:
         89:f6:4d:ef:2d:c2:f6:48:f9:67:8e:f0:23:9e:13:da:bb:7b:
         0d:84:53:00:11:9f:bd:fa:77:59:67:62:24:b9:e4:92:eb:00:
         a1:cd:dd:ee:36:c3:92:b6:b1:72:9c:4c:90:e7:33:ca:d4:4a:
         30:89:ff:9c:e5:91:f8:88:8b:77:f7:2a:0c:81:8a:66:3d:2c:
         a6:78:0c:d1:f0:39:60:86:29:e7:e4:63:00:15:af:6f:88:3e:
         98:b8:8b:a2:3d:05:f6:89:e2:e5:6d:bb:a6:69:95:8d:61:34:
         5e:cc:6c:88:6f:c5:0f:d7:2e:97:6d:ef:0b:2f:99:96:d6:d3:
         cf:3f:c8:16:e9:97:42:fd:62:e6:4f:d0:0c:60:90:70:2f:f9:
         d3:bc:c4:c2:c8:a6:52:3f:47:52:0a:fc:db:eb:0a:55:fa:db:
         62:ec:0e:6e:6d:25:09:0a:cb:56:46:b3:cd:7a:91:10:e4:a9:
         b5:c3:2e:78:69:04:25:d5:4a:7a:2f:b6:4a:dc:54:ae:65:4c:
         0e:d2:c7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:28 2025 by rpki-client