Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File:                     JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier:          ad1nbCQ2o0ZmPwavcj4+LmH1qTI+Hse32sHQwMFYh70=
Subject key identifier:   F6:20:89:03:B3:46:C9:82:5C:1F:12:04:75:91:2A:83:09:F7:B2:AF
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer:       /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial:       0199FBEAFF5DD2A4341CC6A1F24EC557F90C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number:          0F80
Signing time:             Sun 19 Oct 2025 10:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:46 +0000
Files and hashes:         1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: /mNnZ0F89yMGCam/rP+LRV0QZJBP8yJ3M3qpeIAp5xc=)
                          2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:ff:5d:d2:a4:34:1c:c6:a1:f2:4e:c5:57:f9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
        Validity
            Not Before: Oct 19 10:01:46 2025 GMT
            Not After : Oct 20 10:01:46 2025 GMT
        Subject: CN=f6208903b346c9825c1f120475912a8309f7b2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ed:d6:ac:d9:12:f9:fe:e0:9a:36:75:cd:e2:
                    31:63:0e:8c:31:b0:92:9f:4e:e7:2a:f4:e2:a2:15:
                    94:65:31:18:a5:de:fb:8c:d4:02:8d:bb:c7:3e:f4:
                    c8:7a:7d:07:84:7b:e9:bf:6d:51:fe:56:8a:d3:7b:
                    c9:65:37:3f:34:d2:86:fd:4f:e5:33:ef:db:5b:78:
                    ca:34:0d:fa:33:bd:4e:ac:b6:6a:14:e1:4f:69:60:
                    49:3f:84:48:ed:21:08:d9:97:f6:73:33:97:c9:d5:
                    aa:80:4b:58:b1:72:ff:72:f0:3c:d8:19:49:a7:74:
                    9c:0b:46:2f:47:d6:14:df:dc:42:a4:75:92:5f:4e:
                    c6:da:0f:36:e9:af:19:fa:5f:6b:f2:72:ce:fa:b6:
                    f5:e0:ce:74:e6:1c:7b:1a:c0:00:d1:f6:d7:c4:29:
                    c9:63:98:5b:14:9e:09:26:86:cb:59:f6:ea:e8:98:
                    f8:1a:05:48:f2:83:34:ad:48:11:53:44:47:e2:3a:
                    09:c1:45:cc:e3:3b:e0:62:4b:ba:28:33:cb:17:46:
                    44:7d:82:87:d2:51:76:aa:e7:d8:d7:7c:42:02:cf:
                    c9:47:ac:3c:59:51:ab:30:23:72:42:0b:9e:48:22:
                    84:52:d5:02:39:0f:43:ef:a4:e7:e0:bc:ab:36:09:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:20:89:03:B3:46:C9:82:5C:1F:12:04:75:91:2A:83:09:F7:B2:AF
            X509v3 Authority Key Identifier:
                keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:e9:32:2b:28:42:fe:5b:fe:76:cb:6b:b9:67:9f:a7:56:
         40:1d:af:e5:c9:d1:94:bc:c0:ef:db:19:8b:0e:6c:d5:28:78:
         20:2b:a4:3d:7a:48:2d:78:21:37:46:1d:06:0f:a4:40:8e:5d:
         5b:69:69:96:0f:c3:e2:b8:08:b1:95:2e:e3:30:a9:ba:40:50:
         ef:82:d8:d1:83:68:e6:2f:67:7e:79:39:4c:b8:ff:91:19:9c:
         6a:3b:d1:2b:24:62:cd:f2:d7:f5:d3:8e:27:9f:18:33:4a:6d:
         46:c9:54:29:31:e3:33:71:87:92:fa:10:85:ec:e0:c7:47:07:
         01:ec:1f:c9:2f:17:6a:7c:aa:37:0c:3c:56:83:f5:3f:f0:90:
         4b:77:5e:df:e0:1f:c3:fc:65:e3:7c:f8:9a:45:65:ba:c7:3a:
         7d:9b:67:e2:33:c1:13:54:f3:df:d1:81:8a:3f:a1:c7:b7:e9:
         8b:8e:f8:2b:49:47:bd:14:9a:4f:23:7d:2a:c3:2e:b3:34:fe:
         0f:77:92:38:97:cb:ce:43:c0:ea:a8:bf:af:d2:93:7c:b8:86:
         d2:21:c2:6b:5f:47:ee:95:fb:34:88:ff:f9:c5:75:89:39:c0:
         e6:a1:e2:90:88:ae:93:e8:ee:2f:2f:6b:af:95:39:ff:ef:46:
         0f:e7:cc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:30 2025 by rpki-client