Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
File:                     JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft (raw, json)
Hash identifier:          hXNYoKqJJ+iNLngIR5rlrvcMgAJzPaNvJ1XCGW/Pu9c=
Subject key identifier:   D4:D1:BC:32:46:53:B1:B4:2E:5B:78:AF:64:B7:D4:74:5B:09:00:EB
Authority key identifier: 26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6
Certificate issuer:       /CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
Certificate serial:       0199FC59148AD08E7ED03D5D8A72153ADEAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 12:02:00 +0000
Manifest this update:     Sun 19 Oct 2025 12:02:00 +0000
Manifest next update:     Mon 20 Oct 2025 12:02:00 +0000
Files and hashes:         1: JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl (hash: Dg5ub/OOfimLCa+q+OQeBD3J71zAetqFeLUQFWzgaj0=)
                          2: r8Obi9IFhGpTy_Fq_kKt7tzU_pA.roa (hash: aKaPCyYUlKajFN86VFdggb+LUFUQbQdhAkrOshlrb08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:14:8a:d0:8e:7e:d0:3d:5d:8a:72:15:3a:de:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b9ceb10c2c8c00d16099603cc11bed00547be6
        Validity
            Not Before: Oct 19 12:02:00 2025 GMT
            Not After : Oct 20 12:02:00 2025 GMT
        Subject: CN=d4d1bc324653b1b42e5b78af64b7d4745b0900eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:de:52:05:57:4a:d7:f9:6a:ee:a9:3e:72:
                    c5:36:c2:21:35:cd:5c:ea:63:61:f2:23:ed:0e:17:
                    4a:8d:1f:85:09:67:0a:d2:7c:4a:c4:03:76:b1:a7:
                    4b:fc:44:40:14:db:7d:a0:33:d8:f1:dc:8a:ee:5c:
                    2f:de:1e:a9:e4:18:8f:46:b5:29:9e:81:13:a8:44:
                    3d:35:db:1c:b2:4e:2e:fa:08:8a:48:43:16:df:88:
                    9e:13:db:89:c1:b5:86:7a:02:ff:48:8a:84:86:3c:
                    6a:ac:8f:2a:0e:8c:aa:ed:5d:f7:eb:e8:c4:76:a3:
                    e0:41:d4:73:92:d9:04:f8:0e:ff:34:10:f2:3b:5a:
                    50:52:29:bd:87:e9:b4:ce:ec:d8:df:59:07:3e:c5:
                    9b:a9:63:42:f6:65:c5:98:b4:2d:d4:13:87:dc:46:
                    48:b8:7d:7e:35:31:d3:05:5d:5d:91:b8:fb:96:8f:
                    ad:69:e7:78:7b:dc:8b:b6:90:8c:6b:c9:1e:83:ce:
                    2a:5e:6f:da:7c:ac:db:42:0a:0d:7e:9a:08:ed:d5:
                    dc:2e:ac:d5:80:32:9b:48:80:45:9f:18:8f:ce:41:
                    aa:1f:b5:62:dd:7a:80:06:dd:32:ca:59:58:ef:42:
                    47:c7:b0:d8:4d:4c:ce:ac:10:23:4b:6a:74:1a:d3:
                    27:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D1:BC:32:46:53:B1:B4:2E:5B:78:AF:64:B7:D4:74:5B:09:00:EB
            X509v3 Authority Key Identifier:
                keyid:26:B9:CE:B1:0C:2C:8C:00:D1:60:99:60:3C:C1:1B:ED:00:54:7B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrnOsQwsjADRYJlgPMEb7QBUe-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc98cb-971d-4b04-b81e-b610568466b3/1/JrnOsQwsjADRYJlgPMEb7QBUe-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:79:2e:a4:31:b4:b9:33:36:67:93:f3:fe:82:f2:09:f7:37:
         c3:c4:fe:a9:af:9a:89:6f:d0:64:1b:1b:ad:62:75:cf:4c:37:
         f1:9f:b8:32:88:12:31:11:04:3b:26:08:2e:b4:d7:df:36:2d:
         21:e0:2a:96:1d:8d:9e:7f:30:60:44:57:f7:2d:ec:95:a2:1a:
         d6:13:ae:f6:29:4d:de:e6:b2:75:4d:14:1e:36:ea:e3:fd:40:
         c0:86:6b:40:be:64:d0:45:2c:17:c5:53:0e:dc:d8:19:21:43:
         53:b3:2d:2e:ef:08:90:96:f4:50:02:89:18:e4:2a:67:3e:9e:
         a9:14:b6:71:79:90:5e:d9:7f:51:37:09:74:5b:cb:7b:41:a0:
         e7:ae:65:35:fa:7f:86:04:82:18:00:08:2a:50:b2:f2:42:cd:
         ed:3f:bd:df:48:27:52:0f:ce:a4:7c:1e:a5:17:81:fb:96:21:
         2c:53:6e:5e:fe:1a:08:fe:0d:74:e2:e9:43:59:15:d1:20:c6:
         08:87:94:9b:df:f7:ef:3c:11:1c:3e:4b:29:3f:4d:16:49:1e:
         b2:d9:bf:13:89:13:32:ca:9c:b7:58:70:6d:63:b2:70:a1:b3:
         13:33:c8:54:25:1f:ea:5e:69:4f:c8:04:39:70:93:10:76:bd:
         0a:ae:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:32 2025 by rpki-client