Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
File:                     JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft (raw, json)
Hash identifier:          rnKBVDogRvgX+irm38furw+2z2aK9oUrbkpccLqEVCM=
Subject key identifier:   22:77:96:47:9D:37:03:D1:68:BC:6D:94:7B:13:57:CE:C1:93:0C:13
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Certificate issuer:       /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial:       0199FB7C76E4A5D85436AAD49A2F834E4C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
Manifest number:          0BD9
Signing time:             Sun 19 Oct 2025 08:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:02 +0000
Files and hashes:         1: EGBRjPl07LC9IiSKlWfhoU-_Crk.roa (hash: bOSVTvIZ5LKS962rF/GAi5VGVNIMkbk2qTb5VU4uyO0=)
                          2: JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl (hash: IedLYsPLRZ8vEwWd0xxYdBe9trp6hGs2ODqsf+UOD5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:76:e4:a5:d8:54:36:aa:d4:9a:2f:83:4e:4c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
        Validity
            Not Before: Oct 19 08:01:02 2025 GMT
            Not After : Oct 20 08:01:02 2025 GMT
        Subject: CN=227796479d3703d168bc6d947b1357cec1930c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:6c:b9:15:41:eb:49:0c:a6:41:37:6f:21:
                    f1:60:69:35:62:28:b8:fd:2b:b2:7f:85:67:fe:e1:
                    53:60:cb:15:60:9e:a2:85:2f:30:67:89:db:c5:7e:
                    88:c3:71:66:3b:33:91:58:37:d2:17:3e:64:5c:17:
                    e0:be:65:49:7e:43:65:af:62:22:fa:cc:d7:c7:89:
                    13:59:40:43:da:b3:70:c1:2d:0e:55:47:b9:d6:b6:
                    90:7c:c6:89:43:ac:0a:49:b3:22:b6:e3:01:44:d5:
                    2b:aa:30:cf:5c:83:11:d5:bd:05:1f:b8:2a:82:d8:
                    1e:f6:31:7e:4f:a5:a7:4a:36:da:11:e7:11:5f:ea:
                    05:ce:01:ed:7f:d5:fa:2a:61:fa:4e:22:c2:d2:e4:
                    ad:f7:da:48:13:2d:17:53:96:8a:24:81:db:dc:09:
                    46:b6:15:77:e8:9b:63:f2:db:0f:b0:15:e9:d7:a4:
                    33:42:0e:52:aa:61:11:ae:8c:5e:cc:cd:b0:44:2d:
                    4f:68:f6:6a:95:ee:dd:17:6f:ce:62:2c:1f:62:08:
                    6b:c7:cf:79:40:8d:ad:d6:39:b8:9c:37:4d:3e:5d:
                    fe:e8:1f:51:4d:e1:39:88:a3:eb:eb:26:16:a6:b5:
                    8d:2b:a5:42:d9:45:47:ab:d3:77:19:8a:b9:03:11:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:77:96:47:9D:37:03:D1:68:BC:6D:94:7B:13:57:CE:C1:93:0C:13
            X509v3 Authority Key Identifier:
                keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:51:cf:ed:c9:2b:d2:77:2d:ec:2e:a2:5e:bd:84:12:ff:21:
         38:93:5c:df:81:f2:81:c2:7c:48:e3:60:5a:44:bf:f7:70:62:
         f2:67:41:3a:12:67:5e:c3:a8:9a:9a:37:d9:4e:0c:e2:a1:46:
         85:4f:93:4c:e6:db:a7:8e:0b:ac:60:a1:77:fc:b3:7a:45:fb:
         d5:e4:bb:22:97:17:8f:0a:a3:31:b2:c2:23:b9:dc:76:e0:e2:
         07:9c:a8:ac:9b:65:c9:7d:1e:f5:60:3f:71:e5:13:f2:ed:70:
         02:5d:a9:e0:e4:e3:93:6f:fa:08:d7:42:0f:1c:ec:be:d1:a9:
         54:06:12:e4:8e:80:c4:f6:63:f3:bc:1c:71:e4:20:34:c1:bb:
         a0:af:dc:14:66:ec:4f:1e:ab:18:fa:00:0d:b1:72:82:33:18:
         f9:bf:63:3d:fc:ae:aa:bd:3e:83:dc:a0:03:2a:10:9c:e5:e8:
         53:b9:d2:60:52:19:41:49:56:f9:18:ee:f4:06:2b:2d:73:f7:
         55:1d:77:1d:93:06:08:ad:ec:90:03:52:50:bb:d8:7b:71:f8:
         38:e5:c6:5b:f4:a2:27:88:5b:e0:08:97:0a:da:50:7a:3a:b0:
         5e:ab:c6:e6:a5:2f:f5:e0:08:93:f7:35:f4:b2:60:a3:dc:cb:
         ff:7d:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:54 2025 by rpki-client