Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File:                     jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier:          IxZWb6RM2xhwLq3o59mwuiFrIZ28IeCrx9aduzqCLbw=
Subject key identifier:   AE:B7:A5:D4:42:48:50:A0:0F:7B:3D:29:00:67:9A:18:8E:21:7C:BE
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer:       /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial:       0199FAD7DF99DA635BCA27E2252CA35203FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number:          0A52
Signing time:             Sun 19 Oct 2025 05:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:15 +0000
Files and hashes:         1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: IALGorBGiYVLlWCHLzU4uPgnxT2ISx2NoblIscW8egg=)
                          2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:df:99:da:63:5b:ca:27:e2:25:2c:a3:52:03:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
        Validity
            Not Before: Oct 19 05:01:15 2025 GMT
            Not After : Oct 20 05:01:15 2025 GMT
        Subject: CN=aeb7a5d4424850a00f7b3d2900679a188e217cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:79:23:3d:14:10:d4:6f:1a:8d:ea:a7:78:
                    30:0f:24:32:f8:78:b6:9e:d6:a7:85:e1:38:36:28:
                    ac:ee:89:98:6d:04:51:2d:df:8c:74:76:41:b1:2e:
                    7e:7e:9c:ad:be:a2:e3:5e:89:02:3f:ff:45:c9:7c:
                    9c:09:5d:d0:fd:6d:f6:8c:3c:6a:33:2a:53:74:b6:
                    c6:ff:a3:6f:c8:04:40:28:b1:ef:13:22:30:a0:b2:
                    4b:ee:c3:a5:87:ec:94:3c:b5:7e:a6:2d:34:8d:d1:
                    92:e2:3f:d2:15:fc:a2:13:84:29:8b:d7:1f:e1:73:
                    71:58:ac:e0:8e:2f:06:c9:48:08:8f:8d:93:0c:54:
                    9b:a5:0e:ac:16:2e:5e:da:d1:de:bb:7b:35:12:75:
                    67:24:2a:09:49:f4:6d:da:a7:fe:20:8d:77:6e:6f:
                    cc:99:0f:8c:87:97:f0:3c:17:41:16:7c:55:80:44:
                    9a:f1:f1:b0:96:94:5f:be:e4:3d:2d:2e:1f:5b:03:
                    6a:38:53:e6:99:de:a3:15:72:8d:d4:44:16:f4:51:
                    4a:79:55:56:91:f6:c4:a3:d5:04:15:1b:bb:b5:44:
                    a2:e6:a5:ce:c0:be:36:6d:7a:cb:cb:cc:06:5a:a6:
                    42:e2:72:35:3c:b8:76:22:ee:1f:b2:e0:bf:b6:c6:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B7:A5:D4:42:48:50:A0:0F:7B:3D:29:00:67:9A:18:8E:21:7C:BE
            X509v3 Authority Key Identifier:
                keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:29:c9:23:31:ba:e5:87:b7:54:e4:44:be:7a:e7:5a:5a:b6:
         6b:7c:17:f3:e6:cc:8f:4f:b7:f0:71:ff:6f:89:51:ac:b3:ee:
         99:c6:6d:e7:a2:f4:9d:cc:1c:3e:fe:b4:92:09:17:d2:32:f0:
         41:3d:6c:99:de:e9:5e:6f:e3:e3:16:8d:07:3d:f9:9f:90:eb:
         ff:8d:31:a5:22:92:b4:81:d9:0c:14:c4:7a:ae:00:32:65:17:
         c8:58:04:ea:1d:1d:9d:76:4b:e2:87:6b:1a:a8:c2:ae:f6:ee:
         f7:77:61:b2:98:f8:3a:47:bd:2a:6f:79:b5:3b:70:c1:79:f5:
         e5:e3:b3:52:8a:f6:89:39:36:a6:2a:11:af:9d:9e:7f:e3:e8:
         51:56:68:c9:4a:48:be:bd:17:cd:91:1d:f1:bb:9c:d4:f3:15:
         0d:f8:ab:43:c0:1a:eb:c2:fc:97:0c:d4:2a:1a:d5:6a:1b:8d:
         ff:f2:08:3b:f5:47:9e:52:4b:eb:b3:3b:75:cd:f2:ef:64:9c:
         b3:9f:89:9e:eb:6c:f9:2e:fc:ba:76:cd:5e:43:92:af:78:89:
         1c:b9:17:86:1a:ae:cd:51:5a:75:d6:ca:a4:a9:c6:ca:ff:0a:
         66:33:f6:15:d1:9e:bd:cd:11:39:38:e5:2f:8f:fe:90:90:3a:
         18:bd:c1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:25 2025 by rpki-client