Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
File:                     jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json)
Hash identifier:          Zq2n4+HlqAxRCArBzc6JA3nw0WuRq1wb9HRcRWgxM4o=
Subject key identifier:   5C:75:FD:58:5A:44:03:B3:2A:F0:07:7F:34:89:13:49:7C:D6:4A:50
Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F
Certificate issuer:       /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
Certificate serial:       0199FB7C87231BDAA9CE0F3A75BA2EB8260B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
Manifest number:          14AA
Signing time:             Sun 19 Oct 2025 08:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:06 +0000
Files and hashes:         1: NS4aUYlRSBiLTkLyyg7u-X42X1Q.roa (hash: r06qcWYpFC8YgZh35Sp5HzeJjcmGRBfHKZK7KBnJFGA=)
                          2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: 8R16J0F3Pa/Kj50cduWLpKhylDP3bljnzgWLyEa6cdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:87:23:1b:da:a9:ce:0f:3a:75:ba:2e:b8:26:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f
        Validity
            Not Before: Oct 19 08:01:06 2025 GMT
            Not After : Oct 20 08:01:06 2025 GMT
        Subject: CN=5c75fd585a4403b32af0077f348913497cd64a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:fb:e0:68:9f:75:83:43:09:43:7f:66:9c:
                    16:0a:2b:b1:58:5a:bc:6f:65:b7:c8:08:77:74:ca:
                    8d:5e:ec:9e:20:6a:91:c3:d0:73:a3:7c:3a:3e:61:
                    db:52:62:dd:83:58:c0:c4:39:a3:0d:c6:91:7e:7a:
                    83:01:89:5c:98:d3:07:65:3f:4e:d2:10:0f:2c:4a:
                    7c:6d:bf:ea:ec:51:08:be:0e:d8:67:bc:dc:45:fd:
                    a0:f4:36:b3:f4:2e:9b:0b:36:e2:07:b2:a0:72:4a:
                    b5:56:73:5c:cc:79:05:39:1e:c7:26:4c:80:55:bd:
                    62:0e:c7:da:2c:c1:60:e3:bb:64:0f:16:31:e3:1f:
                    6d:80:0c:b9:7d:4c:8b:ab:83:f6:63:31:63:5b:3c:
                    99:83:90:7c:19:1e:4b:7f:cb:0a:5c:b4:72:c6:22:
                    ca:cd:80:7a:18:1c:38:6e:03:de:a6:a0:3a:e5:0a:
                    53:a8:25:00:c5:e8:66:a0:b1:23:f7:4e:aa:ab:56:
                    b2:c8:68:ff:34:17:90:20:f8:3d:27:ca:12:a8:b1:
                    44:6f:82:65:bb:0d:3c:4e:9d:9f:d7:a4:f4:e5:c2:
                    c2:8a:e4:70:0c:d6:0d:6f:72:58:de:03:84:f5:7d:
                    2a:6d:24:63:ad:e0:a3:a3:28:46:d9:0f:56:ba:29:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:75:FD:58:5A:44:03:B3:2A:F0:07:7F:34:89:13:49:7C:D6:4A:50
            X509v3 Authority Key Identifier:
                keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ac:57:24:fe:fb:0b:0b:b3:44:19:b2:b4:aa:04:7c:d7:fe:
         4a:d2:fb:b0:32:2d:8d:7b:1e:7a:35:28:27:81:3a:ec:2b:8c:
         50:69:26:14:34:77:ee:f9:19:f1:66:28:21:bf:23:52:f5:f0:
         7c:04:81:9e:74:5f:cb:5e:a2:35:a1:5d:22:83:9f:4e:32:ce:
         a8:fb:e9:50:16:ff:be:88:8d:38:51:53:eb:a5:54:bf:82:8a:
         9c:65:ce:72:ea:83:fb:c7:db:b8:30:c0:3a:59:09:9e:2f:f7:
         67:03:39:b5:38:86:0d:0c:d6:a1:98:7c:ff:96:7d:b2:54:22:
         a4:56:80:a4:49:ab:06:04:23:56:1d:ab:28:dd:40:72:88:6b:
         06:14:a4:93:cb:13:8d:ee:7e:93:ee:24:81:c9:0e:f4:6f:32:
         91:f8:6a:85:78:13:9c:59:f9:63:06:e0:ea:f7:23:36:c1:4e:
         56:72:c3:3a:55:49:7d:4c:cf:a8:6e:f8:33:39:ee:d0:49:cc:
         d4:b8:cc:2e:23:fc:ef:d0:25:9b:7d:55:2d:f3:66:61:34:04:
         1d:c9:2d:f7:50:4b:42:84:a1:7c:64:eb:bd:2b:78:a3:d9:cb:
         e3:63:bb:07:f2:cd:55:6c:94:d3:b2:b1:7f:a7:7c:e3:66:f6:
         d2:8b:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:05 2025 by rpki-client