Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
File:                     JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft (raw, json)
Hash identifier:          RI8L5QG3uxhXXIuDhJlo3yR6MeDa5RRdntoQI0+D0HI=
Subject key identifier:   3B:51:79:0B:6C:94:96:F6:C5:6A:81:10:3C:A6:79:50:06:5E:48:D2
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Certificate issuer:       /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial:       0199FE1053542A5100CA3E09ACE46B2CA7DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
Manifest number:          0ED8
Signing time:             Sun 19 Oct 2025 20:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:46 +0000
Files and hashes:         1: JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl (hash: DCqTpTIvapmL5MT2Xs8EpAahq9QyGnKS75Y4LsQTfew=)
                          2: t5KH1FGaAuB50jIyv-mWsCV4YiY.roa (hash: WmKRabvhJ8d8xujyGtrgZuJ7rkW86Ru4hgJL7uZhjLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:53:54:2a:51:00:ca:3e:09:ac:e4:6b:2c:a7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
        Validity
            Not Before: Oct 19 20:01:46 2025 GMT
            Not After : Oct 20 20:01:46 2025 GMT
        Subject: CN=3b51790b6c9496f6c56a81103ca67950065e48d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:95:10:7e:fd:25:d3:69:02:74:dc:27:62:fc:
                    39:3f:11:9c:58:3a:5d:5d:4a:80:d0:0c:8e:81:6e:
                    6f:61:0c:f0:91:7a:b8:29:de:f1:2f:e3:d4:c9:81:
                    fd:e4:bf:7b:c7:7c:d3:df:ba:ba:9f:bc:0f:d8:f5:
                    5e:8e:0a:b9:8f:2d:3e:f0:fe:7e:48:e3:e6:41:7f:
                    e0:bc:1c:f4:07:fd:68:53:ff:d3:63:ff:5f:3f:c2:
                    a7:22:a2:9d:1f:fc:17:cd:d7:09:b7:c7:44:9c:51:
                    be:b7:76:81:6e:fd:10:f6:b0:23:a8:da:56:fe:aa:
                    b9:ea:28:c8:bf:a5:58:75:57:57:9d:63:40:0a:f5:
                    36:56:7a:67:14:ef:cd:10:70:81:12:e0:c3:16:e8:
                    37:32:f4:85:dd:61:67:cf:9a:0b:66:ee:3b:10:f0:
                    57:d2:27:2a:bb:d4:d1:ee:45:d4:ba:b1:fc:d1:96:
                    af:97:82:8f:0c:ec:ff:7d:4c:90:ad:8f:39:3c:0f:
                    3b:cb:1e:e2:18:00:06:11:d0:91:35:93:a5:93:c8:
                    cf:87:34:1f:25:1a:fd:ce:18:ef:cf:11:84:ff:db:
                    44:c0:11:c5:76:7a:ce:b1:7e:17:8f:0c:79:b2:41:
                    84:1c:da:5e:db:bf:4d:42:10:86:cb:40:fa:20:70:
                    a4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:51:79:0B:6C:94:96:F6:C5:6A:81:10:3C:A6:79:50:06:5E:48:D2
            X509v3 Authority Key Identifier:
                keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:76:69:fe:b0:45:5b:ce:17:43:61:b6:da:0b:c4:a2:2d:05:
         b0:ba:6e:f0:a8:44:25:de:e0:3d:50:5a:b5:96:ea:07:5b:ca:
         86:78:16:1e:17:90:e6:b1:cc:87:94:82:8b:02:b5:3e:12:94:
         fb:cc:1f:6a:ea:43:f8:cf:57:b6:4f:69:e3:8f:93:95:ec:92:
         46:5f:0c:05:d3:a1:65:a6:e0:7c:71:f2:0d:38:94:0a:9d:ab:
         9e:f8:4f:3f:69:2a:4e:5e:1b:d9:17:11:b9:98:60:3c:cc:51:
         9d:48:51:42:2d:e4:cf:e5:82:4d:1c:e1:ba:2e:ae:93:98:50:
         cc:48:55:ab:17:4a:08:7a:4e:4e:1f:9c:36:f0:23:2e:df:67:
         9c:51:c3:0d:a2:87:63:f1:62:b0:bf:05:fb:77:f5:0b:3c:75:
         16:b7:cb:15:0e:99:31:69:f3:96:4f:46:5b:18:ee:f2:65:a4:
         26:02:e1:73:fc:4f:91:12:38:c9:8e:7e:83:bc:9f:6b:13:99:
         a3:f9:9a:0a:31:4e:ed:f3:0a:20:ce:93:5d:68:3a:80:37:0e:
         b9:bd:93:c8:cb:62:75:2f:53:52:4d:a7:83:62:e3:03:2c:4f:
         61:13:d7:44:bc:3c:79:5d:5f:50:af:0a:cd:b2:47:64:c0:79:
         96:9f:a5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:22 2025 by rpki-client