Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File:                     JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier:          kJ5KF5QIatcw3a/LY3SikArL6lIbHcTEk4Aawn7JsiY=
Subject key identifier:   0D:26:52:62:76:F6:75:DC:C8:EB:CA:CE:20:22:4A:C7:8E:0A:3D:A3
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer:       /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial:       0199FB7C954730F9A0B0B30C29C8DEE06EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number:          016A
Signing time:             Sun 19 Oct 2025 08:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:09 +0000
Files and hashes:         1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: GbJ3Pru1OPxZopFYMxMbjZysBIsBx0DpfnEDuvfhGRc=)
                          2: tSgs3XUIsHh7rxyC6KI4dfFcjtI.roa (hash: aP/8w3eyX9ywh3RSZ1FyfaCe/EGfUTND1DeYuxP49kA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:95:47:30:f9:a0:b0:b3:0c:29:c8:de:e0:6e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
        Validity
            Not Before: Oct 19 08:01:09 2025 GMT
            Not After : Oct 20 08:01:09 2025 GMT
        Subject: CN=0d26526276f675dcc8ebcace20224ac78e0a3da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:80:b2:d9:bf:fe:f4:42:25:f7:f8:2a:da:
                    7b:78:c1:3a:27:3e:45:ac:07:ac:6a:a4:b6:22:ec:
                    cd:6d:e5:64:d1:f8:a1:ee:a4:d4:02:e1:b8:84:b6:
                    9d:95:6b:c0:ab:34:fe:58:5e:44:02:54:40:fc:95:
                    66:17:5f:13:69:55:ba:34:06:49:94:5f:3a:a2:96:
                    11:be:e2:1a:73:5d:d7:a8:f3:1c:5f:27:1d:c4:1e:
                    e2:ae:81:0c:10:6e:80:5c:d4:49:c2:1b:8c:8d:39:
                    84:50:c8:a8:67:18:0b:cc:2b:e8:5e:c8:40:03:97:
                    d1:84:21:f8:19:3c:49:0c:f0:5c:78:30:1d:05:3f:
                    1d:01:63:95:59:4d:3e:e0:47:17:f5:ac:d2:2e:94:
                    4a:da:8d:62:0b:1e:3e:00:71:c5:8b:dc:2f:11:03:
                    5c:62:27:ec:c0:18:c2:18:91:86:da:37:12:5c:19:
                    b6:49:a5:32:1d:f1:da:25:d9:69:3f:24:66:2c:33:
                    4c:bb:26:15:4f:cc:ab:51:44:08:29:de:2f:e6:37:
                    c2:78:b6:31:5e:d2:ca:c9:57:c2:99:85:ff:c3:03:
                    9a:26:46:4c:ec:99:43:81:bb:9f:15:83:1b:07:48:
                    da:02:30:37:8b:1d:81:d0:88:22:22:eb:e4:16:00:
                    10:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:26:52:62:76:F6:75:DC:C8:EB:CA:CE:20:22:4A:C7:8E:0A:3D:A3
            X509v3 Authority Key Identifier:
                keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1a:2b:ad:c8:74:67:bf:1e:42:fd:34:8d:6b:68:b4:19:0c:
         fc:73:08:d2:8f:b6:a0:22:a5:c6:bb:7d:71:78:76:1d:9d:53:
         b1:f5:84:ad:d2:e1:d2:c1:6c:49:46:60:e6:ae:72:2d:db:63:
         e3:e0:ad:8b:54:0c:ca:e8:30:dd:ac:a1:f7:f5:6b:24:e5:84:
         84:6c:23:6a:88:3a:c9:fb:29:c9:6f:17:85:02:c0:51:46:55:
         ec:75:98:a6:83:1e:b8:cf:9e:d5:37:d4:27:78:13:03:32:95:
         60:5b:12:47:86:a7:cc:85:e1:5a:40:6d:84:fd:94:1b:3e:8e:
         f4:3a:66:ee:c4:71:ad:1f:87:58:e8:5f:f3:ed:cb:2b:76:fd:
         2a:31:32:8a:1a:1e:4f:e5:f0:84:a6:11:d8:29:54:7d:61:c0:
         e3:e3:f1:46:bd:9a:71:07:58:6a:6b:b3:cc:f9:8f:f5:36:4b:
         df:76:88:4e:4f:53:54:7e:8f:6e:eb:cb:80:f6:2c:15:7f:8e:
         2b:4d:c5:e9:86:df:4c:3b:b2:f5:e9:83:f9:7e:7a:79:4c:d8:
         02:52:8e:f3:72:9f:07:99:70:b2:b5:19:8a:28:3f:1a:44:5f:
         d6:8b:4a:c8:c4:68:b6:7a:4a:70:a7:61:02:73:b3:1f:b9:2e:
         93:9c:97:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:30 2025 by rpki-client