Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
File:                     J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft (raw, json)
Hash identifier:          SLDPDDi3TY0caKAu65C1xT4n5l3GVrpheksOy9Rsx0Q=
Subject key identifier:   49:39:52:F4:9F:46:A0:31:30:E4:E9:4A:DA:A0:14:98:EE:5F:D1:1A
Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
Certificate issuer:       /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Certificate serial:       0199FF22C3F42A885FDE2D84BA8F7D8803E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
Manifest number:          16E6
Signing time:             Mon 20 Oct 2025 01:01:32 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:32 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:32 +0000
Files and hashes:         1: F7MJ36J0uiDKy-M_vXjmJdbP4fs.roa (hash: 8zleOD6aN/r+slAEa8mt1l5gM5SF8gtFDMiJe9eHZeU=)
                          2: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl (hash: auldcVRvlB/XqN0Dz3U6iIIt9kDfHnIGiBWALQRAhlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:c3:f4:2a:88:5f:de:2d:84:ba:8f:7d:88:03:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
        Validity
            Not Before: Oct 20 01:01:32 2025 GMT
            Not After : Oct 21 01:01:32 2025 GMT
        Subject: CN=493952f49f46a03130e4e94adaa01498ee5fd11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7b:70:e0:cc:3a:b6:13:39:85:80:4f:15:67:
                    40:a6:51:e7:83:4a:a0:d9:76:94:fe:d6:77:fd:98:
                    31:4f:be:45:09:2c:2a:33:d1:f5:65:38:f4:33:60:
                    7e:c9:e0:f3:ba:72:93:93:d3:d6:6b:64:57:48:c1:
                    7e:fa:e5:7d:b2:ad:d6:7c:df:83:bb:47:99:17:c8:
                    34:cf:4e:b5:3c:3b:13:21:84:45:d1:bb:9a:bd:f7:
                    e5:c6:7c:a5:31:c8:7b:17:0c:b7:ee:67:31:82:ce:
                    f9:db:84:7e:73:50:ab:d4:d7:08:c9:1e:9c:43:dc:
                    ba:7c:9b:52:21:67:55:0a:e3:6e:b2:cb:c1:5b:65:
                    91:95:3a:6e:c2:8a:87:21:c7:97:8f:99:ea:e5:6c:
                    b7:4f:1f:6e:7a:01:16:3e:02:b9:e0:6e:29:ab:1c:
                    43:f6:76:52:2c:68:f6:02:85:16:94:c1:cb:7b:16:
                    a5:53:9f:68:70:b4:fa:c1:be:09:fa:b9:cb:57:dc:
                    84:d4:3e:19:d5:8d:bd:94:51:df:e0:b1:8a:fc:8b:
                    80:f7:54:e8:58:a2:d8:2c:a1:35:34:d5:27:5a:c7:
                    82:f5:d9:89:f0:a4:20:ab:f1:c5:af:fa:a9:96:b7:
                    63:82:96:03:81:59:43:47:22:f5:43:fa:76:42:5a:
                    8b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:39:52:F4:9F:46:A0:31:30:E4:E9:4A:DA:A0:14:98:EE:5F:D1:1A
            X509v3 Authority Key Identifier:
                keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:b6:10:8a:96:43:e6:c9:7c:7c:16:60:e8:88:6c:07:52:70:
         ad:24:74:f7:69:a5:a3:74:53:bc:29:06:e4:65:60:41:94:02:
         14:f5:07:f5:60:1f:d2:5f:94:2a:db:b4:ff:e2:62:64:15:e5:
         8b:c1:98:ae:ea:14:b4:53:ea:48:b8:d5:f0:53:91:4c:b7:1e:
         38:9d:e9:67:56:3d:23:8c:45:6d:f2:f7:a1:61:40:41:d9:bc:
         ea:d9:92:20:bb:63:ae:de:fa:5e:c7:23:b0:41:30:71:84:eb:
         b6:ba:a3:42:ed:e3:9e:5c:91:a2:0d:18:45:c8:33:61:8d:f2:
         6e:b5:eb:ce:af:73:88:d1:0e:43:18:75:5e:18:90:17:8e:e5:
         b7:e2:83:d9:df:c4:0f:8d:88:0b:c6:41:64:96:07:b4:ef:11:
         1a:4d:8a:14:ad:bc:e8:c3:11:4b:da:95:ea:c5:9a:e0:7f:1d:
         01:6a:22:ea:e8:1e:62:b1:0e:cd:05:a1:e2:43:6c:1d:e4:a1:
         29:95:9a:c6:d3:b7:b3:91:d1:c2:f4:d1:90:54:6a:c6:50:b4:
         ee:44:86:7d:5c:24:be:bc:10:56:bd:ec:fc:09:ed:71:8a:fb:
         40:0b:c3:8d:85:40:34:57:0b:63:3a:26:e9:9c:f8:80:6c:dc:
         6a:c6:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:26 2025 by rpki-client