Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File:                     JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier:          zVgLwIrhuFOPgRgDLxAa0ba5fYXc+59TBpoDxvNymWA=
Subject key identifier:   E2:81:AC:48:90:5A:41:D6:4E:74:D2:FE:82:72:65:52:30:DD:39:72
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer:       /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial:       0199FD6B5B65B3259AB8C9BF9F63EBBE34FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number:          04BB
Signing time:             Sun 19 Oct 2025 17:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:35 +0000
Files and hashes:         1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: SSstqkVo5CWq0A51SqgPujyob97/0ws4vUx0rJwhpFw=)
                          2: hcERp-n1CdH9dpVt3PfnUZqY1zM.roa (hash: cu5zTSvQ8FcA7bEX+Ahl9PjJO9BlJ5Pb1ZUU2INhdXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:5b:65:b3:25:9a:b8:c9:bf:9f:63:eb:be:34:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
        Validity
            Not Before: Oct 19 17:01:35 2025 GMT
            Not After : Oct 20 17:01:35 2025 GMT
        Subject: CN=e281ac48905a41d64e74d2fe8272655230dd3972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:57:a2:d2:81:28:69:bb:2e:e8:f3:ae:55:
                    5e:78:7a:6b:52:79:bd:52:51:d5:54:a7:cb:af:7b:
                    62:f5:37:fb:26:1c:b9:82:e5:b6:bd:7c:d6:9c:2c:
                    a2:b1:77:f6:a2:d0:8a:41:26:da:fa:f6:28:4d:7e:
                    04:2a:f7:72:87:fe:71:f6:b3:6b:85:ce:83:39:b7:
                    4d:e5:dd:3f:54:82:94:60:e4:8a:47:7a:af:83:ca:
                    57:72:33:25:26:f5:15:6e:fe:2e:4c:6f:e5:7b:86:
                    57:23:7f:3b:05:e4:67:89:b6:c1:e6:8e:5d:d3:98:
                    93:97:5e:43:ec:26:f1:c2:ae:35:2f:c7:54:fe:a2:
                    60:96:3d:49:2f:6a:bd:cf:9f:8b:9f:67:32:46:c7:
                    87:f1:67:a0:fb:88:61:23:db:26:e5:75:9e:34:f3:
                    ee:c6:46:ef:01:a9:5a:71:1a:ec:8a:60:74:9e:63:
                    15:ad:54:e3:a8:6c:dd:a8:ed:00:fc:f4:aa:a6:86:
                    18:10:bb:2e:be:0c:c1:e3:4b:f0:ed:3d:ba:74:fb:
                    4f:a1:7a:88:6b:8b:99:15:cd:97:cc:ac:5e:5a:83:
                    9c:5a:77:af:ef:af:c3:84:db:52:5f:1d:4d:49:38:
                    74:31:b4:c0:a3:82:30:c9:d5:60:f5:69:6c:90:e3:
                    25:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:81:AC:48:90:5A:41:D6:4E:74:D2:FE:82:72:65:52:30:DD:39:72
            X509v3 Authority Key Identifier:
                keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9c:dc:a0:f6:29:b0:39:18:d0:bc:d9:8c:45:6b:9b:69:a8:
         a0:17:bd:94:ef:dd:d9:58:86:b3:9f:df:a8:91:0f:70:95:d2:
         de:4d:ab:d3:24:d7:32:b4:9b:3d:06:cb:2b:3f:30:a3:ba:5a:
         ff:aa:2a:dd:5e:33:8c:88:c1:ef:b8:8f:e1:29:75:58:8c:b2:
         88:09:f8:af:af:66:bc:6e:8b:6f:04:a2:b4:12:f6:8e:52:3a:
         bb:59:6d:cc:50:5d:5c:90:8a:ce:7b:6c:df:d8:c6:18:bf:7e:
         e3:e8:27:58:49:e2:6e:c6:15:22:de:91:a7:d9:dc:0e:b2:dd:
         04:83:be:20:85:78:99:9e:d3:d5:e6:56:99:83:82:dd:a4:f1:
         3c:44:43:97:04:bb:05:0f:c5:05:cb:21:db:1b:b3:70:40:75:
         df:ca:15:72:8b:13:87:f9:f0:dc:95:18:63:2e:d8:63:a1:05:
         e9:07:d9:72:d6:af:74:bb:9d:91:ae:13:32:c6:cc:4e:dd:3d:
         3a:ea:bf:df:06:23:ba:c9:20:6d:6d:f6:8f:8f:af:e4:7d:da:
         59:0b:30:ad:e9:82:1c:d4:56:43:f6:04:8e:6c:c8:1a:aa:61:
         98:5d:51:a2:6c:49:ab:6d:0a:0b:a9:23:50:ab:e4:cd:d1:0d:
         3d:86:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:12 2025 by rpki-client