Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File:                     jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier:          SMrJgdINEila7fOkI8FwV1uuEtyeXbK7ksIXFgobMNU=
Subject key identifier:   08:38:22:11:55:EA:C4:1F:EF:84:54:7E:87:13:43:75:92:76:EF:AB
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer:       /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial:       0199FAA1165F2C413F255D88A5FFA4B5DE39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number:          0358
Signing time:             Sun 19 Oct 2025 04:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:24 +0000
Files and hashes:         1: c629yVpij03V1st9fGOWPyErFvY.roa (hash: FRnWCc8f5gKDYC/CiB/l2kK1E8DLO/vnELNJE9pd/8Y=)
                          2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: ysIYGL4aGHEdqSaUwATi720sgrTbsDhzpnPXfOSu040=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:16:5f:2c:41:3f:25:5d:88:a5:ff:a4:b5:de:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
        Validity
            Not Before: Oct 19 04:01:24 2025 GMT
            Not After : Oct 20 04:01:24 2025 GMT
        Subject: CN=0838221155eac41fef84547e871343759276efab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:e3:6f:70:c0:b9:f5:96:5c:f7:3e:40:bd:
                    d5:a0:d3:51:05:c5:83:52:54:85:4c:08:05:a7:bc:
                    5e:c6:1b:ca:2d:58:e5:55:df:5d:e2:91:12:dd:07:
                    45:d3:12:db:db:25:5c:87:6f:b4:1c:2d:90:e5:42:
                    2a:0b:11:29:bf:5f:ed:7f:01:ed:3c:a0:a4:2a:ae:
                    fd:e6:68:ad:73:b4:dc:32:90:09:43:a3:1a:24:ed:
                    1a:ce:1f:bc:24:b8:eb:71:57:ed:88:be:7b:a0:4e:
                    b2:b9:d4:10:2d:49:58:d5:ff:e8:87:97:fa:fa:35:
                    6d:14:43:df:78:92:29:ef:ef:27:8e:34:56:a4:72:
                    77:fb:b9:fb:74:ca:3e:cb:10:93:b6:9b:96:e6:ce:
                    b2:10:55:53:e3:5b:5e:db:96:e3:95:b7:30:ec:5e:
                    53:61:f7:4d:1e:92:00:c0:d1:36:17:ad:66:01:5d:
                    a7:dd:9f:33:dc:21:ab:bc:3b:92:a9:f2:02:0c:78:
                    a4:79:5c:7a:f2:3b:8b:4e:44:ed:78:3b:db:7c:c4:
                    55:b2:e4:f8:7a:c4:e8:c7:90:0e:3b:b6:c3:d0:e2:
                    5e:7e:1f:83:c0:0f:8f:bc:ed:ed:0c:11:ab:3f:be:
                    38:12:ae:2f:da:7c:ff:56:86:1f:2e:07:c0:ab:63:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:38:22:11:55:EA:C4:1F:EF:84:54:7E:87:13:43:75:92:76:EF:AB
            X509v3 Authority Key Identifier:
                keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cc:37:a1:5b:0d:0d:85:c4:83:50:df:92:51:ac:2c:57:f7:
         f9:1d:ba:05:30:d5:8a:4e:7d:ec:03:95:06:2f:a0:82:42:4b:
         53:15:b0:b4:08:cc:56:f5:3c:d1:30:02:ac:82:1c:0c:ea:42:
         a0:0e:f0:91:b6:76:de:fd:93:9a:6a:15:83:1a:1d:3f:6a:6b:
         26:6a:4a:1e:5a:4b:be:12:1b:ae:02:6d:f6:cd:86:b5:41:c0:
         7f:89:f9:14:7e:d8:22:24:c9:cd:6c:7e:4e:d6:ec:2f:2f:c7:
         f4:f5:65:71:10:bd:a4:05:d6:a7:14:40:5c:36:de:54:9c:b9:
         1f:2d:6a:00:81:4c:ce:5b:72:c0:f3:e7:85:2f:aa:e0:35:94:
         5b:2e:d0:9a:b1:df:78:ac:9c:65:34:24:42:78:1c:53:e4:18:
         3d:b8:8b:34:5f:85:84:74:35:44:71:8f:ee:bb:d9:9c:c2:b1:
         73:38:48:f4:0a:2f:79:ea:01:97:95:d0:21:66:b6:43:ad:d8:
         fa:c2:a1:22:55:be:14:34:c5:37:4a:1b:44:3f:0a:52:c2:6b:
         d6:64:17:c1:94:9a:5f:da:a5:2d:b7:4a:9c:17:9c:8e:23:bb:
         65:a3:d6:5b:f6:d3:12:38:86:94:99:a2:9b:41:a8:16:92:8d:
         5c:54:45:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:24 2025 by rpki-client