Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File:                     JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier:          LYA37QnYorn6imHUfFWJcDGLEILz7C7qcFHoh31yNEw=
Subject key identifier:   E0:A3:CC:71:9E:6F:60:16:BA:29:8A:C8:85:3C:F4:87:47:4D:22:67
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer:       /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial:       0199FB0ED2184179977E28960EAF7393EA7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number:          058A
Signing time:             Sun 19 Oct 2025 06:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:16 +0000
Files and hashes:         1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: aKq2UHHs4WjjG5E07p5eVw9vr4yFM7EljW+sXFEicRs=)
                          2: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (hash: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:d2:18:41:79:97:7e:28:96:0e:af:73:93:ea:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
        Validity
            Not Before: Oct 19 06:01:16 2025 GMT
            Not After : Oct 20 06:01:16 2025 GMT
        Subject: CN=e0a3cc719e6f6016ba298ac8853cf487474d2267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:5c:f7:87:17:83:0c:e3:33:7d:a1:78:f7:
                    5d:c3:53:7a:f2:16:38:10:24:01:16:24:37:aa:14:
                    11:cf:3d:0f:4b:1b:3f:ef:e0:de:0f:ff:bf:e1:e2:
                    aa:b4:73:1c:b4:2c:57:e6:91:6c:ca:6f:36:0f:fa:
                    a5:48:8d:d4:c0:1e:1a:c3:c4:4b:b5:ad:67:ae:cd:
                    3e:54:72:ea:2a:df:54:b9:b5:6c:a6:55:e0:3c:33:
                    79:2a:35:0d:ac:a0:ee:be:99:c8:b8:7a:0e:6f:b7:
                    83:a8:81:00:a5:7b:7c:f9:01:88:33:ab:6c:fb:e4:
                    a8:dc:7a:2f:5a:a4:53:be:05:23:05:54:41:32:27:
                    65:ab:76:96:0d:31:08:75:ad:89:64:34:ef:1a:b3:
                    2d:f7:14:54:4f:ec:ff:78:80:f0:49:f7:11:d2:32:
                    85:8b:b0:5e:e5:4b:a5:a7:74:00:cd:d3:d5:d9:ed:
                    1c:43:cd:2c:36:ed:f9:14:ef:45:c1:e9:4d:0c:8a:
                    01:53:62:be:20:6a:79:f3:0d:5a:4b:4c:50:fa:3a:
                    99:c1:b0:72:df:f4:d2:60:60:06:e5:9a:3e:be:45:
                    3a:a7:cf:83:3a:96:22:0e:e3:37:35:3b:0f:f0:22:
                    73:24:b2:75:bc:bc:11:5b:10:6b:34:fa:c2:d8:5e:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A3:CC:71:9E:6F:60:16:BA:29:8A:C8:85:3C:F4:87:47:4D:22:67
            X509v3 Authority Key Identifier:
                keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8e:01:08:10:73:e1:c1:92:2b:aa:00:79:73:3e:49:19:a2:
         2c:04:d2:c5:e1:01:fe:6d:6a:92:3a:38:28:df:1e:8d:37:16:
         37:7c:62:c3:6a:3c:55:e2:e9:f6:b2:82:8e:b4:0c:3b:3b:19:
         62:dc:e4:4b:cc:2e:5f:e1:39:fe:94:91:8e:73:05:f5:50:0b:
         d4:14:dd:38:5f:7b:15:19:a1:e8:b5:c2:73:81:99:62:aa:0c:
         0c:b7:90:d0:91:f8:b7:4a:0b:42:fd:2f:e0:41:36:fc:30:d7:
         ec:6a:e8:ea:6b:54:21:21:f2:63:1b:ee:0f:6b:af:b5:0d:6e:
         69:74:62:a0:69:88:25:8d:6c:b6:2d:71:7e:60:66:9a:19:ec:
         fd:4f:bd:2d:fc:a7:83:fd:95:5e:a4:a3:d8:74:68:79:89:96:
         4e:90:dd:bc:23:6c:4a:47:b9:b0:ac:39:a6:33:ee:68:e8:86:
         b1:f2:55:0b:d5:7f:b1:1b:bc:8f:4f:f3:0c:6a:0b:4a:08:66:
         ca:f9:86:ff:e6:5c:bc:0b:9d:b8:da:3a:15:a0:64:75:a0:cf:
         90:da:56:a7:1c:bb:64:89:2e:52:84:72:a7:53:3e:ea:45:7d:
         47:65:b7:e6:c2:3d:e8:66:63:48:7a:2b:92:13:ab:ce:d4:3f:
         5e:77:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:11 2025 by rpki-client