Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
File:                     mJB4Bt2stIQwvdAlSJgBnkE6K94.mft (raw, json)
Hash identifier:          TNbmf9zRIhf02pfWuyotpIpHRroif8Dx1lQ4kPdTS6M=
Subject key identifier:   BE:69:FB:61:79:95:41:C5:83:5D:25:C2:62:53:E4:E8:D6:85:20:F3
Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
Certificate issuer:       /CN=98907806ddacb48430bdd0254898019e413a2bde
Certificate serial:       0199FBEB574630B9CD118638D7E257A1E47E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
Manifest number:          0DC8
Signing time:             Sun 19 Oct 2025 10:02:08 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:08 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:08 +0000
Files and hashes:         1: acpHH_CaNcRdqw7JD1HuBSlb_jE.roa (hash: Wxjj/iVVVmCvZCfA0I7IDXleX19TKp07yCUTpeGLxQk=)
                          2: mJB4Bt2stIQwvdAlSJgBnkE6K94.crl (hash: 2nnIYbjEgMW4RTLe2n7z1RLdPX1J8zKOzH4Mwn0Fge8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:57:46:30:b9:cd:11:86:38:d7:e2:57:a1:e4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde
        Validity
            Not Before: Oct 19 10:02:08 2025 GMT
            Not After : Oct 20 10:02:08 2025 GMT
        Subject: CN=be69fb61799541c5835d25c26253e4e8d68520f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:e9:41:83:59:f0:ba:4f:00:e6:42:e4:83:
                    7a:b0:d8:87:f8:49:fa:f8:7e:0f:98:4a:1d:69:b9:
                    5c:f0:0e:9b:97:c7:b9:db:da:88:14:46:b3:b1:bc:
                    2e:e3:23:4e:9d:e3:dd:fa:4a:05:fe:0b:0c:2c:2f:
                    48:8b:3a:f8:e1:41:b5:3d:2f:b1:a3:ac:ec:e3:35:
                    b3:90:64:1e:78:11:22:23:4d:64:c7:d3:17:1f:65:
                    e3:8a:02:89:21:33:a5:2d:62:63:9c:7b:21:a4:e1:
                    88:56:e5:e3:cf:5e:e3:c7:0e:ff:d8:2a:14:b8:6a:
                    42:47:c4:72:ab:94:3f:ef:a5:0c:04:8a:8a:13:0f:
                    20:35:76:48:25:ff:1e:1e:2c:56:e1:6e:ca:ec:f3:
                    4b:07:b5:94:0d:bf:c4:2c:6b:46:73:96:df:c5:e9:
                    d7:74:25:b6:9f:4b:fb:1a:e4:01:3b:ce:d4:20:7a:
                    12:d1:4b:b7:35:6d:80:46:09:63:44:09:07:a3:03:
                    5d:f4:29:52:af:60:60:75:ec:ab:c3:89:06:f1:de:
                    1c:ee:d2:d5:58:7a:9a:ff:e0:9c:7a:57:5e:66:84:
                    88:05:92:97:ca:2c:a0:5e:88:c0:20:f5:d1:ee:91:
                    a6:15:d0:18:55:38:2e:47:c4:f2:ff:7a:ef:a2:3e:
                    a9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:69:FB:61:79:95:41:C5:83:5D:25:C2:62:53:E4:E8:D6:85:20:F3
            X509v3 Authority Key Identifier:
                keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d6:5c:9a:10:88:46:70:05:0e:74:ea:5b:52:49:df:fb:be:
         a9:83:60:e3:1e:61:bb:f6:57:61:30:ca:b1:04:ac:e5:1a:0b:
         6e:5c:c6:0f:7d:26:2b:d7:1e:35:96:0f:d6:3d:41:a5:01:2a:
         9e:7e:3b:1b:2e:32:e8:9b:58:a3:e6:c5:b5:29:dd:c3:2c:b2:
         b2:e2:db:ae:98:05:74:6f:6a:74:a6:f0:98:fd:35:bf:99:2e:
         3c:1e:e9:77:9b:bc:85:2b:4e:81:b7:0c:cb:fa:e8:58:bb:a5:
         58:57:65:39:c1:e3:94:c6:50:83:9c:5e:0f:8e:d0:37:ab:d4:
         cc:03:c8:ad:45:00:89:79:18:12:cd:b7:06:8e:f4:b1:05:1a:
         04:6a:e2:bf:8e:6f:3f:ce:d1:9f:5a:30:4e:8b:10:63:c0:fa:
         f1:b5:20:27:a5:4d:5f:61:fc:8f:9a:c6:2b:d8:ac:47:52:44:
         76:45:a3:33:55:8d:95:bc:ff:ad:f6:84:6b:1d:74:25:7e:96:
         55:56:97:0e:72:1b:4b:aa:9f:4a:f0:f2:94:7f:a1:62:70:b5:
         13:a2:5b:10:4a:d9:08:e9:3b:74:05:07:52:58:b0:a3:41:89:
         90:64:4e:79:99:49:0b:62:17:8f:6d:bc:c7:7c:55:2d:f0:62:
         6c:e6:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:10 2025 by rpki-client