Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
File:                     mjUUk6-IflRNzAGhE7d1KLyYe84.mft (raw, json)
Hash identifier:          jjl6iAcjxmd+bvWj0p7znLbh+ts2v8NPB5vBptg77r8=
Subject key identifier:   0C:B3:ED:84:4F:8A:10:FB:7D:15:C2:02:BA:CE:95:6F:51:22:22:8E
Authority key identifier: 9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE
Certificate issuer:       /CN=9a351493af887e544dcc01a113b77528bc987bce
Certificate serial:       019A003559C1C974D7A151914A462D07ABA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
Manifest number:          1060
Signing time:             Mon 20 Oct 2025 06:01:27 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:27 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:27 +0000
Files and hashes:         1: mjUUk6-IflRNzAGhE7d1KLyYe84.crl (hash: IRESO/0RJqrP/siYO6sfj4mmLzWXy6lS/iYtICz+Mbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:59:c1:c9:74:d7:a1:51:91:4a:46:2d:07:ab:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a351493af887e544dcc01a113b77528bc987bce
        Validity
            Not Before: Oct 20 06:01:27 2025 GMT
            Not After : Oct 21 06:01:27 2025 GMT
        Subject: CN=0cb3ed844f8a10fb7d15c202bace956f5122228e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:b2:53:b9:8a:be:de:1b:4a:03:53:d4:b1:
                    5b:6f:19:e5:d2:4f:22:06:38:1c:2f:3e:be:98:2e:
                    70:0f:f4:a4:1d:1e:94:23:55:07:41:8a:92:73:0b:
                    7c:99:ee:c8:fb:fa:99:80:ad:d4:7a:aa:27:d7:a0:
                    c1:86:9f:e8:3e:4e:15:43:39:12:d5:e5:93:22:f9:
                    8d:b6:0a:b7:77:86:a3:12:a6:a0:1d:eb:2f:22:6c:
                    ef:c7:27:e8:93:48:e6:84:fd:93:05:0f:54:34:f6:
                    4f:e0:12:14:c5:3a:9b:d0:c4:9e:c7:d9:0f:cb:bf:
                    7a:26:aa:8f:08:87:b4:30:4a:eb:d4:ac:b7:b4:76:
                    5a:27:6f:79:3a:d5:39:76:ea:e2:85:7d:5d:6a:90:
                    c2:4c:aa:fa:d9:1a:42:b9:94:f8:93:1f:36:c1:b4:
                    e3:af:4c:c9:a4:08:8d:18:ef:67:96:00:69:94:94:
                    41:b8:94:a6:89:60:4a:ad:88:d6:b8:78:91:10:65:
                    e2:3d:bd:ef:01:7e:c2:ee:ae:ac:85:0b:00:9a:52:
                    ef:bf:c5:68:da:ca:2a:a4:1f:3e:f1:1c:ab:6c:82:
                    e0:18:a3:ac:fb:a4:41:45:39:c0:ec:e7:17:55:4a:
                    1d:1e:c3:a3:43:37:9a:d0:19:b7:2b:03:16:2d:f9:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B3:ED:84:4F:8A:10:FB:7D:15:C2:02:BA:CE:95:6F:51:22:22:8E
            X509v3 Authority Key Identifier:
                keyid:9A:35:14:93:AF:88:7E:54:4D:CC:01:A1:13:B7:75:28:BC:98:7B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjUUk6-IflRNzAGhE7d1KLyYe84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6004cc-ba89-4810-a23b-27565879af5c/1/mjUUk6-IflRNzAGhE7d1KLyYe84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9e:f0:2b:a0:34:10:2a:df:0f:c6:2d:fc:5c:be:53:f0:d0:
         2f:ff:20:43:a8:f9:1c:5f:c1:78:1f:f7:98:e4:b7:48:61:e6:
         91:f2:d3:34:5d:d1:70:8d:36:03:c9:be:22:da:c8:ee:ea:3d:
         0c:7b:48:b6:82:fb:47:a6:39:06:6c:24:f7:11:62:91:cb:b4:
         6f:91:67:d2:09:41:01:bc:e3:6f:2c:9d:0e:45:79:01:a2:cb:
         ff:a5:2d:8e:49:bc:8b:6e:0e:41:3e:b2:04:d3:7c:6a:8c:91:
         ef:b2:7e:7a:2c:76:4a:c1:ff:ea:82:11:1d:d3:c1:57:4b:19:
         ba:13:21:49:31:8b:e5:fe:9a:ab:2b:38:c0:30:b0:d2:74:38:
         0e:44:c2:54:dc:1a:6b:08:d8:ce:43:d5:6f:ea:66:7a:0e:a9:
         d3:93:07:83:da:29:88:20:30:41:67:78:02:d2:db:17:e3:97:
         64:01:53:19:4b:36:51:0e:ab:0c:ed:7f:a2:ac:30:83:8e:3a:
         01:c2:86:fb:d4:f0:a4:a2:d3:ed:10:a4:5f:cb:dc:63:24:56:
         8a:21:c2:8a:79:b6:21:02:09:71:5e:c4:75:4f:60:65:6e:76:
         a9:16:10:66:02:c3:16:30:a6:a1:54:13:87:16:08:fb:5e:a6:
         02:e4:4f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:08 2025 by rpki-client