Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
File:                     JxlBKRimYn-ZzOVcesoTkFe4V04.mft (raw, json)
Hash identifier:          ziSp+tQM1hNJRnNkz02BE5iHQfQJsraj0490OoiSHYk=
Subject key identifier:   C7:01:5E:91:43:D6:04:AC:21:15:84:76:6A:FE:75:8D:AE:F1:84:4F
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Certificate issuer:       /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial:       0199FDD94B1845A56B2BB5BCD043B0ADB529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
Manifest number:          0A33
Signing time:             Sun 19 Oct 2025 19:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:40 +0000
Files and hashes:         1: 0egOCEDjjfjwdPmizCh3Cu6NbrQ.roa (hash: RjxfFq3fmsFbepGKowirBDzmyu+RZ3fSC5NUINYgMYU=)
                          2: 7W85Tt0gwzhkJWxBWSICyLMHvBg.roa (hash: JppPMnJbiXzbpD/Pc6qWhNpXFo8/+nx6fCwzyRamuQY=)
                          3: 8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa (hash: 2qr0DY7SshfmBWBMPElwvi/+AJH/67rJ01N4KKU7q1A=)
                          4: BRryBhcZ86QRcNyyWRQXIrGL940.roa (hash: TpVPlst5x/81i653yEbzbStWflfy2GReIp1Tn60B8L0=)
                          5: C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa (hash: KoYq60161i4xpC6NqHZA/Q8w9Njte/PcskDc5lUbshM=)
                          6: EJQRhvTA9imPwclwVgQbFkh0JFE.roa (hash: wCSwu07TXrbn08zc7CmiqRRyHHovVOMjCdUBle99/a8=)
                          7: JxlBKRimYn-ZzOVcesoTkFe4V04.crl (hash: cHB8fDss4aYfvuvvY8RynzqBvHPKKNTj2Sa6ygXL0DU=)
                          8: XP9c9FnVM83t2BcVhUGYjki34JA.roa (hash: 9MjxmhRyp3W6rmd2o7KozYAfmVW00slDjc1CHV4YtKA=)
                          9: ZvwtxuslzfQmqhln4NrT0EB6by0.roa (hash: /zi0GX6AY/hjXoyJfHeafiIns7K/28qT/TjfHjhKvFY=)
                          10: i6AMMlCBL4mI8fXSClWLBTgrr2w.roa (hash: ibC1icVFA9nVxcZkqXGl9glghEao/S766jYYimUgQ+I=)
                          11: noewYl5P0rkhAPD3Zn8s9bc2_qs.roa (hash: h2zqiA+vL/GF8rvskPe0YPXeCInpKFuXr/zZvqUEJgg=)
                          12: xdpBEJQBaSWnLzQMJf9F6VWUv60.roa (hash: rjp7KwUwTuEzo3eXkAycybNSdAwl1wu4fvs5dmuagvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:4b:18:45:a5:6b:2b:b5:bc:d0:43:b0:ad:b5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
        Validity
            Not Before: Oct 19 19:01:40 2025 GMT
            Not After : Oct 20 19:01:40 2025 GMT
        Subject: CN=c7015e9143d604ac211584766afe758daef1844f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:43:4d:31:13:d2:6b:d6:69:42:87:75:da:
                    af:86:3e:e8:0d:3a:8d:d6:6c:c1:02:96:ab:65:b5:
                    30:a7:c9:d1:c6:71:ef:12:9b:00:0c:4c:5f:70:29:
                    a7:58:50:0d:a6:45:69:d6:5a:f8:ba:cc:b5:de:6e:
                    17:45:14:b3:a6:83:45:9d:a8:76:46:95:a1:e9:76:
                    5e:97:c6:ec:c7:4d:94:94:34:fc:b6:e5:23:c6:cb:
                    e5:ad:f5:c2:bc:ab:f3:b2:ee:76:5b:2e:a8:ab:96:
                    f0:e2:64:7e:6d:39:ba:37:9a:54:0a:5e:28:3c:e3:
                    a8:23:d5:ea:ca:ba:39:b4:ee:3d:f5:1c:34:2f:9c:
                    b9:08:d6:72:37:fb:6c:2e:3a:29:ce:d6:4b:ac:33:
                    f9:51:24:5d:b5:ac:33:c8:5f:4f:9c:72:51:1e:51:
                    7e:35:ae:0f:b0:7f:6b:1c:65:6b:c7:48:e9:64:70:
                    e1:b9:37:14:4b:f1:87:2b:25:ab:33:db:b3:b7:f4:
                    37:e3:01:25:41:78:c2:30:88:81:f5:9d:d9:57:e8:
                    62:14:99:e6:c6:53:80:b7:39:cd:76:e7:2a:0b:75:
                    16:7c:88:99:d5:f1:0b:8f:ec:66:c0:63:63:85:a0:
                    39:2a:17:af:b5:a1:75:60:37:fd:91:7a:b7:d4:38:
                    56:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:01:5E:91:43:D6:04:AC:21:15:84:76:6A:FE:75:8D:AE:F1:84:4F
            X509v3 Authority Key Identifier:
                keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:83:d2:14:72:c0:60:6e:95:39:d9:95:ef:92:db:e1:98:90:
         79:f3:83:58:22:e3:4c:e4:61:ef:c6:11:d0:d9:3b:84:38:0f:
         d3:16:29:2b:de:10:fe:d9:67:ac:b7:b1:3a:2d:80:b6:35:8a:
         a3:71:1a:85:a7:9b:c7:2f:f8:a3:42:a2:77:3f:c8:71:ec:ad:
         83:4d:e1:64:26:73:bc:5e:04:94:24:55:7d:f6:7c:f4:af:94:
         93:28:e3:39:81:fa:2e:48:e6:51:4c:e5:7a:c6:68:ba:77:7b:
         63:4b:c7:2f:b5:1f:16:7f:1c:ce:b7:c4:d3:a7:6e:9a:67:d5:
         92:16:c1:41:0f:df:ff:30:ad:e0:38:60:17:ce:cd:be:fb:4e:
         81:d0:48:38:54:7a:25:a6:a6:1c:3c:17:2b:40:33:95:db:e0:
         ab:4f:9b:18:17:43:54:0e:81:93:2b:4a:80:90:90:f8:90:65:
         74:ee:9a:43:e2:22:1e:b8:f7:66:96:23:ab:2c:b0:c6:bd:ea:
         ef:01:cb:5a:b1:a3:78:f0:7a:3c:33:ae:a1:e5:7f:51:c7:f9:
         9f:de:7a:27:65:85:48:39:74:01:15:6e:3b:ad:1f:38:a5:3b:
         37:b9:13:b9:4d:c4:e0:3e:b0:36:07:d0:15:7a:f8:93:72:1f:
         3e:59:9f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:09:10 2025 by rpki-client