Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
File:                     J0hgAkaZUbaABwTI8CysdLX4KQU.mft (raw, json)
Hash identifier:          0AAlpm96Uojb8wpwdZ02a2ueFY1eYHsmOAi/VG/3h+k=
Subject key identifier:   69:CA:ED:34:49:DE:B0:A0:81:20:99:28:14:58:2F:70:83:2D:5F:3B
Authority key identifier: 27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
Certificate issuer:       /CN=27486002469951b6800704c8f02cac74b5f82905
Certificate serial:       0199FBEC0296077964B49C643F76BF15A6F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
Manifest number:          05A3
Signing time:             Sun 19 Oct 2025 10:02:52 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:52 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:52 +0000
Files and hashes:         1: J0hgAkaZUbaABwTI8CysdLX4KQU.crl (hash: kWCmt4cq1FhbW/sWEqjzONkZPgTvird9X10iLhRuO0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:02:96:07:79:64:b4:9c:64:3f:76:bf:15:a6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27486002469951b6800704c8f02cac74b5f82905
        Validity
            Not Before: Oct 19 10:02:52 2025 GMT
            Not After : Oct 20 10:02:52 2025 GMT
        Subject: CN=69caed3449deb0a08120992814582f70832d5f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:ff:3c:23:51:6b:7f:e7:40:56:cc:ad:11:
                    14:05:a7:12:58:98:25:59:f7:22:39:67:ea:73:27:
                    86:d9:69:00:bc:19:75:e3:17:66:e2:8a:bb:81:1f:
                    5e:e0:75:ee:84:8b:76:b2:bd:b3:53:b5:4e:21:66:
                    6c:f0:22:c0:80:f3:26:3e:b9:59:0b:2e:08:c0:ec:
                    26:40:8f:4f:0f:25:7a:59:48:31:8e:5a:1f:e3:05:
                    ae:e6:78:0e:e4:f6:77:f1:7e:2d:40:2a:9b:70:8d:
                    8a:98:cf:dc:53:e4:51:36:01:78:fd:5d:34:23:86:
                    d1:ed:49:9d:26:65:d9:49:ea:9a:ae:b3:a1:5b:55:
                    88:09:49:43:8d:c6:03:8a:ff:39:39:b8:d2:ed:38:
                    93:14:fe:0a:51:17:43:1c:d9:1a:f3:34:33:7a:de:
                    56:b2:41:bb:29:16:8d:6c:5f:f8:3a:2d:00:2c:cb:
                    ed:85:5d:35:71:d0:c4:80:44:53:52:5e:ab:d2:4b:
                    1b:5b:1e:4f:92:fe:95:e9:50:09:d0:04:e5:0a:e9:
                    0d:89:20:96:ca:e0:9f:32:c2:2e:c8:15:b5:2f:3c:
                    f3:57:ca:46:85:b5:cb:16:aa:09:3d:c9:b0:92:da:
                    2c:0c:67:d8:a5:34:50:dc:01:e8:cb:28:4e:e3:e4:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CA:ED:34:49:DE:B0:A0:81:20:99:28:14:58:2F:70:83:2D:5F:3B
            X509v3 Authority Key Identifier:
                keyid:27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a6:01:99:ef:73:0e:e1:19:1e:30:e6:d3:e9:96:a3:7d:12:
         66:d6:f4:45:3c:4b:a6:af:48:1f:ca:e1:bc:a9:ae:6b:94:a2:
         46:b2:1c:bb:09:c9:2b:0e:e8:bc:e9:c6:0c:b9:61:40:a7:b0:
         47:31:78:e7:08:2a:ba:3a:36:b4:e6:d9:3f:95:01:d6:d3:52:
         b7:d4:44:bb:d3:8a:1b:e1:7a:9f:a3:aa:cc:0e:46:e7:45:cd:
         5e:86:02:b6:f0:71:f5:c7:dd:75:ce:88:9d:40:9f:b9:b1:8f:
         b3:73:f5:a1:ea:30:0d:7a:4a:db:46:10:c5:41:a3:70:27:b3:
         ee:e6:14:fd:6b:d3:56:b3:cd:4c:42:de:41:d3:fa:a3:e4:09:
         ae:d8:fd:72:8f:25:b2:48:4e:2e:f9:b5:93:e6:88:67:6c:af:
         b2:29:88:d4:88:94:86:2c:c1:c3:dd:95:fe:1b:4f:0e:ee:95:
         0a:af:54:50:19:f7:b8:07:c2:70:60:03:21:8a:b0:fa:92:39:
         09:8b:15:c6:0a:b0:4a:96:d5:09:50:79:a8:b0:44:4a:cd:28:
         70:96:ce:4f:f1:38:94:0e:24:dd:4d:53:1d:68:6b:a3:88:d0:
         c1:63:ca:bc:ec:aa:e2:7f:04:f6:b3:5d:19:21:22:9e:ca:d6:
         91:d7:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:32 2025 by rpki-client