Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
File:                     Js9NU-1cCkvT_iQiAalmZVyAzA4.mft (raw, json)
Hash identifier:          bYqta+Sx38UIfa9bfeGCBd7NczOHbzOb0Pp2NnASUxA=
Subject key identifier:   FC:1D:46:81:CA:5E:AE:31:22:5A:79:88:93:C9:C7:42:0D:9D:3B:DB
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Certificate issuer:       /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial:       0199FCFD5A88AF2B29BB99A81B791387D179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
Manifest number:          1374
Signing time:             Sun 19 Oct 2025 15:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:26 +0000
Files and hashes:         1: Js9NU-1cCkvT_iQiAalmZVyAzA4.crl (hash: rIino/Z8QsopzzNaDzoWajp6hdYM6qwLaiiMiS+ijJk=)
                          2: MWBaP-HM3jMW5Yk6FgbmWZoD5R4.roa (hash: lV/XwmUehafjM9liZirbeuWxwquOHdPb1htNl8VM0b4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:5a:88:af:2b:29:bb:99:a8:1b:79:13:87:d1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
        Validity
            Not Before: Oct 19 15:01:26 2025 GMT
            Not After : Oct 20 15:01:26 2025 GMT
        Subject: CN=fc1d4681ca5eae31225a798893c9c7420d9d3bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:47:48:c4:ed:08:01:2e:7d:6d:fa:a1:93:
                    5e:7a:8d:18:9d:1c:96:a8:14:35:f6:c1:ae:02:0a:
                    c3:24:35:37:4f:db:49:16:da:9e:05:d8:d1:53:76:
                    57:24:d6:5a:b4:c2:3a:05:53:95:48:e6:c5:96:96:
                    db:0d:0d:a4:1b:15:23:2c:41:ec:2f:0b:19:24:30:
                    7d:6e:54:77:35:7c:9e:be:0d:cf:5e:ed:9e:b8:99:
                    bb:d7:e3:41:0f:ae:86:fe:33:09:3a:f9:fd:d4:7d:
                    e9:32:4f:3a:84:a1:a1:24:ff:57:58:53:76:2d:af:
                    4f:73:a8:99:f4:4a:71:ce:55:24:1c:06:54:d6:9b:
                    83:97:22:cf:a4:b9:75:70:28:a7:a6:b7:8e:62:47:
                    0b:da:f4:d8:b9:a1:7b:b0:fd:6d:5d:2b:a0:67:1a:
                    c1:22:cf:03:d8:88:e0:b9:bb:d1:b9:04:21:4d:9c:
                    02:f7:4b:e2:e5:d3:4c:34:ae:6e:aa:8a:a0:b6:a4:
                    c6:20:0b:90:4f:8e:97:81:cb:2e:2c:65:99:02:8b:
                    62:4a:7d:45:ae:0d:06:6b:e5:78:bd:59:37:5f:91:
                    15:45:09:8a:10:47:f8:cb:08:1a:11:c8:5b:28:9b:
                    35:0f:d4:09:f2:a5:e1:ec:09:70:39:8d:9f:28:cd:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1D:46:81:CA:5E:AE:31:22:5A:79:88:93:C9:C7:42:0D:9D:3B:DB
            X509v3 Authority Key Identifier:
                keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a9:da:c4:50:0e:03:4f:67:45:02:72:27:48:9b:29:e9:25:
         ca:f4:da:33:db:2b:bf:fb:cf:9c:53:48:e8:18:0b:2b:7d:7a:
         e4:e3:90:47:c7:b6:02:91:46:b5:2a:20:50:39:b6:af:19:23:
         ae:e3:24:f3:c7:aa:2f:c1:11:b3:62:eb:ca:7b:0b:1e:b4:2a:
         c1:21:29:05:c5:1d:3d:41:1a:f3:2a:0c:84:9a:d1:d6:48:91:
         7f:a0:f5:fd:9f:d0:9f:17:05:b6:00:6c:f9:b6:bb:75:b9:36:
         72:86:d3:e7:d7:be:c6:8d:b4:e3:e7:68:29:9d:8d:39:c3:35:
         ca:c9:dc:db:18:71:a1:76:b3:10:55:b6:68:e7:41:ff:d4:14:
         b9:11:87:b9:ed:47:80:01:4e:ab:fa:b9:ad:19:90:dc:4f:72:
         a2:4e:ec:f2:38:9d:01:16:10:e0:bc:87:5a:e6:8a:59:9b:c6:
         9f:fb:2b:de:8a:bf:86:85:e3:64:32:d3:76:cb:6b:d2:c9:37:
         91:7f:9e:53:6c:a6:7e:eb:d8:df:5b:bd:2c:f8:8a:05:d2:34:
         3d:7a:4d:94:bf:ad:4f:c0:3c:4f:f2:eb:e4:a2:0c:0a:ab:4c:
         9a:7a:d4:01:59:ad:56:00:ac:c4:2d:bd:a3:56:77:d3:c4:39:
         07:ba:1a:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/VqIryspu5moG3kTh9F5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Y2Y0ZDUzZWQ1YzBhNGJkM2ZlMjQyMjAxYTk2NjY1NWM4
MGNjMGUwHhcNMjUxMDE5MTUwMTI2WhcNMjUxMDIwMTUwMTI2WjAzMTEwLwYDVQQD
EyhmYzFkNDY4MWNhNWVhZTMxMjI1YTc5ODg5M2M5Yzc0MjBkOWQzYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/9HSMTtCAEufW36oZNeeo0YnRyW
qBQ19sGuAgrDJDU3T9tJFtqeBdjRU3ZXJNZatMI6BVOVSObFlpbbDQ2kGxUjLEHs
LwsZJDB9blR3NXyevg3PXu2euJm71+NBD66G/jMJOvn91H3pMk86hKGhJP9XWFN2
La9Pc6iZ9EpxzlUkHAZU1puDlyLPpLl1cCinpreOYkcL2vTYuaF7sP1tXSugZxrB
Is8D2IjgubvRuQQhTZwC90vi5dNMNK5uqoqgtqTGIAuQT46XgcsuLGWZAotiSn1F
rg0Ga+V4vVk3X5EVRQmKEEf4ywgaEchbKJs1D9QJ8qXh7AlwOY2fKM3lCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwdRoHKXq4xIlp5iJPJx0INnTvbMB8GA1UdIwQY
MBaAFCbPTVPtXApL0/4kIgGpZmVcgMwOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZWJjZTUtNzNlMy00ZTNlLTgzYjAt
YTc4OGZkYzcwOTQ4LzEvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zZWJjZTUtNzNlMy00ZTNlLTgzYjAtYTc4OGZkYzcwOTQ4
LzEvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmanaxFAO
A09nRQJyJ0ibKeklyvTaM9srv/vPnFNI6BgLK3165OOQR8e2ApFGtSogUDm2rxkj
ruMk88eqL8ERs2LrynsLHrQqwSEpBcUdPUEa8yoMhJrR1kiRf6D1/Z/QnxcFtgBs
+ba7dbk2cobT59e+xo204+doKZ2NOcM1ysnc2xhxoXazEFW2aOdB/9QUuRGHue1H
gAFOq/q5rRmQ3E9yok7s8jidARYQ4LyHWuaKWZvGn/sr3oq/hoXjZDLTdstr0sk3
kX+eU2ymfuvY31u9LPiKBdI0PXpNlL+tT8A8T/Lr5KIMCqtMmnrUAVmtVgCsxC29
o1Z308Q5B7oa6g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:06 2025 by rpki-client