Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          1n3UhLOjDAHY5KJyF6HVssOpVxcJfHf8BPQOKgCE/I4=
Subject key identifier:   18:B6:C7:63:92:24:69:F2:74:8A:7A:AD:57:35:C6:9C:5E:4F:BE:8D
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       0199FBEB297A4230981BEF5F59B8066B3D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          03C5
Signing time:             Sun 19 Oct 2025 10:01:56 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:56 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:56 +0000
Files and hashes:         1: Eja8uROuzIbK3iaci49r3-WhTxE.roa (hash: ZAVnNyA2dIyWXYHRVd60vJEBGOSH2/TqvMkOURX86Bo=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: hTM78UK17oecKSnDINnwlL1z+aTkBPBmqXToS27NuYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:29:7a:42:30:98:1b:ef:5f:59:b8:06:6b:3d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Oct 19 10:01:56 2025 GMT
            Not After : Oct 20 10:01:56 2025 GMT
        Subject: CN=18b6c763922469f2748a7aad5735c69c5e4fbe8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:4a:f6:12:c5:1d:d2:b4:d3:75:24:60:9b:
                    80:2e:46:5e:ed:62:55:d6:5a:7a:19:67:d9:e7:d8:
                    24:1c:98:7f:98:48:3a:51:c8:b6:95:1f:75:69:84:
                    53:72:d1:43:97:ce:82:2d:47:f6:e6:ea:88:a6:fc:
                    19:26:7c:cf:77:bd:21:ab:c8:a4:ad:37:60:ab:5c:
                    f3:ed:08:de:56:0b:f1:d0:cd:97:cd:7f:8a:40:f2:
                    31:4d:52:eb:40:5d:b9:77:4c:3c:7f:fa:e8:71:2d:
                    ce:05:a0:34:a8:9c:de:ff:d4:76:6f:99:94:0b:e6:
                    d3:5e:62:fe:4f:1e:bc:54:f8:e5:83:78:03:ac:f7:
                    50:a9:7b:90:03:ef:52:cd:a4:c4:86:3b:b9:71:fd:
                    4e:77:5e:e0:6c:eb:1a:86:eb:68:f2:d3:38:2c:35:
                    a4:ce:4d:a3:3c:34:75:fb:af:2e:08:8a:7e:d8:54:
                    8b:8d:42:d3:50:d0:84:a5:4e:9f:5b:eb:70:81:58:
                    cd:80:4b:bf:f8:e4:62:22:22:07:7c:8f:32:73:86:
                    af:fa:68:6c:0d:8e:fe:6f:37:cf:b0:cd:c7:b5:16:
                    52:89:09:39:ba:9f:76:0b:33:52:91:92:f1:1d:4f:
                    58:98:da:4f:dd:41:ad:c4:81:9a:e3:e4:83:e4:66:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B6:C7:63:92:24:69:F2:74:8A:7A:AD:57:35:C6:9C:5E:4F:BE:8D
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a1:34:02:8e:8d:84:e5:66:88:ba:e4:f5:2b:b3:99:86:3b:
         e9:20:70:cc:b4:5e:12:69:80:b9:4d:f6:53:1b:d0:3c:b7:8c:
         41:ca:29:74:d1:70:69:83:5e:48:1f:ae:f7:98:01:50:70:74:
         41:97:23:ad:b1:99:d4:92:4a:6a:da:3a:1d:9a:5a:53:05:3c:
         8d:a6:39:1c:2c:20:b3:f1:70:a6:4a:65:72:81:e9:99:14:73:
         6e:cc:de:14:a4:07:e8:89:60:db:30:95:39:01:0b:41:8e:c5:
         bf:8f:d3:b6:ce:6a:be:41:77:91:74:ea:26:0d:82:d9:8c:57:
         00:0b:fe:50:85:8a:fc:1a:63:12:ff:8c:32:f9:ae:af:0f:4f:
         34:c6:3e:1f:cd:2b:ad:53:4c:5a:b0:6a:8d:8a:d1:b3:1c:47:
         99:05:39:db:ca:f0:b6:39:b9:c1:88:12:46:91:e8:7e:a0:19:
         20:21:5b:8f:20:81:a0:56:70:74:3e:fd:e8:0f:21:e4:7b:8d:
         bb:dc:f5:db:ae:1f:9f:d7:4e:3a:bd:0d:8c:40:99:81:c7:a6:
         dc:d0:01:0d:c9:20:b8:42:7c:81:c6:8d:21:77:48:7b:7a:b1:
         02:35:e3:cc:f0:c9:99:3a:f0:90:2a:d0:dd:f2:43:7b:39:af:
         7f:64:89:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:22:39 2025 by rpki-client