Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File:                     jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier:          NXcpgDSElGlF1zfHpbWoB67uA1zLBN6gnrfcmHByX+g=
Subject key identifier:   7F:8C:2E:99:95:5D:5A:3B:67:B7:8E:C2:9D:BF:C1:34:47:6B:EE:54
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer:       /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial:       0199FE7DD1263A48CD0E6ECF2D58CF8CB806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number:          10AE
Signing time:             Sun 19 Oct 2025 22:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:22 +0000
Files and hashes:         1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: /vpA+89SAynGbCywgapQn+4akunrCdJhcRD0prc2n7g=)
                          2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:d1:26:3a:48:cd:0e:6e:cf:2d:58:cf:8c:b8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
        Validity
            Not Before: Oct 19 22:01:22 2025 GMT
            Not After : Oct 20 22:01:22 2025 GMT
        Subject: CN=7f8c2e99955d5a3b67b78ec29dbfc134476bee54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:96:c5:4c:88:4a:37:96:2e:7c:ba:fb:6d:
                    7f:81:24:ce:75:dc:08:1d:cc:16:db:64:70:54:9f:
                    58:6c:a8:77:a2:55:82:f9:56:b1:3f:42:2f:03:6a:
                    9a:2b:da:dd:49:f9:6a:11:4a:45:69:97:75:ae:9c:
                    22:92:a7:02:1f:7c:2b:2b:8b:75:57:4e:7d:86:4a:
                    83:ec:c3:9d:6a:be:42:8d:d4:29:27:d8:3c:19:a1:
                    de:d8:6a:c1:e5:f9:84:b0:20:67:ea:b6:e2:67:af:
                    19:63:6a:79:12:54:d9:ee:82:37:db:c0:26:5f:13:
                    8f:59:5a:ad:37:55:ff:65:15:13:37:c3:91:07:ff:
                    73:46:27:05:3d:1f:d9:8a:6d:2d:07:6c:be:42:4e:
                    d6:e0:e8:84:33:40:1b:27:97:a8:df:5d:45:21:c6:
                    b0:25:e3:95:32:4c:b2:ae:dc:84:65:17:7e:e2:0b:
                    01:2f:db:4f:12:00:8e:44:b6:55:53:9f:34:b9:7f:
                    04:58:81:19:3f:a6:9b:ef:76:b9:5d:93:3c:f5:9e:
                    d8:ee:34:ed:27:bf:ea:c4:cb:c8:2c:4f:90:7b:dc:
                    c8:ee:9d:d0:b2:62:0d:80:66:b0:58:7f:e1:5f:08:
                    36:ea:5a:e8:c6:4a:89:75:69:5d:86:7f:9b:56:5f:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8C:2E:99:95:5D:5A:3B:67:B7:8E:C2:9D:BF:C1:34:47:6B:EE:54
            X509v3 Authority Key Identifier:
                keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:73:78:e8:43:52:c8:6e:75:8e:47:2b:81:72:bb:ea:0e:d9:
         be:01:b3:b0:45:b3:ce:ae:61:f8:46:89:bd:9a:34:35:45:44:
         cf:e6:87:c8:6d:e1:0a:b5:98:26:d9:ac:19:bc:6c:7f:da:ea:
         0f:4e:55:7e:e4:5f:e3:9a:87:d2:13:89:be:49:ec:6e:e7:a2:
         d1:1d:16:e0:d4:2f:72:62:10:67:73:61:95:04:68:94:cd:3d:
         1f:c4:9e:37:e5:3a:57:8e:94:ce:b0:61:80:42:5b:0c:d8:9f:
         cf:b4:fd:03:d5:dd:ac:65:23:67:55:67:79:9b:6f:83:26:05:
         1f:d2:a7:e1:92:1e:34:44:70:40:73:02:1e:41:fc:a8:cd:99:
         3b:ae:aa:65:1f:1c:60:90:f6:43:52:c6:f5:98:b9:13:0f:9e:
         82:e6:b8:92:bd:93:6a:fd:ff:31:c7:46:4b:d1:b9:27:0a:34:
         4e:4d:ef:a1:a2:c1:b9:3f:e0:5c:98:be:bc:4d:7f:5f:3e:bc:
         18:9f:e2:51:5c:8b:13:9f:ff:b9:cb:f9:b0:02:54:c8:af:14:
         1f:83:68:9e:94:b1:e4:cc:b5:d9:f3:b6:eb:6f:87:41:e8:57:
         4d:fc:43:41:4a:6c:5c:42:f3:41:01:b9:72:1c:e0:32:39:c4:
         58:9a:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:33 2025 by rpki-client