Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
File:                     I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json)
Hash identifier:          wp2MD4a68D7a+3u96QjJJkyEQN/hxVZXHoCjxjUR7pk=
Subject key identifier:   23:DE:56:67:B9:5B:C0:CF:CD:EC:A7:81:A4:AA:E6:4B:F8:49:44:23
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Certificate issuer:       /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial:       0199FDD8D123D6BE7180CB4DDC872AD92719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
Manifest number:          0E36
Signing time:             Sun 19 Oct 2025 19:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:08 +0000
Files and hashes:         1: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: oKbCszoeCYyOjc/xj91ZWZLq3aUS5vUxEX8xNOcZxBQ=)
                          2: lMtd9Et7sCIMnXubrUAx71SKNrE.roa (hash: m1edH+G4XaQspTL3esib0CDSyQxr91JPxRsi1poYwKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:d1:23:d6:be:71:80:cb:4d:dc:87:2a:d9:27:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
        Validity
            Not Before: Oct 19 19:01:08 2025 GMT
            Not After : Oct 20 19:01:08 2025 GMT
        Subject: CN=23de5667b95bc0cfcdeca781a4aae64bf8494423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:83:19:ec:5f:6a:14:e2:c5:2c:5e:12:73:
                    8f:40:e6:fa:dd:f2:95:ad:95:b9:95:d5:77:4e:b3:
                    f5:52:d9:f7:f6:a0:97:58:a6:82:87:f4:74:b7:e9:
                    76:c5:96:3d:09:37:06:ee:8e:b0:d2:c5:32:33:3d:
                    f0:48:b6:e2:36:71:8c:a9:df:6a:24:b8:e9:f3:0c:
                    d7:cc:ed:e0:17:eb:5e:44:fc:60:e8:81:6b:82:9f:
                    5c:bc:57:bd:47:95:f9:e2:ad:1e:e6:44:04:1a:5f:
                    20:ac:ab:ed:b1:8c:52:42:90:95:aa:53:5e:f9:67:
                    9a:cf:23:1a:23:65:7b:fe:c2:22:4f:a1:d2:4c:3f:
                    74:5a:5f:2a:1b:f5:49:cd:a4:d6:a6:97:96:6b:fe:
                    0b:7d:a5:09:12:6c:2c:f5:2f:04:fe:84:2a:61:4f:
                    7b:95:40:a0:47:ea:f3:70:83:2f:49:ae:49:64:39:
                    46:9e:b9:2f:a4:eb:38:e2:11:59:d8:6e:40:6b:95:
                    7a:cc:85:b9:41:b3:c9:83:8c:ad:09:9e:ef:a1:ae:
                    0d:9e:b0:60:f6:e4:c6:d3:00:6a:2b:d6:8a:3b:9b:
                    6a:a4:77:23:dc:d3:8e:a5:c2:d4:52:8d:83:df:b3:
                    e0:7b:c5:82:a0:a5:a6:32:e2:58:9d:05:d4:6e:ba:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DE:56:67:B9:5B:C0:CF:CD:EC:A7:81:A4:AA:E6:4B:F8:49:44:23
            X509v3 Authority Key Identifier:
                keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6b:39:cb:a8:3a:ac:fc:f2:49:11:74:1e:fb:4d:05:9d:b3:
         b2:3b:4b:32:6c:bb:d4:7e:ca:2e:cb:44:06:b1:27:f2:ef:25:
         7a:a7:cf:5b:66:85:aa:93:45:ff:5b:c3:f7:37:aa:f2:cf:7a:
         fb:51:1a:ca:70:2e:3d:85:a4:51:fd:e1:ad:0d:8f:f6:a2:38:
         af:46:d9:10:05:33:be:e6:27:54:25:ba:ef:e4:4b:74:a3:89:
         eb:2f:29:29:e9:0d:8c:bd:13:93:a2:35:f9:b2:4b:c5:8c:c9:
         71:81:58:cd:2c:d3:42:9e:10:f6:b7:ff:f4:c2:92:d8:82:25:
         aa:60:72:5c:86:28:1f:e0:de:c3:c8:3b:57:61:5b:c2:ca:00:
         af:f0:be:92:45:2e:ba:8a:e8:c0:81:5e:67:6f:36:a4:89:ed:
         63:b7:73:cb:b7:73:d3:22:87:4e:64:de:cc:3c:7f:85:2f:95:
         8d:90:d5:12:31:54:20:cb:8c:4a:30:1d:a1:4d:d4:3c:de:43:
         e8:37:37:98:79:5e:65:87:6f:32:27:31:25:fb:03:7e:98:0c:
         59:d4:44:a1:f4:1b:1c:78:90:8d:23:e9:d4:7e:2e:ba:a8:63:
         17:0e:12:97:76:8f:63:f9:95:46:49:69:2b:d8:f5:46:f6:a7:
         17:12:a8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:05 2025 by rpki-client