Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File:                     jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier:          5KE32JAlIkfPwFjmeozvroNVcXSlxEQenBhfH+x7h7o=
Subject key identifier:   CD:88:15:AF:1A:C4:3F:2A:E9:FF:EA:96:9E:40:58:C4:16:8B:99:86
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       0199FFFEB30FB2DEA7AB38DAA7CB2CBEBABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number:          0140
Signing time:             Mon 20 Oct 2025 05:01:45 +0000
Manifest this update:     Mon 20 Oct 2025 05:01:45 +0000
Manifest next update:     Tue 21 Oct 2025 05:01:45 +0000
Files and hashes:         1: CfeQnBnwZnkX1exlA_8E_9J0HQY.roa (hash: zgoZGw80fZLZ+LHAElH5ez4Hyw5+xxVl0f9aIIP8B/0=)
                          2: acQ6lYQTZtPRww8nQnrYG_NCvIc.roa (hash: iGzqEuditXbBC1KhmCdk/H/HOvF/nSKYsyWwNpzoQME=)
                          3: hYZifB394Q_fg_dn2DSKA_YIZwA.roa (hash: qAci8Pygint2lrSaNgNslvSojUdYL0XMttlZXK/07DQ=)
                          4: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: v41SaELZ7HSd2w5728CKSV87tMl09zKHHe6nC8sA9qs=)
                          5: uIJIuuAnt6td9AqkKzjwQT857_0.roa (hash: A6x0e2CvG+/bTGJF3SyM7Q0bPdqE0EXH0TDiPVe/x1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:fe:b3:0f:b2:de:a7:ab:38:da:a7:cb:2c:be:ba:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Oct 20 05:01:45 2025 GMT
            Not After : Oct 21 05:01:45 2025 GMT
        Subject: CN=cd8815af1ac43f2ae9ffea969e4058c4168b9986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:71:0a:1c:b4:75:3e:05:6e:dd:6d:8f:b2:
                    cc:06:b1:98:c4:9c:04:49:0d:85:98:aa:48:fd:c6:
                    d9:38:4a:02:0e:4a:b6:bb:5c:47:0c:6a:55:11:fc:
                    79:61:bd:48:f9:e7:19:af:87:4a:2f:9a:f2:30:59:
                    96:cb:d1:0f:69:7e:94:aa:c0:12:34:26:2d:84:65:
                    b7:48:38:4e:6a:9b:ed:7e:88:6c:08:32:b3:04:71:
                    59:e2:f6:df:1f:eb:0e:3c:57:5b:0b:e9:54:7b:df:
                    32:ef:41:ab:8e:ca:da:8b:31:e8:25:a3:f0:12:d6:
                    5c:8b:47:87:16:9f:47:b4:8a:52:64:33:06:d8:99:
                    ba:ba:e0:65:ed:65:13:d1:7a:4f:fe:80:3a:35:8b:
                    53:9f:06:02:54:71:8a:54:44:5a:29:97:25:1c:c7:
                    98:7e:60:db:3b:4c:b3:be:7a:05:b3:25:0f:1a:c4:
                    35:1b:b3:a9:14:4b:4e:ea:48:c6:55:2a:c5:ab:02:
                    94:cc:45:8b:f0:62:5a:f9:38:e9:99:f2:ca:c6:92:
                    85:4f:bd:d1:d1:5f:e0:4f:b8:57:c8:77:6e:d3:62:
                    5a:86:1f:ca:3a:72:2f:ec:69:11:00:fe:79:bf:7c:
                    9f:d1:09:55:29:af:4a:94:5e:7c:61:0c:ec:cf:c6:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:88:15:AF:1A:C4:3F:2A:E9:FF:EA:96:9E:40:58:C4:16:8B:99:86
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:71:13:d3:56:6c:7b:19:0a:21:1e:3d:9e:e8:42:b4:46:b5:
         88:98:c2:30:e4:81:dc:9c:cd:9d:f8:25:7a:52:a5:8a:2c:45:
         76:37:5e:32:d5:d7:42:a1:ce:9c:a8:f6:6c:f9:ab:c6:97:8a:
         62:9a:de:9a:4a:f7:73:9c:24:ec:c8:51:c6:3f:4c:12:d2:64:
         3c:f6:4d:78:72:b7:7a:5c:16:48:40:cc:df:8c:08:6c:f5:12:
         20:d0:6e:07:7c:76:b5:5b:b5:17:59:d3:36:fe:56:a1:04:52:
         dd:32:af:43:42:37:6d:9b:f5:4f:e8:34:b5:5b:23:7e:07:2e:
         c5:10:a8:86:96:e2:67:1a:4c:68:67:db:2f:8a:85:f9:84:68:
         22:4a:7e:cd:4a:bc:0c:0e:01:55:48:ce:f3:2f:de:23:aa:b8:
         8c:ec:d3:d6:9a:75:56:0e:d5:31:d9:39:b2:56:21:cf:dc:c6:
         31:5f:46:5d:5e:99:9d:dd:6f:98:ec:b8:b5:33:8e:f8:e0:82:
         48:8c:c6:46:ea:66:bd:25:44:eb:e0:a6:27:3b:9d:75:9f:39:
         c8:d7:88:45:46:83:16:d7:06:34:a1:bc:fc:71:5f:7e:8d:2a:
         0d:7f:2e:33:8c:55:d9:3d:4b:b6:8d:da:94:87:db:4e:e5:7e:
         f0:51:c7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:51:47 2025 by rpki-client