Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
File:                     JsymKjWIHK6NLFgSrFjKBxCNcK4.mft (raw, json)
Hash identifier:          kJg4rzT93NTqXCycjRCx8SqydXZanFNmHmrwp49+gc8=
Subject key identifier:   1F:A9:23:40:27:13:E3:BE:70:57:A0:84:EC:53:CF:BC:E7:4F:E9:61
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Certificate issuer:       /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial:       0199FE4724163DFCFB8CBBBCC69EEA90DD08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
Manifest number:          0DD9
Signing time:             Sun 19 Oct 2025 21:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:39 +0000
Files and hashes:         1: JsymKjWIHK6NLFgSrFjKBxCNcK4.crl (hash: 6XmyxSU6MQvxGkN6/a9mKauusIZ6/XRzDbizNdUTrIU=)
                          2: TI2sUvWDSUpJ-tuAKDLzGHYWcDc.roa (hash: +KTdwKTz1o8gs9Nib2fmPFoQlxElWxBwjFIadXb85TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:24:16:3d:fc:fb:8c:bb:bc:c6:9e:ea:90:dd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
        Validity
            Not Before: Oct 19 21:01:39 2025 GMT
            Not After : Oct 20 21:01:39 2025 GMT
        Subject: CN=1fa923402713e3be7057a084ec53cfbce74fe961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:d5:18:a5:1e:60:69:33:d5:0e:3d:b7:b7:
                    5a:7b:f9:5f:04:49:f8:24:13:f4:25:bf:14:b4:29:
                    56:72:e9:b5:0f:ec:b2:74:87:ea:ff:a1:3a:6e:a1:
                    cd:8b:c7:6b:af:5b:97:29:2a:e1:c1:5b:d6:df:a9:
                    6d:92:9a:c4:dc:7f:5b:8f:58:ed:b3:19:2b:c8:f2:
                    4a:05:1a:7d:c6:c9:fd:d7:0a:d4:b2:cf:4b:e2:da:
                    0b:38:b9:f7:b3:94:b0:a4:6d:ae:ae:30:55:f4:93:
                    a3:49:3a:b5:1b:57:30:ba:db:1c:61:6d:c0:f8:ee:
                    e1:d6:25:e5:e9:2d:c9:b4:f6:9e:4c:8b:c4:e0:d8:
                    db:b1:25:21:29:10:c8:7d:7f:f1:48:fe:c0:ed:11:
                    db:5a:de:92:72:9c:31:96:c2:d3:3d:31:1b:c9:38:
                    1d:ed:fd:f3:27:1a:57:20:21:2e:61:d1:a4:0c:a9:
                    da:15:d0:15:7e:24:df:76:d8:96:59:3e:6c:15:3b:
                    bc:da:76:7e:1b:51:78:5e:17:58:ce:30:53:53:37:
                    d1:db:f0:8d:80:23:3b:82:69:6d:ca:94:c8:a3:73:
                    1c:37:8b:84:df:c5:93:10:70:7c:10:46:8c:f0:c9:
                    92:29:33:37:84:af:8a:8e:43:71:cb:a1:32:24:d3:
                    ea:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A9:23:40:27:13:E3:BE:70:57:A0:84:EC:53:CF:BC:E7:4F:E9:61
            X509v3 Authority Key Identifier:
                keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f3:a8:d3:62:33:2f:11:05:cb:a5:7a:53:4e:b7:ba:1b:7c:
         5e:ff:0d:37:4b:e1:49:54:54:41:b4:81:73:f0:84:9d:9c:ce:
         f7:23:02:ab:11:3e:06:b3:b3:b4:20:3d:57:9b:9f:ec:70:85:
         29:6a:df:d3:52:67:ee:2d:a8:79:ec:0f:96:14:00:78:08:38:
         35:b5:77:c9:a8:d4:8d:f3:f4:f5:2a:14:47:e5:f2:8a:09:8a:
         95:df:18:74:0a:50:30:8b:60:76:d6:80:8c:9a:bc:96:c7:ea:
         1c:2e:67:b2:22:b8:3c:58:22:15:5f:80:8c:a4:ff:ab:92:ec:
         0f:ce:79:3e:f3:f0:e2:8b:43:dc:53:30:7d:3f:28:8b:34:39:
         50:6c:3d:12:06:4e:23:fa:23:e3:1e:d0:79:67:46:66:b5:07:
         47:3e:ed:fd:bb:30:fa:f7:ac:b0:8b:fd:f9:6b:d2:56:00:ca:
         47:90:bf:fd:66:b2:1c:02:7b:85:8c:2e:cd:5e:29:1f:5d:ea:
         33:34:7a:c0:ea:e7:92:51:cb:e5:6a:3c:85:cb:71:6d:22:6f:
         ae:57:71:eb:1c:9f:b7:35:49:a8:09:0d:42:7f:3f:19:ca:53:
         d2:49:f2:b4:f2:d0:dc:44:f1:2c:c3:0d:fc:0b:b7:d2:03:62:
         82:3e:12:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:19 2025 by rpki-client