Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
File:                     jwhPOoC0od9IEWQqq415UWOaLlg.mft (raw, json)
Hash identifier:          5QR+FyGv4Zmc+TgxeYZH4/vgxu7HHO8dIeH3nib2Z4k=
Subject key identifier:   21:22:37:C3:CC:56:AC:D1:F4:87:6A:90:9C:4E:AE:78:DA:AD:91:50
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Certificate issuer:       /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial:       0199FBEB9BF7200487A8B20A02503759BDB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
Manifest number:          13A8
Signing time:             Sun 19 Oct 2025 10:02:25 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:25 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:25 +0000
Files and hashes:         1: gEYhgGeiO3CvO7L61btMp6FMtUk.roa (hash: t7slYmPenDTs/a8GzhHgCqRYrDeOIVUNfoJ1LIoBLf8=)
                          2: jwhPOoC0od9IEWQqq415UWOaLlg.crl (hash: pxv+6qg01LsNnCtmlkXeScThvhxZDK8FI0YkjJSIsCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:9b:f7:20:04:87:a8:b2:0a:02:50:37:59:bd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
        Validity
            Not Before: Oct 19 10:02:25 2025 GMT
            Not After : Oct 20 10:02:25 2025 GMT
        Subject: CN=212237c3cc56acd1f4876a909c4eae78daad9150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:19:7d:b7:d2:c2:b0:69:a2:80:ab:c9:fa:
                    52:2c:25:24:a6:2e:0d:a5:02:fe:61:54:a6:fd:67:
                    07:16:96:b3:f9:8a:bc:82:14:11:f0:9d:01:1f:1a:
                    6f:88:57:a0:92:43:62:7a:b4:a2:a0:b3:8a:b2:29:
                    c5:43:4b:82:97:65:e2:fa:89:10:77:48:ef:0d:88:
                    e0:50:60:3d:db:42:2f:33:22:0d:ad:5f:f2:b5:0c:
                    47:d3:7e:8d:99:2c:80:ae:29:2a:ce:52:f6:03:ff:
                    b1:3c:c1:99:94:a6:31:20:f4:84:19:7c:18:bd:bd:
                    bf:e6:3d:5e:5b:d8:f9:31:6e:d2:2f:19:1b:07:32:
                    bc:6a:f3:0a:17:89:73:f9:a6:82:b5:6b:c2:b8:ef:
                    00:38:9e:cd:77:45:fc:7a:20:36:1f:43:f3:ee:76:
                    f3:f3:84:57:56:70:06:37:af:20:67:4f:fd:8e:c8:
                    ee:9e:91:a6:9f:73:17:21:82:d6:19:cc:33:a4:7a:
                    b9:a5:c1:da:68:47:dc:4f:05:f9:fd:eb:40:b8:3c:
                    d7:bd:7f:d7:e0:db:d2:4a:ec:91:f5:49:4e:cd:14:
                    db:1d:f6:25:ef:4c:52:c1:8b:a9:a9:5e:b7:ae:f0:
                    08:15:d9:8c:81:ec:19:64:2b:5b:0b:fe:2e:3f:ce:
                    fe:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:22:37:C3:CC:56:AC:D1:F4:87:6A:90:9C:4E:AE:78:DA:AD:91:50
            X509v3 Authority Key Identifier:
                keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:69:72:94:76:ec:df:af:b1:d8:f1:28:54:0c:39:b5:61:be:
         7b:77:44:99:ad:4f:a2:df:8e:1d:4f:fa:63:f0:86:e2:62:ca:
         11:da:81:6e:3f:db:18:ee:02:6c:b1:ab:ac:bb:ac:ea:f2:29:
         d2:6e:ac:09:c6:23:78:18:72:18:2b:73:77:6b:0e:bc:d9:b6:
         a2:c2:50:45:6a:10:6b:11:f8:ae:3e:d0:d3:64:9d:b2:61:84:
         80:55:b5:e2:0b:bf:4c:70:6f:73:77:e0:73:db:e4:0f:10:e6:
         9d:1a:ba:16:16:94:07:49:8a:8a:8e:28:d5:d7:a3:82:06:32:
         42:c9:61:0a:64:ff:fb:91:de:a6:29:c3:0c:b0:b5:e0:b4:01:
         44:ae:bf:1d:fc:68:28:c9:7b:0a:1c:d7:e1:78:e8:f6:2b:d2:
         54:0a:1d:dc:12:d9:a8:2e:fa:e6:eb:8b:a9:57:f5:f9:65:90:
         b5:7a:ae:fc:b8:c3:09:95:90:14:40:d1:4c:88:8e:7a:35:76:
         e7:78:e1:f2:30:61:34:d5:bc:0d:64:b6:c7:9b:ce:67:db:5a:
         f7:8e:9f:f9:eb:b8:5e:35:99:6e:36:cc:82:be:54:d4:47:23:
         16:ae:60:8f:f3:54:b5:b8:02:9d:e3:ad:7c:43:31:39:50:be:
         d4:f1:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:11 2025 by rpki-client