Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
File:                     Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft (raw, json)
Hash identifier:          UZfl4sXNfngcM1N+s8HdFpvvC1qx9/YROzNcQ4lyk54=
Subject key identifier:   FA:C3:1C:6B:69:6D:8D:3D:D9:AB:1A:DD:E1:AB:A4:3C:38:38:76:A5
Authority key identifier: 26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E
Certificate issuer:       /CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
Certificate serial:       019A71B7BF2A36032ED7F622FF9F63E2D46C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
Manifest number:          16AF
Signing time:             Tue 11 Nov 2025 07:00:58 +0000
Manifest this update:     Tue 11 Nov 2025 07:00:58 +0000
Manifest next update:     Wed 12 Nov 2025 07:00:58 +0000
Files and hashes:         1: Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl (hash: +O7hspyPIiD4M9H3ciaHJk9ASnphh16kGETYIyavJoA=)
                          2: s_vj38_GYCn4aemkK1p2_MaatWQ.roa (hash: 3JnnhuGGZqjdBr8pR/nRqhjcsI/Mjb5T38Y9Ho7lfvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b7:bf:2a:36:03:2e:d7:f6:22:ff:9f:63:e2:d4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
        Validity
            Not Before: Nov 11 07:00:58 2025 GMT
            Not After : Nov 12 07:00:58 2025 GMT
        Subject: CN=fac31c6b696d8d3dd9ab1adde1aba43c383876a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:15:75:a3:e3:af:d5:8a:5a:3c:77:4e:cd:
                    31:17:80:5b:bd:13:a2:c9:a2:f2:ae:7e:56:1a:7b:
                    87:25:b0:33:a3:3c:15:3b:68:b5:09:d6:51:4c:c8:
                    b9:17:dd:5e:61:ff:7f:74:21:8a:73:7c:e2:11:08:
                    00:ef:d8:ac:7d:c4:54:e4:af:5f:78:5f:ea:f0:a3:
                    b1:42:9c:8f:ab:83:97:c7:af:05:d4:b2:5e:1c:2b:
                    01:40:b5:e5:dd:31:34:5f:36:da:ac:1c:47:11:fb:
                    fc:b8:e6:f6:f1:23:c9:a4:7f:18:19:32:c7:76:63:
                    d3:b3:c1:ba:b3:22:bd:01:db:1f:e7:a1:71:10:24:
                    7f:4b:64:e0:72:e7:82:4b:ad:6d:69:9c:c2:1e:cc:
                    55:7a:ab:3e:52:78:86:c4:41:73:6f:83:d1:96:a5:
                    ab:ee:b5:4b:3a:37:65:ba:23:47:ca:cc:f3:1e:19:
                    7a:f8:00:85:0a:62:a3:26:d2:35:4f:7d:44:45:85:
                    95:d4:18:01:f7:97:ea:49:91:e0:c0:af:09:f1:18:
                    6e:bb:09:0d:f3:fc:e6:e6:1f:4b:0c:7c:01:e6:f8:
                    81:73:c6:02:ec:06:8e:70:e5:27:bc:ee:96:d2:14:
                    f5:6a:20:fa:81:d8:36:6a:a4:d1:a9:c3:76:70:2c:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C3:1C:6B:69:6D:8D:3D:D9:AB:1A:DD:E1:AB:A4:3C:38:38:76:A5
            X509v3 Authority Key Identifier:
                keyid:26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:54:d8:17:6e:bd:bc:3f:a8:61:33:9c:f9:cd:2b:d1:b8:f7:
         e0:4f:b9:fb:d8:0e:10:82:7e:84:c1:47:9e:92:6a:05:29:ce:
         48:e1:62:aa:53:72:96:ee:c4:0f:25:93:85:b2:57:9e:96:75:
         e7:9a:c7:91:78:4e:64:26:c8:73:3e:3a:5b:df:45:51:4c:a8:
         9f:03:90:8e:1a:c3:55:cd:36:fd:64:21:ea:ab:db:16:31:2b:
         e4:cb:2c:fb:2f:d5:8d:e8:ce:ed:c5:ef:d9:88:a0:eb:5c:a6:
         62:a2:3e:8c:b5:d8:da:87:3e:a3:b9:bc:a2:54:2c:1a:68:c4:
         89:63:a3:c5:f9:cc:ab:ba:76:a3:ae:c1:66:10:14:8e:fd:66:
         f6:13:8e:6b:74:12:bd:2e:24:e8:aa:29:b3:db:f5:10:78:a0:
         34:f8:03:80:bb:f7:3b:c2:e6:58:e1:af:15:34:29:9b:a0:11:
         e7:aa:95:25:37:a4:35:cc:c6:13:5f:01:96:fe:52:38:df:8a:
         38:d7:37:36:7f:a4:1c:48:6b:05:bb:66:be:0e:80:03:e5:ae:
         6d:da:1b:bf:7e:0f:08:05:29:6b:3a:7d:49:74:c6:a9:97:10:
         c9:a3:ce:a7:9d:1f:a7:af:db:75:a9:a6:b4:9f:f9:aa:ed:50:
         3d:ac:47:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:53 2025 by rpki-client