Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
File:                     jmNwTVUB7XWm4glm6_B6NlVbGrY.mft (raw, json)
Hash identifier:          9EDvk5TleTxNSMIKuanIfRGklzoXbnm3X0r/2aQy6VY=
Subject key identifier:   07:98:A5:1C:A2:CF:85:97:43:6B:2B:B5:EE:30:6F:83:B7:17:0D:01
Authority key identifier: 8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6
Certificate issuer:       /CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
Certificate serial:       019A228942BCD068BF6BA80359700E944C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
Manifest number:          0DD7
Signing time:             Sun 26 Oct 2025 22:00:12 +0000
Manifest this update:     Sun 26 Oct 2025 22:00:12 +0000
Manifest next update:     Mon 27 Oct 2025 22:00:12 +0000
Files and hashes:         1: IzJAsPZQ1UGxFANdsG3oY69uKXA.roa (hash: CcyMr2iMEV8JAHDDzlmMrcymUQDZ/T8pHrLiuemKNGk=)
                          2: jmNwTVUB7XWm4glm6_B6NlVbGrY.crl (hash: vStqFFT0dBY7npTFy1ZynePL9GEICAMfas+tvWa4dD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:89:42:bc:d0:68:bf:6b:a8:03:59:70:0e:94:4c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e63704d5501ed75a6e20966ebf07a36555b1ab6
        Validity
            Not Before: Oct 26 22:00:12 2025 GMT
            Not After : Oct 27 22:00:12 2025 GMT
        Subject: CN=0798a51ca2cf8597436b2bb5ee306f83b7170d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bf:fd:86:0b:a4:ae:61:55:d1:06:cf:d6:04:
                    e8:69:99:33:c2:aa:cd:de:3c:75:11:24:23:92:1a:
                    04:52:53:17:ac:26:90:ab:02:4f:e0:24:59:d5:83:
                    c8:b7:88:ec:39:9c:a4:63:d2:d4:92:86:e1:f3:1e:
                    76:69:4b:c3:28:a0:22:cd:fe:09:56:51:6e:95:0c:
                    b2:c2:36:0d:c0:69:14:ca:4b:7a:67:a7:47:9e:c7:
                    39:87:8e:04:b9:a0:24:9e:98:3c:61:d5:a3:31:cc:
                    47:e8:dd:4a:4e:61:f8:20:d2:5e:1c:40:85:d5:7b:
                    c7:83:fb:e5:e6:d1:42:35:62:47:95:c6:9c:4a:ea:
                    55:0c:0b:7e:20:95:c4:42:57:42:f9:ea:26:72:6c:
                    ae:83:69:e8:a4:d1:5f:49:b5:29:cf:91:2e:09:11:
                    bb:8d:5a:c8:ae:cb:d1:be:b3:82:95:73:c8:62:7f:
                    c2:ee:6e:c5:77:15:b7:08:ce:a4:53:e4:cb:6f:1d:
                    ea:6b:21:3d:32:af:fe:f9:23:fe:81:21:c7:97:0e:
                    c7:13:14:da:f6:53:af:1d:15:2f:c1:fa:d7:b9:6a:
                    e7:c9:cc:76:15:54:7a:4e:1d:73:8d:52:3d:50:97:
                    31:13:de:e5:17:e8:78:af:6d:07:28:58:0b:20:ac:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:98:A5:1C:A2:CF:85:97:43:6B:2B:B5:EE:30:6F:83:B7:17:0D:01
            X509v3 Authority Key Identifier:
                keyid:8E:63:70:4D:55:01:ED:75:A6:E2:09:66:EB:F0:7A:36:55:5B:1A:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmNwTVUB7XWm4glm6_B6NlVbGrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/79721f-f40b-41d2-ac0e-c947e16c2c61/1/jmNwTVUB7XWm4glm6_B6NlVbGrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:06:6d:b2:8c:27:0f:8c:10:c5:ea:11:b7:d6:7a:03:b6:69:
         d7:f1:96:b8:aa:2e:2e:fc:e1:a1:19:09:83:37:e1:fa:9d:81:
         c6:c0:ba:bc:e7:39:15:73:4f:43:27:06:30:2e:42:c1:44:24:
         8a:6e:07:92:0f:54:3e:45:cc:fd:d2:8a:7e:0f:79:85:77:b6:
         39:26:36:c3:c1:5a:74:3b:53:82:ff:19:6f:2c:e6:c7:95:5e:
         59:a9:6a:2d:a9:dc:2d:c8:52:5c:ab:fd:68:85:00:d2:20:c2:
         fa:15:ab:b1:97:12:66:02:f2:35:0b:0d:33:e7:06:31:86:de:
         a6:43:69:5c:d0:73:af:96:3c:10:c5:bd:1a:4f:89:60:96:cd:
         7a:ab:5e:8e:c0:94:ee:ab:af:6a:9e:8c:c4:15:14:7d:9d:1a:
         ac:d9:e6:68:46:76:d5:53:cc:84:cc:14:5e:c9:f7:0f:62:8d:
         fa:31:7e:74:c7:fe:cc:65:96:fb:05:ca:24:2b:e1:06:1f:6c:
         ae:c4:da:a0:4e:28:2c:8d:23:15:00:b1:41:96:08:5d:04:6f:
         ad:79:79:79:5e:03:a0:26:a0:ef:f0:da:2e:c5:4c:13:66:0c:
         9c:90:81:cc:f5:0c:b0:1e:80:d5:f3:0c:4f:a6:5d:70:12:1b:
         48:9a:86:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:40 2025 by rpki-client