Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File:                     Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier:          EEcIZ3XeM38ur2UIAJlzhvcSQK08cU8IvN2bceEthPA=
Subject key identifier:   8D:6D:AB:FC:69:2E:06:B8:B1:94:C8:2C:F4:5D:E1:97:80:A3:A9:B4
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer:       /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial:       019A21AE1AAA54C54FD6C6D6B324A9651ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number:          1226
Signing time:             Sun 26 Oct 2025 18:00:49 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:49 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:49 +0000
Files and hashes:         1: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: VzToBqY/vk9Ta66JVpF9/KlLu/JM80gbZDOg10iS2zM=)
                          2: ZGBhJljS8KnY-Xp380jYPgu_YWc.roa (hash: XaigNLjbkBWceAdjZHr6JxQ6JpZUt5een+y961cXdhI=)
                          3: eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa (hash: SbV9Jwp6gb0UYygbvF7Pu8rOJFj6ngCnppNVj1jujp0=)
                          4: rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa (hash: R4Ngvgh5fuVLcZ/zh+Z03ttWp7anw1RKceB2P7tYlDo=)
                          5: ykZMTFlSJCE6g1HQBFJEj0yh9lE.roa (hash: yTgovZsEnOISpJIgzu2owD01yBh+ryJFnZun9TCD92w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ae:1a:aa:54:c5:4f:d6:c6:d6:b3:24:a9:65:1e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
        Validity
            Not Before: Oct 26 18:00:49 2025 GMT
            Not After : Oct 27 18:00:49 2025 GMT
        Subject: CN=8d6dabfc692e06b8b194c82cf45de19780a3a9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:87:5d:1c:ab:fe:34:4c:f4:5d:f4:30:c9:
                    70:c0:28:db:f5:7d:b7:f0:dc:67:85:7b:48:1b:81:
                    db:b0:8f:b8:d1:5b:50:3c:77:65:1d:4c:d8:ae:cb:
                    02:3a:99:25:e6:14:f8:ff:3c:7e:9b:9f:2a:31:5e:
                    a9:1b:97:a5:88:43:32:b7:56:38:ee:1a:b2:69:5a:
                    d2:6c:b0:68:14:cf:4b:97:cc:0a:64:26:c4:23:f8:
                    00:3d:0e:7a:e6:5a:09:5c:7a:39:78:37:79:3c:d9:
                    9e:2e:80:01:63:f8:2a:5e:86:90:6d:fe:8b:30:b2:
                    8d:f3:89:20:71:3f:a2:87:3d:f8:51:59:59:b6:39:
                    96:88:29:90:87:97:09:7a:9d:18:e6:e1:85:74:dd:
                    ac:ca:57:2a:05:01:34:65:bc:16:3a:24:60:a1:aa:
                    cf:4a:18:3c:7d:f3:ff:62:aa:83:3f:8a:3c:03:d3:
                    7e:41:a7:e8:b2:8c:0c:9a:39:12:82:36:79:43:67:
                    ef:c6:dc:56:ed:bb:7a:9a:2a:e1:c9:dd:cd:e2:86:
                    b7:d8:ad:92:77:f5:f9:bf:8e:51:b0:19:61:54:a1:
                    3c:89:27:ad:b4:c0:18:69:e6:49:da:61:0b:f1:b5:
                    dd:aa:5c:fe:73:0d:e6:6c:d3:1a:1a:a6:8a:bd:58:
                    5b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6D:AB:FC:69:2E:06:B8:B1:94:C8:2C:F4:5D:E1:97:80:A3:A9:B4
            X509v3 Authority Key Identifier:
                keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:d1:2c:94:d4:84:25:9f:9b:c7:47:e8:44:9f:9d:cb:24:
         9f:69:2b:a9:3a:39:ea:32:69:bc:96:ad:7d:aa:be:6f:11:0e:
         8d:40:73:98:1a:e4:df:ea:3a:b5:65:f0:b4:14:26:4d:59:6d:
         55:a4:aa:df:1e:e6:8a:b7:49:9b:5b:fc:79:4b:a4:32:fb:4a:
         57:0f:7c:9e:4d:62:1a:e3:c6:bf:f0:49:8e:90:cb:d1:b8:bc:
         d4:a9:6b:85:a3:34:9c:62:93:1d:fa:49:45:3f:24:cd:8b:6f:
         31:e7:79:67:67:ff:f7:a4:b2:9a:35:43:54:bc:f5:c2:e0:9b:
         dc:ba:54:ff:16:d1:3f:55:f9:80:f5:a0:e0:98:67:43:34:50:
         84:b8:6b:65:8a:88:60:d3:91:03:74:23:b9:d3:17:35:0a:bd:
         bc:b3:4e:33:be:e5:b6:47:ee:6a:25:13:18:cf:5a:5a:dc:a5:
         28:21:d2:f6:fa:93:a3:3e:48:f2:8b:6d:79:2a:87:76:d7:18:
         23:b1:09:65:73:91:18:8c:cb:1a:49:88:75:7a:b4:a8:90:26:
         f3:ba:8d:ef:45:9c:6d:6c:12:c2:ec:01:cd:90:39:67:c4:17:
         28:8d:9d:ff:e8:01:83:89:0a:59:10:a3:32:37:e8:ce:b2:9a:
         fc:ff:4b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:39 2025 by rpki-client