Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File:                     jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier:          HF/SnjkBdfi9f2agbMAvlVqeoxxYOLnwJb1ghB6F64s=
Subject key identifier:   8F:C3:60:0A:FB:CB:52:BC:9E:47:FB:08:DD:71:BA:A3:E2:F2:93:6F
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer:       /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial:       019A1F51CE08D3C5827CFAD810D3062AF21B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number:          1513
Signing time:             Sun 26 Oct 2025 07:00:46 +0000
Manifest this update:     Sun 26 Oct 2025 07:00:46 +0000
Manifest next update:     Mon 27 Oct 2025 07:00:46 +0000
Files and hashes:         1: a4jmgoHAnwZuKpBvCe6_TzZv-rI.roa (hash: DuE1nvAiok4keI6ublPx26acQpOfZSVKC03Q+UriaBA=)
                          2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: 68JjiqQ4HQ8gmS1yDF3CbtOC05I7BuW4TyDsil01PKw=)
                          3: m8BwxDuDoDpqepSxNOe4PWRnwWA.roa (hash: wqJvfAGbMX1FIx3XIaje+6sP8sBLm02nJ68mci0WFSM=)
                          4: yYEpZx4q82Ymw9t0wiOXpB_AlDQ.roa (hash: pgogIbAdU/13yH4euTSW5RZYVGro+x32PTlceGEMzUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 05:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:51:ce:08:d3:c5:82:7c:fa:d8:10:d3:06:2a:f2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
        Validity
            Not Before: Oct 26 07:00:46 2025 GMT
            Not After : Oct 27 07:00:46 2025 GMT
        Subject: CN=8fc3600afbcb52bc9e47fb08dd71baa3e2f2936f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:69:83:0a:63:1e:4f:d3:46:6e:01:1a:81:
                    c1:33:4d:fe:46:2c:da:87:72:be:57:f5:67:fd:f4:
                    1c:62:31:31:e8:36:9f:a3:86:86:8d:cd:90:fe:54:
                    44:4e:b1:25:81:8c:2b:d8:02:1a:ef:06:4c:04:67:
                    72:4a:9f:30:13:ee:01:3f:13:42:64:46:1a:2e:06:
                    20:91:9f:b4:ed:79:07:e2:ab:8a:f0:f9:cd:c9:e5:
                    21:34:96:59:32:3c:24:57:e8:2e:1a:11:63:d6:ac:
                    d4:f3:61:ae:3b:06:1e:56:9b:b1:ae:c1:a2:a4:a1:
                    3a:c8:2e:79:33:90:34:25:bb:be:0c:c9:e6:f6:1f:
                    13:22:14:91:84:0e:22:21:d1:fe:7b:a9:97:63:73:
                    e2:e1:6e:7c:8f:e4:b4:9a:b7:b4:be:03:53:d7:bc:
                    b1:5f:04:8a:12:45:b0:2d:16:06:2b:a1:9a:49:83:
                    90:bc:49:1e:5f:8e:b2:c0:86:be:a9:02:cb:18:d0:
                    a6:d1:cc:72:fa:89:ae:66:82:6a:65:fd:59:a3:e4:
                    c0:d7:6b:20:98:16:11:3a:06:6d:ff:2f:80:fb:34:
                    3a:20:6f:6c:3d:af:66:3d:92:d8:3e:d2:29:a0:e5:
                    c8:09:e9:a1:6d:b3:b5:f7:2c:b9:b4:b6:8c:88:76:
                    40:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C3:60:0A:FB:CB:52:BC:9E:47:FB:08:DD:71:BA:A3:E2:F2:93:6F
            X509v3 Authority Key Identifier:
                keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:c1:e9:d3:cd:43:0e:bb:29:37:8e:31:02:9a:0a:4e:95:
         10:e4:c0:4e:b3:90:9d:da:68:48:5c:9f:95:f7:75:2b:c9:e8:
         a3:53:20:b5:4a:9e:d4:56:4f:54:47:4f:84:a1:cb:45:6b:73:
         fd:0e:95:69:5b:0d:27:fe:52:61:f3:7d:b8:c9:e9:2b:04:de:
         57:38:9a:70:cd:0d:1e:36:9b:5d:31:cd:15:35:73:7e:ef:be:
         e1:00:23:5b:28:ac:4f:bd:b2:7e:1d:89:49:0a:10:56:22:f0:
         87:df:40:a8:3e:0f:4e:c8:93:75:4a:18:59:55:56:44:72:10:
         8c:1e:88:84:21:f8:f1:69:c1:84:cc:5a:a4:63:27:a5:f4:1b:
         85:b4:74:8e:b3:4a:22:d1:12:16:5d:fd:78:5f:30:7e:0c:b8:
         0c:9a:3b:d2:32:32:85:64:da:8b:b0:d3:12:59:ab:1f:f4:98:
         0f:34:05:08:dc:f1:2b:26:87:27:f0:a1:5d:91:0a:2a:b0:f2:
         87:24:1b:01:65:4c:dc:3c:41:e2:76:af:fd:fd:79:a1:b0:36:
         4f:71:83:68:ff:67:03:eb:b0:75:81:90:f2:0d:e7:79:35:d1:
         e5:55:41:ab:49:3e:25:2e:78:c5:28:34:04:2a:02:b3:fa:2d:
         ee:40:c0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:03:26 2025 by rpki-client