Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
File:                     JMltOG189ZqZDTmU8N-Ek9_KSbM.mft (raw, json)
Hash identifier:          THc5CflJZH3SUIs5x/BPrqHdI4SZ9ldUVzbuHQ4WVt4=
Subject key identifier:   1C:88:3F:1C:AF:AF:5F:A3:1B:71:1E:00:D3:1F:7A:2F:78:40:2D:E4
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Certificate issuer:       /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial:       019A725CD3ACACD996D0DDEAB94D9B4A6C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
Manifest number:          0199
Signing time:             Tue 11 Nov 2025 10:01:17 +0000
Manifest this update:     Tue 11 Nov 2025 10:01:17 +0000
Manifest next update:     Wed 12 Nov 2025 10:01:17 +0000
Files and hashes:         1: 1-hKq9wb4D_GY_fnZO_c_s4LLEX0.roa (hash: GBxwWVnB/Rc6j+xa3+zoxw/YNpQwaqrDeItK1vr3xY4=)
                          2: JMltOG189ZqZDTmU8N-Ek9_KSbM.crl (hash: GVez0NjHbYmOS9dblVNTrASlBEa2C/eG5uPwhukvhDw=)
                          3: TOkxEOih0AWVPHi1e8WKWrt7QXA.roa (hash: dzQs5/UcI04rskBqMhv8VF3TcibwTWfajt/YKT8d1pQ=)
                          4: eutcB4XE0eEM4eyxFjMyU9Wtcsk.roa (hash: lAwc3uWm+AaQ5JvjoDVtmKeHt76LzcXeYzYWfm4Odtk=)
                          5: jZbpJpit-Lsd4dvBv-eijT1tPzY.roa (hash: 4vmUiP1P84jE5ddsRzTqHbpq5+SB2pApAR6uzAQoPmA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:5c:d3:ac:ac:d9:96:d0:dd:ea:b9:4d:9b:4a:6c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
        Validity
            Not Before: Nov 11 10:01:17 2025 GMT
            Not After : Nov 12 10:01:17 2025 GMT
        Subject: CN=1c883f1cafaf5fa31b711e00d31f7a2f78402de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:ff:51:97:66:bc:bb:46:81:41:4d:01:d4:
                    3e:c6:4c:7e:34:35:43:fc:95:2a:f6:91:3a:f9:46:
                    47:8b:7b:ad:dc:19:14:e4:90:80:73:84:26:65:e6:
                    2d:50:9b:7b:3a:3e:e3:85:a9:af:14:de:9a:86:27:
                    b9:ed:18:40:8d:b3:9c:69:3d:f9:e2:71:da:52:ef:
                    8e:da:9a:57:ff:92:f1:fa:1e:8f:0d:24:31:72:66:
                    d1:04:45:e9:69:34:c6:09:df:90:16:21:2e:53:19:
                    eb:3c:cb:6a:3d:8d:01:e1:1d:a5:10:1c:1f:99:e7:
                    af:84:fd:a3:80:7a:31:6f:9d:46:06:c8:09:64:b1:
                    36:01:e6:fc:9c:28:4f:a2:6e:83:4a:4c:88:7a:cb:
                    70:65:04:db:99:b6:20:ce:f2:58:7c:fa:03:05:c3:
                    28:f2:d5:67:a8:6c:f0:02:ed:9b:86:40:37:50:a0:
                    b4:24:b9:61:c3:06:f4:26:e7:b5:13:bd:6f:fa:61:
                    a9:fa:86:7e:d8:24:ef:43:10:aa:ce:0a:5f:58:82:
                    c0:01:ce:d5:4d:5b:67:79:71:83:7f:84:1a:6f:88:
                    c1:55:00:4a:0e:70:34:f6:3b:ca:07:93:d4:62:10:
                    1c:b0:29:83:f7:dd:59:73:6f:11:0f:8f:b3:46:c6:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:88:3F:1C:AF:AF:5F:A3:1B:71:1E:00:D3:1F:7A:2F:78:40:2D:E4
            X509v3 Authority Key Identifier:
                keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a6:97:40:b9:58:ae:37:32:ff:f7:e8:44:09:0a:33:5c:2f:
         59:ff:1b:03:6b:d6:2d:b9:35:d9:ea:85:7a:95:66:f3:de:93:
         7e:69:ad:43:b8:88:cb:23:2e:b6:24:d5:11:db:31:32:dd:81:
         81:4e:09:ab:2b:3a:89:90:02:cb:0a:f0:76:3b:d1:fd:68:73:
         e9:ad:7f:f4:0b:40:b6:aa:9a:33:f9:fc:64:2c:21:6f:3f:fd:
         28:39:14:e2:f0:8d:9e:e5:2f:54:2a:61:31:3b:00:b4:e9:49:
         b2:a6:47:ae:63:31:f7:36:80:59:3d:06:b2:3d:1e:55:d7:07:
         11:f4:2c:12:4a:08:c2:7f:8c:3e:ba:9e:d6:00:ef:a5:4c:ac:
         e6:63:21:b3:f4:c3:a4:af:c5:4a:2e:b8:92:4f:e6:fe:57:fa:
         18:f4:54:84:23:88:ff:01:4d:13:cf:d5:19:69:f7:70:c7:c4:
         94:04:e3:62:50:62:fa:fa:3f:8b:f4:0a:c5:f0:a7:54:36:8a:
         eb:72:89:9f:50:44:e6:3f:37:50:a5:82:29:48:6e:be:b8:be:
         46:ac:6a:97:f4:56:97:0e:66:c2:18:f5:f0:f1:76:b1:1b:0c:
         87:f4:95:5d:69:11:9a:c9:63:ce:8f:00:18:5a:b1:4e:97:04:
         94:07:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:46 2025 by rpki-client