Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File:                     Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier:          OoPi//qET5n67BEp0glDat+d0iAKufRccwWPb87I/n8=
Subject key identifier:   7F:71:18:42:25:13:CD:9A:54:30:6F:1A:17:1E:58:51:9E:94:47:EF
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer:       /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial:       019A50E412AE28356D5256514C529623BFED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number:          0185
Signing time:             Tue 04 Nov 2025 22:01:55 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:55 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:55 +0000
Files and hashes:         1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: dQaTebBTam4G1ZCJnMGbhzGybGjt67QyFIrI6YvdNxY=)
                          2: METktZ2idAiZeDz9hpktU55-5Jw.roa (hash: nKbFLY3xUJE/BDnG472RqLje6LdE93p8++xFwpMJxhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e4:12:ae:28:35:6d:52:56:51:4c:52:96:23:bf:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
        Validity
            Not Before: Nov  4 22:01:55 2025 GMT
            Not After : Nov  5 22:01:55 2025 GMT
        Subject: CN=7f7118422513cd9a54306f1a171e58519e9447ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:6f:93:be:65:ce:e3:eb:69:81:08:73:eb:
                    23:a9:ee:4a:9c:2e:82:16:d8:6e:68:00:92:f8:1f:
                    a7:55:20:9f:a2:4d:7f:5e:e9:ff:3e:da:ea:31:88:
                    f4:50:a7:0b:e5:88:e5:e5:ff:51:9c:ea:17:3a:f1:
                    29:44:55:1d:b5:1f:03:5a:26:fa:ed:2f:7e:66:96:
                    20:19:fe:2f:ba:f8:a5:60:70:60:79:7c:b6:eb:6b:
                    bd:ae:7d:96:fc:94:57:57:62:79:51:17:19:3f:98:
                    e3:25:38:6e:c6:ef:2f:e4:b2:6e:d7:91:d5:b4:4b:
                    9a:a2:4c:8f:79:55:e8:7f:d3:67:c4:cc:39:b7:8e:
                    59:73:04:9b:b5:63:fc:61:1c:c4:e8:93:61:b1:70:
                    1e:89:75:6d:4f:ee:67:89:98:73:7d:85:5e:2d:f8:
                    b5:87:b8:5c:21:aa:d1:81:05:50:07:c5:63:63:dd:
                    89:11:15:b2:4d:5f:03:40:ec:90:91:0c:87:6e:32:
                    9b:6d:40:a8:f6:c7:4d:c8:b8:69:81:9e:6c:e4:14:
                    69:71:07:7b:98:10:50:4b:a6:5a:d1:c5:3e:98:be:
                    23:e8:3f:f0:22:30:88:c9:7f:94:82:f6:45:d0:e8:
                    60:16:ee:2e:57:5f:64:d0:a5:c9:23:5a:56:f2:92:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:71:18:42:25:13:CD:9A:54:30:6F:1A:17:1E:58:51:9E:94:47:EF
            X509v3 Authority Key Identifier:
                keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:81:93:c6:d0:9f:4d:c0:ba:6f:35:b6:93:86:86:5a:ba:fc:
         32:cb:a3:05:37:09:a5:28:0d:c3:04:5e:e6:4d:4b:9a:0a:21:
         c9:5f:5c:80:25:ac:bb:52:15:2a:00:27:e9:11:c5:1d:cc:03:
         d7:48:3c:19:27:5b:0c:23:c4:26:b8:76:2c:c5:2c:f2:b0:f2:
         1e:c7:d6:6c:70:79:ac:12:90:d8:d6:f0:4c:55:ea:9e:0e:ae:
         e0:21:18:94:85:5f:da:7e:bb:a2:cd:d8:73:d1:31:9a:46:d3:
         de:7f:c8:fd:54:37:9e:98:8d:65:2f:5e:84:2b:17:cd:72:a5:
         a4:f2:f6:73:19:d1:1b:00:bd:98:02:68:20:c9:ce:54:5c:aa:
         ed:f3:b8:e3:c6:63:e6:5c:24:df:90:8e:72:a5:7b:07:73:b2:
         82:eb:58:87:d4:d0:c8:79:9c:9c:1c:c9:6c:e9:9f:ad:60:cf:
         a8:f2:d4:fd:2d:6b:01:69:77:0e:1c:dc:ce:65:11:69:d7:d2:
         da:3d:cc:98:c3:22:96:2d:31:fd:77:30:1e:42:65:08:95:05:
         72:b7:ff:0a:1f:ea:e2:25:fa:40:b3:ee:65:7a:d2:74:e1:90:
         b0:dc:09:c3:fb:e3:a7:ce:a8:0e:5e:1f:34:b3:51:0f:dd:11:
         b8:70:52:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ5BKuKDVtUlZRTFKWI7/tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGYxMDg3Y2NkMDZlNmI0NzY0M2M0ZWJlNzhiY2NmNWYz
Y2U1ZDIwHhcNMjUxMTA0MjIwMTU1WhcNMjUxMTA1MjIwMTU1WjAzMTEwLwYDVQQD
Eyg3ZjcxMTg0MjI1MTNjZDlhNTQzMDZmMWExNzFlNTg1MTllOTQ0N2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Bvk75lzuPraYEIc+sjqe5KnC6C
FthuaACS+B+nVSCfok1/Xun/PtrqMYj0UKcL5Yjl5f9RnOoXOvEpRFUdtR8DWib6
7S9+ZpYgGf4vuvilYHBgeXy262u9rn2W/JRXV2J5URcZP5jjJThuxu8v5LJu15HV
tEuaokyPeVXof9NnxMw5t45ZcwSbtWP8YRzE6JNhsXAeiXVtT+5niZhzfYVeLfi1
h7hcIarRgQVQB8VjY92JERWyTV8DQOyQkQyHbjKbbUCo9sdNyLhpgZ5s5BRpcQd7
mBBQS6Za0cU+mL4j6D/wIjCIyX+UgvZF0OhgFu4uV19k0KXJI1pW8pJLxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9xGEIlE82aVDBvGhceWFGelEfvMB8GA1UdIwQY
MBaAFCYPEIfM0G5rR2Q8Tr54vM9fPOXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUt
MTliMTJhOTU1MDY1LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy84NTM2ODItMzAzNS00NGZiLWI3YWUtMTliMTJhOTU1MDY1
LzEvSmc4UWg4elFibXRIWkR4T3ZuaTh6MTg4NWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIGTxtCf
TcC6bzW2k4aGWrr8MsujBTcJpSgNwwRe5k1LmgohyV9cgCWsu1IVKgAn6RHFHcwD
10g8GSdbDCPEJrh2LMUs8rDyHsfWbHB5rBKQ2NbwTFXqng6u4CEYlIVf2n67os3Y
c9ExmkbT3n/I/VQ3npiNZS9ehCsXzXKlpPL2cxnRGwC9mAJoIMnOVFyq7fO448Zj
5lwk35COcqV7B3OygutYh9TQyHmcnBzJbOmfrWDPqPLU/S1rAWl3DhzczmURadfS
2j3MmMMili0x/XcwHkJlCJUFcrf/Ch/q4iX6QLPuZXrSdOGQsNwJw/vjp86oDl4f
NLNRD90RuHBS7A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:20 2025 by rpki-client