Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
File:                     jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json)
Hash identifier:          F7nliRVVHd2s8pBjvUhWlRVaM0GSjD7oprmAGtmn8CQ=
Subject key identifier:   18:C6:F4:14:DD:65:70:58:38:EA:D2:2D:55:0C:41:95:F4:8E:E4:32
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Certificate issuer:       /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial:       019A4F2B2401699BC396D0D7AD4FDD53FE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
Manifest number:          1714
Signing time:             Tue 04 Nov 2025 14:00:18 +0000
Manifest this update:     Tue 04 Nov 2025 14:00:18 +0000
Manifest next update:     Wed 05 Nov 2025 14:00:18 +0000
Files and hashes:         1: XKepb_otZzL7k3ZMkl3G2IMgCSU.roa (hash: W9mkN91xRU3+fkW8j4EQwJJwcHraAc/r3I+DAJzdLtk=)
                          2: djrv_KaGCDUK_H0rgzzTkvu3xjk.roa (hash: Q78jKZVQp91Q5Wd8YBTF+3592+S1nmxVdme1CKTgnIM=)
                          3: f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa (hash: EtfvCVNkvIMaBjs3btihMYeczz7+WNuxXv7JAgL/tcs=)
                          4: iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa (hash: IaAKm54QKxYLazRG6lIcABBh26piQgK4yLfNw8crUL0=)
                          5: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: wSWGsBRyCVZiFTTmrTdoCh/jdMChwfmAwuL78ZRD7yI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:2b:24:01:69:9b:c3:96:d0:d7:ad:4f:dd:53:fe:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
        Validity
            Not Before: Nov  4 14:00:18 2025 GMT
            Not After : Nov  5 14:00:18 2025 GMT
        Subject: CN=18c6f414dd65705838ead22d550c4195f48ee432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:e0:f0:6e:c4:fb:08:43:f2:aa:c9:ef:46:
                    b1:70:3d:b4:04:14:49:af:29:c3:2a:11:e0:c0:d7:
                    2f:a5:0c:f6:ee:d0:2f:fb:61:d6:e5:a6:db:ae:40:
                    04:5d:d6:e0:ba:fc:f8:66:2f:d8:2d:76:8a:a1:95:
                    04:ad:85:ce:6c:3e:50:a4:59:f5:65:13:0a:53:ef:
                    27:85:91:50:18:25:5b:1d:d3:67:19:13:a6:6e:02:
                    44:ef:ae:e0:7a:86:d0:a6:ef:81:52:2a:05:26:32:
                    50:5c:ac:93:19:23:3f:d7:28:0e:02:82:38:de:39:
                    0b:9e:d8:c4:4f:b9:87:21:40:b1:43:6d:da:31:66:
                    8e:6f:42:a6:ef:8a:45:9e:42:ce:4e:38:fb:ef:23:
                    00:9d:60:09:88:cf:64:eb:a5:a4:97:24:01:ca:7e:
                    63:c3:07:b5:f4:2b:12:44:82:ca:f7:7c:85:24:bc:
                    2e:5a:e7:80:95:f6:97:03:57:86:1e:fc:3e:5c:cf:
                    77:cf:99:f2:41:40:f4:80:7f:c8:41:eb:7a:22:2a:
                    19:3c:ed:4a:ff:15:55:7a:a3:7d:b0:10:f9:ae:94:
                    d3:70:ae:c0:8f:20:ba:40:36:9d:d4:69:6d:6e:d2:
                    df:32:8b:47:9f:14:95:98:f3:9b:07:8c:32:d4:9c:
                    64:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C6:F4:14:DD:65:70:58:38:EA:D2:2D:55:0C:41:95:F4:8E:E4:32
            X509v3 Authority Key Identifier:
                keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fd:2e:8e:1a:60:c8:10:a3:bf:87:9d:b8:86:a5:0d:47:4d:
         0f:3c:36:c4:8b:48:28:93:74:49:69:09:3c:6e:73:25:03:82:
         49:20:5d:ce:40:ac:09:a9:cb:26:2e:fb:45:b1:5b:c3:a2:85:
         ca:70:3d:d1:55:56:ed:f3:d7:2e:0d:9f:24:a9:7e:8c:e5:77:
         a9:8f:6d:2a:06:5c:1f:9f:b2:1b:5b:f4:9e:46:db:04:f1:9c:
         77:7d:64:83:1a:51:42:94:7e:68:13:9b:77:3c:a7:7e:cf:4b:
         95:d2:d8:ce:87:4f:8a:0a:f8:26:73:b8:cd:c7:2b:c2:fe:ed:
         53:e4:fb:ad:66:48:95:98:c2:5a:00:90:e3:4f:1d:ce:b5:53:
         39:0c:40:0d:d0:0d:d9:1a:31:9e:eb:f4:23:bc:88:c9:36:a8:
         5b:a8:c7:ab:cf:4c:3a:c9:b7:a3:62:50:57:d0:29:36:cc:24:
         f3:93:81:3f:1b:96:7f:12:41:5d:88:69:fa:36:e3:50:32:b8:
         18:8d:cb:2a:08:84:98:19:55:a9:82:2f:7a:6b:5f:be:60:04:
         1b:05:6a:d8:7e:c1:ef:55:80:ff:85:eb:de:0d:fd:64:ad:13:
         e0:92:83:e4:7b:0f:68:90:ac:60:34:ed:39:93:7e:67:f2:6f:
         c3:48:af:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:21 2025 by rpki-client