Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File:                     jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier:          ajhooMsQ4PBcOEoSzhN97bNmiXZeerBw8ZMs497VHpk=
Subject key identifier:   2E:AB:06:42:D4:55:50:62:02:18:D1:60:45:74:56:EE:45:4A:B6:BD
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer:       /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial:       019A51875C4ED57303839AEDCD8F3AFA6510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number:          0781
Signing time:             Wed 05 Nov 2025 01:00:16 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:16 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:16 +0000
Files and hashes:         1: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: 8ImwPtiHJSdstehjAeeeRJZiyeDJDPLiRX849Xm7pnI=)
                          2: lHGrQ5ab4Wwh-Q0oJszTsf0BUdA.roa (hash: BJEIpPOdoxYjpK82/CR/sXoES/6zdTI5hZVWKdTDxHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:5c:4e:d5:73:03:83:9a:ed:cd:8f:3a:fa:65:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
        Validity
            Not Before: Nov  5 01:00:16 2025 GMT
            Not After : Nov  6 01:00:16 2025 GMT
        Subject: CN=2eab0642d45550620218d160457456ee454ab6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:84:18:ae:37:ca:b0:8d:1c:15:16:99:37:
                    46:b8:9a:68:86:d7:9b:b9:2b:e9:60:48:02:27:8c:
                    03:7d:2e:3c:f4:13:3e:f2:e2:59:2a:58:58:06:d2:
                    0e:c9:cb:59:f3:b2:44:2c:42:4f:c1:38:e9:61:03:
                    70:5e:d8:3a:ca:e8:a6:5d:0a:3e:43:06:a8:b9:a1:
                    a5:98:fd:55:a9:7c:d0:51:a2:86:fd:a8:61:26:04:
                    8e:9f:bb:b7:55:17:55:df:7e:16:8c:2f:71:10:0e:
                    dc:71:5a:7e:3f:1b:47:e8:1e:5f:4c:0f:3a:c2:9f:
                    98:ef:97:d5:07:96:79:d0:85:ec:46:3a:2d:f6:0c:
                    7a:b8:3a:e0:29:e6:1f:64:36:0f:69:23:80:d7:83:
                    3a:6f:33:46:e1:ab:08:4c:58:43:58:ad:67:31:0e:
                    35:36:fa:d4:1e:3c:78:2a:c1:97:14:de:af:f8:b3:
                    83:ce:13:d5:29:f8:fe:79:7c:f5:77:47:8c:ee:fa:
                    dd:db:a1:05:1d:ec:ad:0f:51:f2:20:60:21:64:a5:
                    1a:09:d5:91:78:85:07:e6:bd:41:85:81:86:a5:b1:
                    3a:d4:7a:e3:ba:0a:9b:3b:48:b9:95:e9:ac:83:bd:
                    22:be:74:97:d3:8b:7e:d1:53:60:d8:b9:36:17:fa:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AB:06:42:D4:55:50:62:02:18:D1:60:45:74:56:EE:45:4A:B6:BD
            X509v3 Authority Key Identifier:
                keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:7c:58:f0:c4:90:cf:b5:0d:8d:c6:2d:2b:cf:61:9b:8a:
         a4:73:90:65:66:c1:db:0c:a5:75:9a:16:84:14:d0:18:0c:c8:
         a4:70:a0:88:a1:7f:8c:1f:ab:0f:df:6c:34:0d:6a:f3:2a:ea:
         41:32:81:65:45:4f:1b:7e:96:81:31:14:8a:5f:c3:df:c2:06:
         b9:77:71:7d:ca:e8:c6:46:9f:58:4d:54:ed:23:9d:3a:84:b8:
         1a:31:57:fc:20:23:61:43:c7:2e:35:2e:ee:55:69:61:09:02:
         55:39:83:40:41:41:4b:8e:ef:d1:62:0e:fd:55:ca:9c:61:d5:
         53:c2:72:c6:37:50:0a:d8:16:1a:5d:30:29:bf:ac:59:01:d9:
         f6:d1:37:fb:2d:46:b3:f7:b5:78:f7:ad:fb:09:e7:f4:51:07:
         73:f9:3d:25:68:28:65:70:78:47:51:ab:55:29:97:76:3e:dc:
         e0:a4:45:6b:82:dc:0c:5f:f5:cd:2d:29:2c:0d:75:50:9b:ac:
         36:46:59:ae:16:9a:e5:0c:80:af:a6:6d:43:28:14:2e:7c:a4:
         f8:c5:b7:1e:e0:bc:cc:df:5d:9e:33:b3:b7:60:7e:14:0a:fc:
         60:63:0f:f7:51:13:b1:49:4b:7f:94:6b:c2:78:5f:00:ea:c4:
         62:f5:4f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:19 2025 by rpki-client