Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File:                     jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier:          m5246OC3Xwjzne1UOYHCsri7UgMJUAlNAA0eGYV1Gv8=
Subject key identifier:   8A:D0:34:BA:B6:2A:4B:58:7F:B8:85:2B:0C:D1:A2:5A:85:3E:DE:76
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer:       /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial:       019A51199D608BEDB708C79870ADCBD614B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number:          16A1
Signing time:             Tue 04 Nov 2025 23:00:24 +0000
Manifest this update:     Tue 04 Nov 2025 23:00:24 +0000
Manifest next update:     Wed 05 Nov 2025 23:00:24 +0000
Files and hashes:         1: 5fSz0gTL93bDKbRX7UB399KTqWo.roa (hash: ZekzmLJCJyI/RlrN5lYEw3o4UXuAl+RnUA/jnalWWzw=)
                          2: QEmXwsIj7ueEdKdwPu44tosMpfM.roa (hash: 2lzHt7XOAfmu9gjrRW7d2O3LPWtVfpw+P41EhC9URe8=)
                          3: bce44foTbAKg3tHOJ0Qgt1xOcf8.roa (hash: F4bF540q8PJ+GpaHKowNj8adXBg7SShvDYJVRvSviDg=)
                          4: dNxBOY3fJxweU0pOsjJMTtBxibI.roa (hash: +7/ZxVutYTL6jT8ak+OBnFIC5cdnfh0cuZkYLSLo+Fg=)
                          5: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: cXMSFfq2qidjtP7UPkcHvENKMl+pjmBZiHrgt8j/+kY=)
                          6: zEt70xhNCNspyv0BGLFGKL4d_Fo.roa (hash: NlwMM676+ehPCudhUDq8LrrGW5swFBYUpzUKu5v1ls8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:19:9d:60:8b:ed:b7:08:c7:98:70:ad:cb:d6:14:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
        Validity
            Not Before: Nov  4 23:00:24 2025 GMT
            Not After : Nov  5 23:00:24 2025 GMT
        Subject: CN=8ad034bab62a4b587fb8852b0cd1a25a853ede76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:67:1b:06:de:06:97:da:4b:b1:69:ad:a7:
                    ef:70:98:6e:a5:33:1a:04:eb:16:e7:db:ea:88:60:
                    ab:be:ae:9c:42:aa:5b:cf:41:bd:fd:a3:a0:d4:6b:
                    cc:0e:e3:63:80:e0:ea:41:a7:f4:e3:1d:67:1e:d1:
                    a4:13:ab:0e:3a:69:b0:ea:65:e7:da:38:88:db:8a:
                    01:b4:20:6a:b5:fe:a8:65:dd:72:e2:c6:e4:8a:92:
                    ba:f4:94:c3:5b:c3:30:7c:20:9f:be:41:cb:c8:b0:
                    5d:d8:6f:eb:1a:a3:ba:45:db:95:4b:43:04:c3:23:
                    0b:ac:bc:23:e4:4b:6f:da:f7:a7:51:ee:57:e6:78:
                    0d:6c:7b:bb:1a:03:7b:4b:fc:e0:84:82:37:78:1d:
                    37:36:93:c2:08:a0:df:bf:87:60:25:48:cb:dc:13:
                    81:7d:6c:d1:e0:f4:63:21:44:30:31:01:8b:79:aa:
                    34:a3:12:a4:03:cf:af:8f:c3:8c:65:9c:d6:71:57:
                    e6:5b:f0:ed:63:0e:1d:96:3a:9c:68:ab:ea:fb:b2:
                    8a:53:54:ce:4e:9f:8d:97:64:9c:a8:98:e9:f7:47:
                    73:0b:9d:7f:d8:9f:31:66:cc:d7:a3:19:c3:07:8e:
                    55:52:1a:c4:86:e6:45:fa:6d:c7:00:37:64:f9:e1:
                    b5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D0:34:BA:B6:2A:4B:58:7F:B8:85:2B:0C:D1:A2:5A:85:3E:DE:76
            X509v3 Authority Key Identifier:
                keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ca:9b:a3:ea:7c:01:86:09:06:6f:a1:10:50:8f:a1:1e:1e:
         12:b7:b7:1e:78:65:56:88:c6:84:78:9b:cc:c6:69:9f:e2:39:
         a5:40:63:55:0d:51:a6:37:f6:0e:c9:2f:a3:d9:64:88:2f:19:
         a0:77:c3:be:50:1f:14:27:7b:11:09:13:e3:40:00:c3:5e:a3:
         fe:2b:1b:2d:ba:8c:b5:52:ed:db:16:0b:c3:17:52:de:46:c8:
         36:ca:e5:81:5a:b0:93:cb:a5:bd:3d:ff:f1:70:54:68:b3:a6:
         09:d0:31:b3:01:27:1e:7f:02:af:99:6d:eb:40:2b:59:05:7c:
         37:2f:48:b3:37:86:7a:b1:d9:8c:88:65:9c:67:9f:75:f6:72:
         4a:37:12:a4:11:6b:93:6a:4a:e0:1e:61:c6:b8:1f:58:57:60:
         b3:8d:e1:73:9d:ed:61:b5:3b:04:3f:bc:b6:6e:3b:d9:46:96:
         ee:8d:7c:bb:ec:23:b4:33:c0:8a:b0:7f:06:80:06:83:3a:59:
         ab:3b:17:26:ef:58:7c:df:fc:c9:bd:55:ea:17:d2:e3:f9:6c:
         88:be:93:96:05:8e:20:e4:93:7d:1b:fd:90:fa:f6:c5:14:f3:
         25:57:d4:51:57:12:42:19:de:71:d8:ab:9d:36:0a:4b:f6:26:
         16:92:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:21:29 2025 by rpki-client