Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
File:                     5NU8R_Id1mUrZ_70lclP39FSjOs.mft (raw, json)
Hash identifier:          Gw2IbYrYGbrz/szqrvQ9sQ0S54Ahy8NhxYYCQ5dS3l4=
Subject key identifier:   8C:B4:4F:8B:86:C6:1A:CD:05:94:93:13:A2:89:88:D4:9F:F5:CB:8D
Authority key identifier: E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB
Certificate issuer:       /CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
Certificate serial:       0199FA6A76E9C29E6995D409E7F64394629D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
Manifest number:          8B
Signing time:             Sun 19 Oct 2025 03:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:45 +0000
Files and hashes:         1: 5NU8R_Id1mUrZ_70lclP39FSjOs.crl (hash: qnev0hL/qfz5ySCmxCQsBd1tDIdAfAZ9rdihID3oZDw=)
                          2: PrRGaFLPXBxBYOXraz8nx2Zv-Uo.roa (hash: d4brDjq0VND/Iy+6ZmnnMFSJxquKernTk88xGtm16DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:76:e9:c2:9e:69:95:d4:09:e7:f6:43:94:62:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d53c47f21dd6652b67fef495c94fdfd1528ceb
        Validity
            Not Before: Oct 19 03:01:45 2025 GMT
            Not After : Oct 20 03:01:45 2025 GMT
        Subject: CN=8cb44f8b86c61acd05949313a28988d49ff5cb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:07:b7:14:32:a0:9b:88:02:d5:4b:9d:ba:
                    59:e2:d1:42:59:b2:e2:04:d4:f6:c0:43:a4:5a:97:
                    15:e5:5e:f0:d9:f8:30:11:35:be:b7:d5:00:47:e3:
                    ed:72:46:68:0d:9b:04:f7:ad:14:2f:c6:e9:f8:4d:
                    ba:01:9d:d9:e2:dc:23:3f:e8:1a:49:d8:c2:3e:c0:
                    31:04:03:a5:9d:b1:9c:a9:5c:26:29:6e:66:93:98:
                    34:33:69:64:7c:b6:c3:f8:89:25:16:78:8c:fc:7a:
                    35:2a:4a:65:6d:a7:54:fe:68:de:22:e9:2e:41:82:
                    fc:c2:60:cf:fc:4f:07:b7:f3:d3:65:91:72:8f:5f:
                    49:46:0c:da:f0:37:f7:3e:9f:bd:bf:1c:bc:8e:88:
                    4e:38:c6:bd:28:e3:19:40:ad:72:b7:82:ff:36:2c:
                    01:37:00:76:f7:06:db:eb:5b:90:c0:f0:b0:2e:16:
                    51:52:06:ee:69:41:7a:b8:30:db:e5:9d:db:38:cb:
                    0f:36:bf:e6:c0:76:af:f7:93:03:64:92:30:47:48:
                    76:8c:1d:5c:1a:4c:65:c7:90:fa:d1:95:e7:01:67:
                    8a:7b:c2:9b:ff:32:aa:cc:cd:39:a5:ce:7b:a0:90:
                    2c:1a:af:e7:60:da:ef:a7:34:8d:ac:b2:96:92:e3:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B4:4F:8B:86:C6:1A:CD:05:94:93:13:A2:89:88:D4:9F:F5:CB:8D
            X509v3 Authority Key Identifier:
                keyid:E4:D5:3C:47:F2:1D:D6:65:2B:67:FE:F4:95:C9:4F:DF:D1:52:8C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NU8R_Id1mUrZ_70lclP39FSjOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d66af3-28b5-42eb-ad01-95d53b531545/1/5NU8R_Id1mUrZ_70lclP39FSjOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5c:29:1e:6f:48:ed:27:60:44:90:4c:b6:9d:a5:bc:16:c0:
         0c:d0:45:06:0f:4c:c2:20:d2:69:54:91:21:10:e8:11:eb:ea:
         b9:80:9d:f5:94:7a:cf:ee:90:1f:63:6c:6d:d7:0d:a1:ae:a5:
         b1:67:27:23:3b:e2:40:08:6a:fc:4b:f2:7a:d4:b8:e5:b2:4f:
         42:96:55:76:ab:fc:69:0f:5f:10:81:9f:e7:c9:15:33:49:e5:
         25:b5:9e:41:d4:59:58:31:7a:67:2d:94:bd:0c:b9:c4:a0:d2:
         21:19:3c:00:e6:86:04:cf:64:f8:de:87:59:d8:11:cb:67:35:
         78:80:88:32:4d:02:3c:2c:c2:48:bf:82:46:7d:77:b4:65:98:
         8b:80:f5:6d:8d:e1:02:d2:4a:20:97:77:e0:a4:ad:1d:00:1a:
         66:4d:5d:ef:3a:03:80:76:7f:c6:b8:eb:f9:87:e8:4f:b2:30:
         bc:41:7e:54:80:a2:5a:32:ab:94:1a:0c:74:c1:60:ec:70:23:
         14:c7:6f:ed:d9:1c:bd:68:8c:c7:96:f8:cf:4b:e2:3c:f4:68:
         5e:7e:9f:83:43:78:5a:1b:1a:d0:f1:cb:f7:15:4d:08:18:18:
         8f:bf:e0:25:63:28:61:4e:23:f5:12:0c:9c:55:ef:2a:de:ed:
         3d:99:b9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:46 2025 by rpki-client