Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File:                     5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier:          TfZXtX8yYYPzIzd4evhaqrVzXrl5l/H8bpRJ1ZW9vso=
Subject key identifier:   65:EF:F2:6D:80:2A:1D:CA:02:2B:B2:16:98:87:49:BC:10:DE:68:A3
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer:       /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial:       0199FD34627CFE37F92FB511DBD3B5FF983F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number:          08A6
Signing time:             Sun 19 Oct 2025 16:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:32 +0000
Files and hashes:         1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: PYtm4tLfcOxjMFJ4Fz8S3jN2XPpVnAO7aBLPkljVAlE=)
                          2: UsysYH87_MeusDVf_2VMl6ZiNoA.roa (hash: l/efuOvavvhLwF5l7zidaNvIJhmEgoHAGGzbipbPPZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:62:7c:fe:37:f9:2f:b5:11:db:d3:b5:ff:98:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
        Validity
            Not Before: Oct 19 16:01:32 2025 GMT
            Not After : Oct 20 16:01:32 2025 GMT
        Subject: CN=65eff26d802a1dca022bb216988749bc10de68a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:29:20:9c:4d:dc:90:70:70:78:d5:8a:43:27:
                    02:97:37:e4:6f:84:e6:66:5c:dd:d2:8a:90:74:e9:
                    28:ef:db:d6:79:c2:e1:69:0a:9f:df:63:d9:f5:09:
                    ef:1c:76:27:c4:dd:e3:47:84:f4:78:f8:cf:b2:88:
                    d6:e1:06:f8:e5:f7:5e:53:65:d6:10:95:07:d9:f0:
                    41:31:8a:f3:86:ee:ec:54:22:43:44:bd:6c:bb:54:
                    95:5f:9e:d9:d3:9e:04:c5:6f:47:09:93:43:f9:30:
                    41:b5:f8:18:6d:34:f2:35:78:4b:25:71:c3:90:28:
                    3b:99:67:7e:95:4c:2c:86:6a:2a:03:28:13:a9:e6:
                    d3:dc:2f:0f:7c:b8:14:28:16:47:4b:d4:79:65:3c:
                    12:7b:e0:c4:e3:d1:25:ce:d6:bd:02:9b:31:72:2a:
                    c1:e1:63:a3:aa:10:72:a5:6c:dc:b5:ec:f6:42:8e:
                    65:00:8d:bb:e4:43:11:1c:b9:63:48:f6:cc:a9:55:
                    5b:6e:13:e9:7e:7e:47:6a:f4:4a:33:f2:83:88:91:
                    df:9c:5f:58:50:63:5c:13:20:0f:27:ff:c6:78:b8:
                    3c:0d:9a:24:6f:2c:59:5b:aa:74:8e:d0:44:80:87:
                    d2:e0:ac:57:43:b7:30:da:59:94:5a:05:15:03:4b:
                    9d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EF:F2:6D:80:2A:1D:CA:02:2B:B2:16:98:87:49:BC:10:DE:68:A3
            X509v3 Authority Key Identifier:
                keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:02:5f:58:de:6b:f2:7e:9d:31:67:32:81:94:ee:58:8c:66:
         25:4b:89:6e:2e:40:c8:81:19:f1:8b:c5:d9:d5:07:c0:7c:6c:
         69:27:c9:e9:b1:98:be:d3:82:e6:92:6d:da:38:27:16:fa:96:
         40:cb:33:a2:19:4c:a0:e9:2d:80:ba:dc:90:d9:ef:eb:d7:cc:
         80:e9:9e:02:85:52:f1:ea:b5:fd:f4:50:cd:fe:1d:12:4b:bd:
         74:90:e8:16:61:79:0e:4a:c6:42:85:6e:96:34:42:74:a0:5b:
         3e:41:b9:be:0f:52:f6:55:08:02:d8:5d:2c:e0:e8:f3:b2:58:
         5f:6e:27:a7:44:23:ec:45:b5:fc:98:e6:8b:d0:1f:d7:42:3a:
         f7:a9:d1:4a:c9:e9:53:9c:0e:28:35:fc:e7:63:98:db:f9:d9:
         ff:80:10:78:fa:0e:8c:f9:41:16:31:00:74:06:f0:93:d7:31:
         40:eb:76:a2:84:71:12:3b:6b:50:60:b8:88:b2:a1:6b:f9:4f:
         97:42:7b:49:e0:7d:c0:6b:9d:af:a1:90:af:78:2f:35:cb:ef:
         24:5d:23:fd:cc:ad:ce:a6:1d:5d:e0:73:6e:54:be:63:bd:3e:
         52:25:83:10:c6:e3:70:bf:63:2e:40:79:bb:0c:52:82:9b:c1:
         ef:da:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:17 2025 by rpki-client