Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
File:                     5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft (raw, json)
Hash identifier:          n8Gwput3bE4cxMzVN3EGtEBetWNxdavaFvUdXKFY/gQ=
Subject key identifier:   09:28:F1:8B:14:C4:AC:FC:AF:0E:33:FC:C5:CF:62:BA:ED:1E:5E:6D
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Certificate issuer:       /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial:       0198D660129E15F1246414AC05F2570F27A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
Manifest number:          095D
Signing time:             Sat 23 Aug 2025 10:01:17 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:17 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:17 +0000
Files and hashes:         1: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl (hash: bZ7z7375FpBJQE6vIeJyYrWm1xKokK6tfjcZY1ucBQA=)
                          2: 6xUnoc1wAnSrf2dpU2UTzibFAZU.roa (hash: tiXyyLUhxSiIfoFFtQDRMAVp44XARQDTShxLyIGBRKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:12:9e:15:f1:24:64:14:ac:05:f2:57:0f:27:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
        Validity
            Not Before: Aug 23 10:01:17 2025 GMT
            Not After : Aug 24 10:01:17 2025 GMT
        Subject: CN=0928f18b14c4acfcaf0e33fcc5cf62baed1e5e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:85:ae:05:ce:f0:0f:d7:1e:69:50:89:ab:
                    58:2a:68:9b:3f:36:f8:2b:77:cf:0b:31:19:9d:b4:
                    46:32:0d:b9:a5:e1:93:57:90:fd:9b:ed:d8:64:81:
                    79:4a:be:cf:e4:3a:5b:4f:31:86:18:4b:0b:c9:69:
                    90:34:fb:73:dc:ee:0e:e9:17:e2:30:33:96:bb:32:
                    04:38:71:dd:dd:f9:f0:8a:bf:7d:6d:9c:4b:ac:af:
                    76:e9:ba:6c:af:0b:3f:56:68:7b:d6:cf:d4:e1:d2:
                    0f:dc:f7:22:1f:15:e3:ae:7c:61:9e:37:0f:68:4d:
                    56:17:df:f4:e5:1f:3f:bd:6c:87:17:1b:33:f7:58:
                    6b:f4:cb:45:eb:1b:d2:dd:72:e3:1c:d4:84:33:0a:
                    53:57:c1:d5:a5:5a:06:4a:f1:6a:1d:6c:61:f2:b8:
                    e3:7d:73:03:a4:16:98:62:ff:c3:b5:cd:17:8c:d8:
                    c4:50:af:16:af:e0:b8:c8:0f:01:97:08:d1:a3:64:
                    31:c8:29:b1:22:19:92:0d:ac:76:4b:2f:e7:8d:fc:
                    25:64:44:3e:c9:2d:79:79:b7:df:73:3a:91:94:50:
                    0a:9f:4e:ba:5c:9d:31:e3:a8:1a:1e:35:d0:21:81:
                    2f:49:b5:55:15:88:94:66:dd:03:f8:2e:02:c6:22:
                    c6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:28:F1:8B:14:C4:AC:FC:AF:0E:33:FC:C5:CF:62:BA:ED:1E:5E:6D
            X509v3 Authority Key Identifier:
                keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9c:c7:8e:b6:e2:38:1b:43:43:6b:b1:94:09:58:c6:2d:bf:
         bb:34:3c:f2:6f:c9:57:4c:2e:20:a9:4a:19:a8:ef:13:5c:ed:
         6e:5a:2b:80:8d:bc:7d:98:11:3f:ca:47:fd:b1:02:b8:0d:f7:
         95:7e:56:1e:79:59:ee:fb:21:a2:bf:cd:d9:67:32:2a:97:f2:
         24:17:15:d6:c6:80:e1:b5:d0:7a:11:cd:8d:f7:d5:4f:a9:55:
         e3:0f:28:47:96:7c:cf:d7:46:38:ee:94:8d:ef:95:47:94:9e:
         22:5c:de:d4:12:44:78:35:ef:5a:88:7b:89:d7:61:63:c1:b8:
         da:d1:a4:42:26:0b:4d:e5:f3:7f:4b:89:71:1f:03:97:9e:dc:
         84:ee:37:34:e6:17:14:96:70:e7:43:05:cd:e6:ed:13:aa:59:
         54:77:31:c9:de:d8:85:a2:4e:d2:42:0a:1d:d0:b2:05:90:7e:
         99:db:f3:19:4a:39:45:7f:65:4e:1e:4c:90:5d:e9:b3:bf:93:
         64:a8:8e:98:8e:4c:3b:f6:93:ab:2d:05:7d:bb:4d:9c:70:1c:
         fa:e1:d2:3e:97:b1:0f:b2:fe:66:8a:d3:79:c8:e3:3a:e4:ad:
         36:b4:14:ab:76:8b:c1:c1:88:25:51:93:d9:fa:56:f2:ce:17:
         b6:e8:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:12 2025 by rpki-client