Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File:                     5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier:          9A3MqwUXC3MfbM3d4MIsSzevL6jMl/5ttickoC9YZd8=
Subject key identifier:   59:BC:A1:80:5B:10:1F:2D:89:2A:F7:42:9C:07:07:74:25:2F:96:29
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer:       /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial:       0199FAD808CE05D3063BCE639CB856557177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 05:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:26 +0000
Files and hashes:         1: 1prUVz0HPmxrICK89MLWQGvd_os.roa (hash: nYOxG6xI/OF/g1onNafntFHFC9rtfVRgZj8b/z6tXRg=)
                          2: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: Emk6iEc/OWBha853GpMypaQmwXBSg4be2oksTCiYrok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:08:ce:05:d3:06:3b:ce:63:9c:b8:56:55:71:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
        Validity
            Not Before: Oct 19 05:01:26 2025 GMT
            Not After : Oct 20 05:01:26 2025 GMT
        Subject: CN=59bca1805b101f2d892af7429c070774252f9629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:35:ff:a3:1f:77:21:92:be:25:12:13:02:
                    e8:24:eb:55:f6:89:c9:15:de:3a:f5:29:09:2f:a1:
                    36:90:1e:09:01:82:40:79:63:50:dc:22:3b:f1:b1:
                    b5:de:c7:5c:6e:46:a6:6e:b2:78:e4:02:19:8f:26:
                    c0:a8:a9:73:ec:3a:a0:db:51:ee:43:9c:37:02:57:
                    2d:0e:79:17:3f:97:a9:25:77:6b:f1:26:65:f3:ae:
                    f9:57:dc:60:ed:ed:76:1b:4f:14:9a:41:02:00:cd:
                    e9:db:05:db:be:fb:d3:19:6e:e2:48:2f:00:5a:56:
                    1f:e2:c9:e4:7f:b8:c4:ed:9f:f7:0d:4d:1d:4b:73:
                    6c:d3:96:1e:ea:0d:f4:7e:c8:71:0e:83:7b:10:25:
                    a6:70:31:a9:bd:d3:48:b4:27:44:7d:65:21:53:bd:
                    a4:4f:23:2a:01:1b:64:41:64:96:38:0d:84:94:19:
                    0f:ae:93:74:65:6c:07:f5:4a:4a:7d:69:4e:c2:33:
                    f5:e9:15:c8:23:56:0b:25:57:ac:d6:be:cf:61:b7:
                    45:08:64:c9:8b:de:ff:a9:83:b5:4f:9d:9a:c6:10:
                    79:11:f4:14:69:93:ef:6f:c0:db:24:1d:c0:f2:59:
                    06:e4:36:cc:99:0a:09:b5:b7:05:3a:10:30:b3:ad:
                    22:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BC:A1:80:5B:10:1F:2D:89:2A:F7:42:9C:07:07:74:25:2F:96:29
            X509v3 Authority Key Identifier:
                keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:85:51:d3:25:3e:83:cc:1d:df:86:0c:21:99:a2:97:be:02:
         b5:73:42:55:8e:aa:74:6b:f7:c5:3a:0a:a0:f4:fe:83:20:4a:
         ba:42:1a:22:17:e0:a3:97:30:f7:38:7e:f3:d9:ab:59:84:84:
         80:6c:bb:b0:62:a0:9d:8d:15:47:ca:93:ef:17:74:76:18:61:
         84:00:bd:e5:0f:73:a4:c9:fa:d6:f2:ab:08:e5:8d:1e:0e:b6:
         82:91:43:51:01:de:17:78:1a:13:7b:f0:9f:62:3f:82:98:fe:
         97:60:48:4e:c1:68:c9:c4:4d:f2:8c:50:60:d4:87:b0:32:21:
         4c:e3:68:d6:a7:1f:74:e0:29:fe:75:33:2b:75:0f:80:1a:61:
         31:32:87:5d:3c:d3:ad:ab:af:21:a8:26:b0:3f:e7:b9:6d:17:
         45:04:68:89:7e:af:b1:80:68:b1:91:40:47:43:cf:b2:00:29:
         a1:98:bf:fc:33:95:d9:99:6b:bc:c4:52:3b:a0:16:1b:49:37:
         dc:e8:5f:75:fe:c4:7e:08:c9:5f:9f:45:7d:96:f5:4a:2b:8d:
         a4:4c:a8:42:f7:0d:b7:43:fc:71:40:14:03:2a:7b:9e:31:e1:
         7b:80:67:4f:66:2c:9e:d8:5a:18:e5:8a:1d:c3:84:b1:9d:54:
         db:32:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:10 2025 by rpki-client