Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          XRJ0W2+91iwIh8qayiEE4it56wCHp0vjAXYya0VcOik=
Subject key identifier:   A1:40:23:97:BB:D7:59:27:45:C8:8C:86:1E:3C:59:FB:87:62:C3:DC
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       0199FE7D8E9E32A728490394139E93052A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          0FD2
Signing time:             Sun 19 Oct 2025 22:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:05 +0000
Files and hashes:         1: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: rYFdw9EOIR6ye/MBf8M88BfDbsZp85N2DdoGjciGiYM=)
                          2: 99MFFBjF3Dc4zTlDGHUkWaGScYw.roa (hash: WeTl8ArSSJSSsmY/ooHSrE+g99Jv4JYzfunEC3Fj5PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:8e:9e:32:a7:28:49:03:94:13:9e:93:05:2a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Oct 19 22:01:05 2025 GMT
            Not After : Oct 20 22:01:05 2025 GMT
        Subject: CN=a1402397bbd7592745c88c861e3c59fb8762c3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:4a:cc:dd:7c:2f:bb:d5:f7:bc:7f:37:4d:
                    31:4b:d0:cf:6e:53:19:5c:d8:25:56:7a:6b:50:be:
                    fc:99:e3:6d:1c:2d:71:32:10:66:96:75:a8:67:f3:
                    e2:5f:1c:5f:47:46:bb:4b:37:3d:9c:38:a1:d9:89:
                    e8:27:1e:f6:ec:7a:ee:bb:f0:b3:ac:0c:6e:1a:db:
                    93:1d:a9:d3:a0:e1:9b:f4:59:40:80:80:e3:d4:ee:
                    23:7d:51:f0:57:8f:a0:01:0b:23:54:6d:be:63:ac:
                    4b:0f:13:cd:4c:0e:78:3c:f1:77:1d:d5:e5:e0:9e:
                    10:31:08:6e:d0:d4:17:3b:1e:56:f2:56:73:e8:b0:
                    fe:81:cb:2f:6e:06:f2:84:a0:5c:cf:06:7b:a5:8e:
                    11:9f:8f:06:c0:61:aa:52:6e:fb:07:ed:0e:32:fc:
                    07:f9:57:51:b2:87:b1:2a:fd:6f:cc:c1:6c:f8:32:
                    c0:fc:b2:36:18:aa:43:e6:c5:ca:89:6e:c3:19:39:
                    0f:28:ff:5c:4e:f1:b6:9f:85:9a:81:77:aa:07:1d:
                    67:97:d1:af:c7:df:a8:5e:6f:4f:f2:5b:16:fb:5a:
                    2a:6a:49:99:24:5f:8f:4c:a1:02:ce:93:20:e4:e8:
                    ba:a9:ec:90:be:13:4f:fd:6d:48:9a:fa:17:0e:11:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:40:23:97:BB:D7:59:27:45:C8:8C:86:1E:3C:59:FB:87:62:C3:DC
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f5:98:e0:76:b3:75:a0:a5:df:c3:95:00:c0:5e:62:85:2b:
         a5:06:91:dc:8d:ba:fe:b5:1a:32:e1:86:19:89:1c:cc:8c:b1:
         c7:44:a4:0a:b8:68:d9:b7:0c:21:fc:6d:17:aa:a5:dd:cf:d6:
         a7:fc:d0:74:37:78:72:1d:51:75:d3:57:c4:1d:ab:e0:db:bb:
         7c:da:1a:e4:40:64:5d:bf:7d:27:a7:12:9c:03:50:df:a1:da:
         c2:24:11:11:31:a6:69:75:26:b9:a8:77:88:61:13:29:1a:70:
         60:de:8d:1e:f9:b4:99:bb:67:2c:15:72:30:31:a1:70:8d:8e:
         e0:d4:b3:8b:7d:db:08:bc:e8:05:4b:99:08:a5:95:36:07:16:
         10:d8:1c:ae:1f:5a:6f:15:8d:cb:3a:4f:97:fd:db:6f:58:d2:
         f5:57:e3:1b:25:d3:97:89:4d:0b:29:5d:1d:a2:29:95:0c:b8:
         a1:8e:78:f1:97:e3:8e:40:99:35:b0:1f:e9:7a:96:d0:a1:a0:
         66:74:83:79:30:bb:b0:df:89:44:be:65:09:90:f8:8a:a0:55:
         a3:22:c7:16:42:82:d2:f9:6b:e2:43:c9:91:e0:d9:d7:db:1d:
         25:cf:96:95:7a:0a:53:25:3a:8c:20:0a:e0:63:df:81:3b:77:
         6e:ab:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:06 2025 by rpki-client