Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File:                     5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier:          uGX4QHo6BOI+ck5XCatiMr4p2jF/qUWCjMDa+sANNQM=
Subject key identifier:   FC:4F:B5:1A:35:61:D5:7B:0B:CD:12:59:E7:0F:18:8E:61:C0:4E:33
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer:       /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial:       0199FCC65DD34570C0ACAA56B095D3A2314F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number:          167C
Signing time:             Sun 19 Oct 2025 14:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:22 +0000
Files and hashes:         1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: p27ljYlomEpJeIyyNVQckKUly+dntmXB+2fNMHMmme8=)
                          2: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (hash: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:5d:d3:45:70:c0:ac:aa:56:b0:95:d3:a2:31:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
        Validity
            Not Before: Oct 19 14:01:22 2025 GMT
            Not After : Oct 20 14:01:22 2025 GMT
        Subject: CN=fc4fb51a3561d57b0bcd1259e70f188e61c04e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:61:ea:a2:80:83:d9:2d:56:02:c7:f3:29:
                    d7:1d:14:b2:5f:ae:73:a5:55:82:fd:c2:37:40:0e:
                    56:50:3c:1b:4d:56:60:18:e5:66:cd:77:5a:84:76:
                    bf:c5:46:9c:d1:d6:8f:6f:9b:00:31:09:75:71:92:
                    56:0c:15:7d:f6:66:5e:2a:c7:90:24:b4:5e:6f:db:
                    c5:97:d0:f5:71:42:dd:d1:11:42:69:47:55:c0:df:
                    9e:b2:bc:03:e6:88:c2:5d:21:00:20:ac:a3:f2:0d:
                    5d:c6:0e:27:58:61:fd:ce:b8:54:6c:eb:18:3e:6a:
                    bf:da:8d:1f:df:b8:c1:72:9f:a4:43:93:10:21:80:
                    7b:c3:69:83:7f:6a:11:69:fb:b6:0c:79:ff:6e:28:
                    a2:9a:f4:8c:30:dc:23:2a:76:f2:9d:a6:d1:64:2f:
                    26:4e:f9:b6:87:64:a6:ef:14:4d:b1:99:2a:4f:3e:
                    f2:7b:1f:9c:78:61:fa:e8:7e:dc:57:f7:0d:36:86:
                    39:b8:63:b6:5d:5c:34:3c:f8:0a:ab:10:21:d2:8d:
                    b4:ed:ec:a2:cd:29:b9:25:76:1b:17:b1:6b:bd:02:
                    f1:1c:1d:20:d6:cd:d5:ad:7e:5e:85:bc:fd:46:46:
                    f2:f2:07:6a:ee:ee:35:ef:25:be:36:84:ef:16:f3:
                    0c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4F:B5:1A:35:61:D5:7B:0B:CD:12:59:E7:0F:18:8E:61:C0:4E:33
            X509v3 Authority Key Identifier:
                keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3c:48:ce:bf:b6:8b:fc:9d:77:06:17:c2:b9:6f:a5:ae:26:
         a4:b7:a2:5c:d7:ee:24:70:0a:06:ac:69:ae:df:dc:3a:0d:d5:
         11:63:4d:79:c1:73:7d:95:dd:b7:7a:d6:23:e0:56:73:e7:00:
         dd:26:f8:a7:45:50:f6:78:24:d4:1a:27:10:76:7a:19:f0:69:
         4c:f5:63:45:84:0d:38:85:85:42:1a:a5:98:f9:a4:97:e0:9d:
         e1:43:49:d0:f9:c4:93:20:99:39:8c:d7:e1:ec:b0:8e:a7:fb:
         a1:8f:aa:3e:e7:fc:c5:5b:df:af:1d:a4:0f:ac:56:9a:6d:72:
         68:01:94:43:11:92:37:d9:0d:a2:52:53:ee:04:33:32:68:c1:
         0a:04:fa:e8:2b:8d:dc:85:98:a8:b1:fb:ef:15:e3:77:fd:ec:
         75:d5:0b:54:96:f9:9f:41:de:bb:d6:b4:cb:5b:2c:c0:a5:da:
         f6:9f:09:41:21:6c:6e:f3:d6:43:a1:1a:c9:85:c4:77:8a:8a:
         a1:af:a2:a9:11:6b:cc:b1:57:ba:f2:b1:a3:5b:41:ff:a4:14:
         13:d0:cc:a8:be:15:7d:be:a5:4d:47:41:7b:38:a3:6e:42:f1:
         0b:af:d4:ed:e4:62:e4:dc:e2:94:68:57:c4:5d:c5:84:10:3c:
         b9:87:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:10 2025 by rpki-client