Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File:                     4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier:          Ng+6UxtCfQU46MbAN2mKPh3cpzCS1hVHr4VEgK2W3II=
Subject key identifier:   5B:0E:CF:08:F0:B6:75:85:0F:FF:12:DC:0C:68:44:1A:C0:F4:87:4C
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer:       /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial:       0199FBEAAA0F9B8B3224BA29C2E1A964953D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number:          03E5
Signing time:             Sun 19 Oct 2025 10:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:24 +0000
Files and hashes:         1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: o7RAwW6fsTMwvmuSm4EwKpIn02IQKR19bW5bTcDt494=)
                          2: H7jD667ua1MTRSgNeUALgotBmYc.roa (hash: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=)
                          3: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (hash: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=)
                          4: lchTEZvN-6afhfJLiZL0vloeA9I.roa (hash: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:aa:0f:9b:8b:32:24:ba:29:c2:e1:a9:64:95:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
        Validity
            Not Before: Oct 19 10:01:24 2025 GMT
            Not After : Oct 20 10:01:24 2025 GMT
        Subject: CN=5b0ecf08f0b675850fff12dc0c68441ac0f4874c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:73:c7:44:2a:ee:2c:a3:1b:08:9d:a0:ef:
                    51:94:fa:75:39:f5:ee:c7:c4:08:eb:52:30:9d:b8:
                    c4:9a:11:d1:9b:d3:a8:1a:d0:bd:5e:8d:b3:06:1b:
                    15:d4:29:52:39:6b:7b:68:18:f8:3f:67:dc:de:f7:
                    45:99:b9:10:ce:67:b1:ae:d4:33:b8:6c:0d:07:c9:
                    32:59:ff:9a:c6:e9:58:9d:41:da:e7:b0:ff:0f:c5:
                    4a:73:a5:d2:ba:1c:1f:31:41:8b:09:f7:95:86:ff:
                    2e:83:db:3d:a8:c9:b5:49:1c:78:93:f6:b2:ff:9c:
                    8c:6d:25:3e:a5:23:0e:d8:4a:9c:4c:24:e4:46:1c:
                    e0:7a:f6:0b:81:c0:c5:52:5c:46:e9:3a:ab:51:24:
                    20:e6:8a:47:52:49:fc:b9:e9:5d:f6:4e:e3:fb:ba:
                    ae:80:a3:cf:fe:bc:c0:73:74:3b:51:52:db:c8:8c:
                    50:f4:ec:cd:1e:f3:84:8d:ab:b2:1b:1a:45:89:f0:
                    3d:c1:10:e0:53:d6:7f:1e:a8:7a:40:0b:54:f4:d4:
                    23:62:90:39:91:ac:7f:79:b6:23:a4:f3:2d:88:c2:
                    d2:ab:1a:44:a4:fb:cb:fb:b5:3c:da:a8:40:a6:34:
                    23:fd:16:0c:d5:51:17:4f:22:aa:3c:88:56:fe:97:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0E:CF:08:F0:B6:75:85:0F:FF:12:DC:0C:68:44:1A:C0:F4:87:4C
            X509v3 Authority Key Identifier:
                keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a1:88:3b:e8:46:1d:15:c2:c7:80:b5:f6:15:18:5a:ab:d1:
         0e:34:0d:b0:45:21:f2:fb:01:4e:64:4e:77:f1:6a:d5:80:ed:
         69:ab:18:13:93:c2:32:05:8f:78:00:56:de:72:e8:53:23:fb:
         44:02:15:61:fc:55:fb:cd:d0:aa:83:5d:07:1b:b3:b0:82:1e:
         89:98:6a:3a:59:ec:3e:fa:03:af:bc:52:e5:a9:2d:24:79:ae:
         27:59:5e:f4:2b:8d:c3:b2:53:bd:f5:5e:59:0a:89:66:a6:c3:
         9d:ca:22:78:51:34:be:5e:aa:00:38:31:a1:c9:9e:c3:80:96:
         79:ca:b0:62:6c:73:22:63:56:0f:ae:46:b0:f6:3c:87:aa:ac:
         4b:e4:5a:4c:aa:44:84:29:3d:54:6b:dc:9c:4c:d2:fb:1e:79:
         65:9c:91:c6:c7:75:38:e5:ad:80:99:a8:c6:2a:9b:79:87:23:
         4b:8d:6b:4d:31:f4:ef:b4:f3:35:31:74:70:78:f8:b7:b0:11:
         b7:f6:d3:78:21:64:57:b7:90:f2:9a:ee:dc:c7:35:11:e5:0b:
         b9:aa:df:95:80:cc:f6:5d:02:a0:1e:63:b3:ce:d6:d1:18:66:
         bc:8f:ae:a9:2f:b6:fb:76:a1:50:39:ee:a4:f7:ca:2d:d4:cf:
         50:77:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:11 2025 by rpki-client