Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
File:                     ml_TZv526ZmG92gN_M89y5TW3hQ.mft (raw, json)
Hash identifier:          sdCcSDx1lT9RN1ftOiGqPdLOh2tOHQPzQy3VnKV4SPw=
Subject key identifier:   D2:AC:C6:9B:4D:4E:54:3C:02:9E:5D:12:4E:C0:91:08:B4:EF:4D:D5
Authority key identifier: 9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
Certificate issuer:       /CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Certificate serial:       0199FBEAC7EB5E5DE6368B81E514B1B0B68A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
Manifest number:          056F
Signing time:             Sun 19 Oct 2025 10:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:31 +0000
Files and hashes:         1: ml_TZv526ZmG92gN_M89y5TW3hQ.crl (hash: gcB6gAfp8YkSXmmtGygvUJdG3cGiw/LSqb+ajUmd6l4=)
                          2: nzhgmUHMBkXurs4lxO-vVG71nK8.roa (hash: naLy7uq1sBONgf+ZVhFHwkdla3yLH7XoG0HQQOUDogs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:c7:eb:5e:5d:e6:36:8b:81:e5:14:b1:b0:b6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
        Validity
            Not Before: Oct 19 10:01:31 2025 GMT
            Not After : Oct 20 10:01:31 2025 GMT
        Subject: CN=d2acc69b4d4e543c029e5d124ec09108b4ef4dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:72:a2:13:e0:75:1a:b2:63:14:9a:e4:16:
                    dd:c3:90:a9:e8:8e:d0:81:3f:bc:44:91:28:42:2b:
                    83:5b:16:28:4a:7b:4b:f7:98:51:0d:b7:2c:f6:d9:
                    60:26:b4:ec:85:df:64:67:22:2d:1c:57:b8:3a:42:
                    6d:10:60:77:62:83:44:ac:9c:66:7a:5d:34:f0:da:
                    e1:7b:6e:f1:95:5b:86:0e:4b:87:50:28:cb:e1:81:
                    79:ee:3f:c8:c9:56:eb:78:b7:1a:53:80:4d:19:d7:
                    18:e2:54:30:6f:4e:db:7d:c5:bb:40:f9:aa:7b:00:
                    7b:d6:35:bf:ec:ea:8d:14:b4:3d:6f:74:c3:e0:d3:
                    fe:18:ab:d0:be:8d:c2:07:f1:b4:5d:8d:70:1f:7e:
                    4c:a7:6f:a0:34:e7:5b:e5:d5:25:d0:1e:45:92:06:
                    ca:d9:41:9f:b6:12:5a:ae:a9:0e:70:73:64:48:77:
                    21:4e:4f:fa:72:81:bc:a7:46:6e:77:ae:d2:bf:ca:
                    39:6d:0b:c3:82:0e:71:1a:bd:30:c5:d6:fa:a9:7f:
                    3a:27:60:a5:10:bf:d0:89:2f:22:01:ba:c2:db:e9:
                    c7:e9:31:1d:e6:53:7b:53:f1:a7:10:c9:36:da:03:
                    29:b1:db:e8:2a:fa:ac:bd:ab:d4:a0:df:30:99:16:
                    21:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AC:C6:9B:4D:4E:54:3C:02:9E:5D:12:4E:C0:91:08:B4:EF:4D:D5
            X509v3 Authority Key Identifier:
                keyid:9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:6c:d5:74:ac:e3:7a:c5:a1:b0:53:c5:aa:98:91:45:3d:
         f2:35:f3:14:3b:61:7a:f4:b0:67:dc:8d:b2:ca:97:a2:4a:ef:
         28:43:28:42:8d:18:c3:08:81:85:12:f9:a6:e7:9b:9d:0e:05:
         c9:d9:88:99:51:d0:89:21:63:bc:ce:be:3b:53:b3:07:14:b1:
         17:c6:0a:db:17:92:63:f2:3b:6f:9f:54:e7:97:da:ee:da:06:
         51:eb:77:60:b6:53:b5:66:6a:0c:e8:1e:7c:2f:0a:ae:db:ba:
         3a:15:3d:35:7c:8f:f0:59:28:89:54:81:31:e5:3f:a7:ab:37:
         3d:71:02:0e:e8:c4:35:d9:90:15:63:a6:a5:ef:0d:b1:0f:f3:
         d5:82:04:f5:c8:78:be:74:6d:0c:2e:00:17:23:ee:a2:c4:22:
         94:74:78:02:70:5e:6a:29:e1:04:e2:49:64:1f:35:25:72:df:
         bb:f3:67:87:f6:4d:34:75:4f:82:eb:de:c4:22:d3:c8:ef:21:
         07:fa:c6:ba:a4:9f:7f:c2:17:92:14:fb:79:5f:95:77:bb:e0:
         dc:08:30:e0:d7:6d:b3:9e:1a:6f:f8:8c:e8:21:b2:81:42:15:
         48:7c:04:2c:ba:ab:65:23:78:17:05:35:91:d3:79:45:b9:04:
         23:5e:45:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:54 2025 by rpki-client