Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File:                     XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier:          zT7/aOCkUFs8qR/cFAmJ6tSQYAtOD6M6GvyZTQf28Ng=
Subject key identifier:   A4:C0:34:9B:D0:DF:C8:25:5B:E4:F5:30:58:C4:DB:DC:0D:7E:55:92
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer:       /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial:       0199FF59897A358128F92C45E2DC717699CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number:          065D
Signing time:             Mon 20 Oct 2025 02:01:21 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:21 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:21 +0000
Files and hashes:         1: 0EYHloNNMUeAQfFhtTwh0_j8yCs.roa (hash: cCeGu5Zp9qskDY7ZxrA5s8MH+wQ38rU2p3PBy29pBl4=)
                          2: 3pGMf2uelis93d-cWIqOvjIte_8.roa (hash: hCA0m5958CMIXlTPuOx73BRCeRHxrLBc3i7kaHRRzvM=)
                          3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: gV/4LM5MIOHHiAOvw8NwMsuNQM4IvBe9UCS9zE2I98g=)
                          4: lmViBZUrJauVEE0G2QrmSk33TZM.roa (hash: HMXZlZJ5YNloePMdOCSIn559A8cE+RQD1iAwls1t7fk=)
                          5: p5sda-HwuWNCoJb8ZwZwGaKEMGY.roa (hash: aNaLV+OqbrfnfcABJDi26qGq5f1GualuPpkp1NT1+Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:89:7a:35:81:28:f9:2c:45:e2:dc:71:76:99:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
        Validity
            Not Before: Oct 20 02:01:21 2025 GMT
            Not After : Oct 21 02:01:21 2025 GMT
        Subject: CN=a4c0349bd0dfc8255be4f53058c4dbdc0d7e5592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b9:01:d7:29:f6:e1:8a:c2:54:7e:98:95:8a:
                    06:ba:8d:da:21:6b:dd:04:a5:5b:3e:c6:8a:28:43:
                    a9:63:68:14:c3:4e:f1:ad:a9:72:9f:ca:5b:01:85:
                    a2:1e:50:a1:4b:b4:86:43:7e:31:ad:74:19:39:de:
                    41:db:70:52:06:6b:ee:2e:8b:aa:a1:08:d0:ad:27:
                    e4:3d:93:c9:ac:b0:6d:76:97:cd:59:e4:64:08:29:
                    59:55:cc:ed:d2:0d:d1:1e:e3:d6:b5:1e:15:3c:f5:
                    2d:6a:15:03:20:59:cb:6a:d9:3f:da:ca:65:6f:64:
                    2f:ab:cf:88:16:b3:bb:81:8c:eb:9f:c0:a8:42:5b:
                    0e:cf:e8:14:53:be:ce:1b:14:df:28:23:c4:06:a7:
                    d8:ae:99:14:ad:e5:6b:55:23:85:3a:38:dc:40:f0:
                    23:1d:8a:81:47:ba:b2:8b:8e:2f:50:d6:21:b9:d4:
                    cb:55:b4:4d:fd:6f:65:31:42:eb:a6:e4:76:6c:cc:
                    54:57:30:69:8e:b8:13:37:c1:cb:0c:0e:cc:b4:00:
                    d3:f7:46:f9:f6:e7:1a:61:fb:ac:7c:ee:e8:44:51:
                    de:f5:82:28:6a:1e:3e:8d:d4:80:bd:65:fe:52:7d:
                    15:07:b9:6f:e0:4f:10:94:fb:d4:5f:bb:c0:79:6e:
                    9e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C0:34:9B:D0:DF:C8:25:5B:E4:F5:30:58:C4:DB:DC:0D:7E:55:92
            X509v3 Authority Key Identifier:
                keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:65:4a:49:98:7a:45:04:ea:be:61:84:49:24:23:2a:de:19:
         c9:48:5e:fc:7c:b7:48:fb:f9:c0:eb:07:b1:e5:ea:b5:26:94:
         e2:b0:35:5a:17:cc:f5:8e:a7:b3:fc:83:49:0d:6a:fa:4a:d3:
         4c:7e:c4:e3:67:40:43:13:54:f7:46:5d:0c:c8:99:f9:05:94:
         18:91:15:24:55:93:37:60:75:c6:11:ff:1f:17:eb:9a:d8:8f:
         cc:4f:80:25:ee:96:46:88:37:a5:b0:a7:f5:b3:7f:f1:9c:3c:
         5d:8f:8d:a1:eb:93:59:34:fa:7b:44:a8:e9:70:72:30:d6:e5:
         cd:67:3f:fc:98:7e:f3:eb:af:7e:3c:97:d5:04:5f:be:a4:8e:
         13:ed:2f:aa:40:e1:8d:8e:37:61:0d:aa:04:13:bd:17:53:f5:
         05:b8:5c:13:d8:80:93:03:c5:a0:36:bb:42:08:66:a2:b2:11:
         2b:95:35:f0:f0:d3:19:9a:d4:d0:85:8c:c7:e0:fb:3b:30:e1:
         34:b9:c2:a2:bf:7c:45:30:dd:8a:af:e6:5f:71:00:9c:84:01:
         ea:6c:04:41:89:b3:62:c1:8d:43:ce:43:72:72:01:f2:56:0b:
         cc:f6:4c:6b:f0:76:d2:d4:aa:cf:a5:37:dc:80:91:f2:f1:ea:
         f3:21:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:46 2025 by rpki-client