Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File:                     is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier:          EPZIcnjO5iqdX2XYfbMiBisd4tItenxtgquGWqdERnY=
Subject key identifier:   DF:5F:35:5C:CC:F4:23:CA:9D:C1:59:8F:79:81:EC:7B:7C:D5:33:0D
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer:       /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial:       0199FC58F2A0BE417E7ECE131EF6654AD9BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number:          0784
Signing time:             Sun 19 Oct 2025 12:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:51 +0000
Files and hashes:         1: NxVQaX6suFkgxiAAF2vWtVQF7dk.roa (hash: zsaYmfZBz75BAmMTNCovG+cBN7yV/z5nE5MvUK9bhp0=)
                          2: QB7BRHUFuZiz_JCklEdTGkiHDXA.roa (hash: T5whSTEBQz0KfK/+KqfcupXVgP1i6/CuX9EnL85Iy64=)
                          3: hzmnrqGEcmQoLE8-QnNCBlnG1g4.roa (hash: BMDDmrLQ040JiodI6CtpS7rhdysF3qgW4lRm+vEVeGs=)
                          4: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: SCl3MwSkdPDYFpx3eQr5HbonGTdgRUcCWDoDPLcGxKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:f2:a0:be:41:7e:7e:ce:13:1e:f6:65:4a:d9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
        Validity
            Not Before: Oct 19 12:01:51 2025 GMT
            Not After : Oct 20 12:01:51 2025 GMT
        Subject: CN=df5f355cccf423ca9dc1598f7981ec7b7cd5330d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:93:a0:26:bc:a1:1e:20:81:b7:d2:b5:47:
                    94:c1:50:54:b0:00:b7:bf:14:58:b2:6a:90:61:71:
                    2a:98:3d:5b:c6:c2:c6:5e:4d:72:84:89:f7:e1:a7:
                    a6:e9:eb:81:24:fc:91:0f:25:93:96:6b:83:38:ae:
                    5b:70:cf:4a:e3:6c:b6:f7:65:ca:76:b3:36:e2:da:
                    d2:b5:74:39:e5:bb:26:9d:ae:cd:cb:92:0c:82:99:
                    38:63:c9:57:de:b6:3c:f4:c8:d7:e5:be:8e:2f:47:
                    2b:e4:f5:02:43:69:a6:d1:6f:57:be:7d:3e:10:45:
                    b6:32:c4:04:bb:1e:ec:4a:5b:5f:34:d3:50:11:60:
                    18:c1:e8:94:0c:d4:a4:ae:de:16:9c:91:80:f9:5e:
                    cb:0f:14:cb:5c:a0:e9:fa:c9:0e:23:ad:84:02:86:
                    2e:f4:69:24:1b:82:c9:0d:e0:45:9f:fd:1b:aa:93:
                    66:b8:ee:c2:8d:a8:5b:0b:ad:17:e9:dd:f6:fc:eb:
                    e8:0b:50:ed:4c:03:8c:ea:9d:c4:33:0d:2d:56:6d:
                    f7:1e:7a:02:ba:9b:1c:e1:53:3c:e9:18:3c:70:32:
                    9d:4c:20:e8:a5:f4:94:cf:d0:2a:57:25:61:97:b4:
                    79:07:be:c1:e0:69:fb:f4:31:f3:58:08:67:04:e9:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5F:35:5C:CC:F4:23:CA:9D:C1:59:8F:79:81:EC:7B:7C:D5:33:0D
            X509v3 Authority Key Identifier:
                keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:9a:98:3e:92:2e:33:1b:3c:25:06:4f:1a:03:7a:1d:2c:
         0d:6a:e3:37:8c:a8:cd:9e:2f:c8:51:f6:41:76:a9:23:a3:02:
         56:c1:7d:f7:22:9a:70:2f:ee:bc:31:d0:da:9e:16:5a:50:50:
         32:07:65:44:5e:65:8f:86:99:53:ed:76:20:fa:92:fb:1a:39:
         36:25:08:a8:1a:ad:0a:c0:32:2c:b1:2e:8d:53:49:a0:e7:39:
         eb:b0:3d:f4:2a:0a:b9:f5:30:42:e9:d8:67:dc:fb:e6:b8:03:
         44:74:dd:f9:6d:f9:f4:51:6f:db:18:cb:4c:e7:ea:c8:21:2b:
         19:79:64:59:d1:7e:a8:c5:eb:fe:d5:2c:c0:d5:16:98:4f:a0:
         2c:00:dc:81:fa:b5:b5:a9:48:99:4a:44:a1:e1:eb:2a:09:8c:
         4f:23:c3:1e:00:88:15:48:92:92:97:c8:fd:73:f8:2e:dc:6e:
         03:f1:90:dc:64:d8:1f:86:68:ad:ee:1b:e3:cf:28:4c:1c:6c:
         4f:21:27:63:b6:75:9b:94:e8:83:3f:13:8d:5a:ef:b3:31:d5:
         ad:09:8c:96:03:e4:dc:fb:44:3e:c4:a3:2a:d0:6e:a3:6b:d5:
         59:98:c4:84:5f:84:32:72:2c:fd:75:37:7a:fe:fd:d8:69:79:
         e3:f6:bf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:17 2025 by rpki-client