Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
File:                     cLteVPJ0jstdhpjTeTOcwV8yuJM.mft (raw, json)
Hash identifier:          jyxfTP9NYE78GoDcNZDRD2uT6pAXtgz8M/g+PjfdOw0=
Subject key identifier:   01:90:B3:61:26:85:64:9D:05:A3:7C:85:B7:5A:B1:AC:3B:F2:0B:F3
Authority key identifier: 70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93
Certificate issuer:       /CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
Certificate serial:       0199FB7CF7B54477E253BD8720BAEB46484E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
Manifest number:          12E5
Signing time:             Sun 19 Oct 2025 08:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:35 +0000
Files and hashes:         1: VABLE3iBHalb6Jl_c3u-oyHeiS8.roa (hash: s1CBILyJSh7gNgL+QAYvHKZM5KaEqmZAwVEcKOw0A0E=)
                          2: cLteVPJ0jstdhpjTeTOcwV8yuJM.crl (hash: +jSTjyFwM0BF8/+/xcbISfpJWl8NsX22nBiviOFSlL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:f7:b5:44:77:e2:53:bd:87:20:ba:eb:46:48:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bb5e54f2748ecb5d8698d379339cc15f32b893
        Validity
            Not Before: Oct 19 08:01:35 2025 GMT
            Not After : Oct 20 08:01:35 2025 GMT
        Subject: CN=0190b3612685649d05a37c85b75ab1ac3bf20bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:c6:22:73:fa:8b:0b:15:c4:e0:7b:8a:13:
                    d7:a3:8c:24:75:f0:2e:63:e2:a8:64:81:21:ad:58:
                    be:cc:3f:2c:0b:58:60:46:ce:6a:64:bc:86:a5:64:
                    40:6d:d0:3d:af:09:9a:77:d6:d5:39:23:bb:1d:56:
                    81:e9:80:7f:e7:12:c5:2a:3e:b8:da:e0:93:ec:a1:
                    ea:cc:c5:97:ff:2d:9f:43:ba:9c:49:a5:19:e0:bf:
                    92:34:02:85:f9:0e:5c:8e:74:b7:90:a1:84:e9:47:
                    29:c7:bb:93:1d:18:42:82:10:85:23:ef:75:50:f8:
                    45:7f:56:7f:af:96:90:3a:2f:46:30:72:ff:eb:b9:
                    19:70:1f:75:46:3d:fe:76:5e:9c:a1:69:81:e8:a6:
                    05:f4:1b:84:f3:22:9f:57:29:76:f8:47:45:8b:62:
                    b3:80:25:b4:19:eb:1f:87:11:33:4d:a6:ad:b9:a4:
                    77:e8:e8:a8:62:0e:54:d0:d2:e4:4e:70:07:cd:77:
                    4f:c5:5b:73:0a:7a:44:60:d7:55:cb:87:c0:31:60:
                    de:69:09:58:52:ec:11:5f:a5:f5:03:c2:1e:69:5b:
                    a6:26:c8:89:44:a9:76:29:67:78:40:75:f4:3e:e0:
                    a0:85:ec:06:e2:91:1c:76:f0:f9:45:6b:8b:17:a2:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:90:B3:61:26:85:64:9D:05:A3:7C:85:B7:5A:B1:AC:3B:F2:0B:F3
            X509v3 Authority Key Identifier:
                keyid:70:BB:5E:54:F2:74:8E:CB:5D:86:98:D3:79:33:9C:C1:5F:32:B8:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLteVPJ0jstdhpjTeTOcwV8yuJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dc3246-c85a-46df-8c30-48cee26c55bb/1/cLteVPJ0jstdhpjTeTOcwV8yuJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4e:e8:bc:21:72:53:4c:5e:00:36:a4:06:27:dd:f7:2e:d8:
         94:54:1f:4d:4b:d3:88:e0:b4:b2:a7:4e:54:6c:15:2b:a5:94:
         bf:f5:ea:47:99:6d:de:c1:41:8e:32:bb:3d:a7:98:a9:7a:e2:
         a2:ba:00:bd:01:eb:31:5e:4d:20:a7:9f:0d:82:3f:bd:31:2d:
         e8:ec:fc:45:00:b1:75:88:39:58:c6:da:ca:cd:ae:a2:ab:d6:
         54:10:a2:98:85:46:31:51:6e:ea:da:c1:83:2c:67:2d:cd:bf:
         f3:9c:26:bb:6e:34:69:3a:67:06:5c:43:22:36:5a:79:34:6d:
         2a:73:7a:f0:d0:de:bb:a2:4e:3a:93:25:88:0e:82:53:da:e4:
         df:8e:ab:7d:e5:53:af:48:ec:f5:07:d6:d2:30:6c:92:c1:2b:
         43:f4:6d:84:cf:a9:3d:39:81:2f:7c:67:05:0b:e7:b2:0b:b7:
         7c:23:57:c4:d1:65:05:2a:cd:21:88:d7:56:cd:18:b3:84:9d:
         bb:83:33:06:8b:ca:7e:b6:c7:87:dc:bd:07:68:6b:30:81:0e:
         87:29:ee:26:ae:59:e3:7b:1e:1c:a1:bb:1f:6d:21:d6:b0:9e:
         15:5c:d0:2b:9b:eb:b0:68:be:08:f4:6a:b8:1b:7f:77:31:04:
         89:37:17:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:29 2025 by rpki-client