Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
File:                     S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft (raw, json)
Hash identifier:          lUiXOFo7mhi91I8sEHghkkCzUQQovubCUg0HKLeacKo=
Subject key identifier:   B8:F8:58:D1:00:68:54:2E:2D:3B:7F:2B:69:27:ED:EC:25:00:BA:AC
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Certificate issuer:       /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial:       019A03A407D1D445B1C5EEEB5DB06BB3733A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
Manifest number:          04AC
Signing time:             Mon 20 Oct 2025 22:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 22:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 22:01:12 +0000
Files and hashes:         1: 0_z69Mp8Uq-H2QPlCa0CLWX2coU.roa (hash: wm+6P/OKtHhF/O/CkulyZkvoYkTpsb5odPnFIekRy3I=)
                          2: 38pIrQ1QnBg71pfob_zDIDUIiFQ.roa (hash: U9USjryy/F+R/DZGDivAyocf94409+iay7FO0stAHGw=)
                          3: N0lzm-3vygtdiWRBn9eXgxBlyZI.roa (hash: 7Y1+rEyMo7py1HRJqnnqE/nkyygO/OisK6QTtH8xA/o=)
                          4: S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl (hash: Rvn1EsxY4+6v7yPE69m4rco5UVo73J6on41ZiWTLVv8=)
                          5: XMt-aoKNBYw2mRgLlCcfOfS37es.roa (hash: G7hUI9W+vjvJqWM1E6n7TXAiBwlaOz/lSk1JZkA8kgc=)
                          6: _Khf-n0vZfCAmh5Kz1BybwMWUtk.roa (hash: kt8gl4Nj76yRL5CdwZbXkVqwHK70gqMfG0Z0kpN+NYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:a4:07:d1:d4:45:b1:c5:ee:eb:5d:b0:6b:b3:73:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
        Validity
            Not Before: Oct 20 22:01:12 2025 GMT
            Not After : Oct 21 22:01:12 2025 GMT
        Subject: CN=b8f858d10068542e2d3b7f2b6927edec2500baac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:dc:cc:28:7a:9a:54:86:42:cd:bb:c3:bb:
                    50:75:52:37:c3:69:52:95:7e:26:44:fd:6b:74:98:
                    11:a1:25:5d:29:1f:51:46:24:2e:37:2c:0c:8b:9f:
                    df:8c:e3:cd:f9:c3:7a:4d:48:6a:7c:75:60:a0:b5:
                    8a:ec:f9:ca:bd:56:a7:e6:79:a8:9a:40:ea:c7:4e:
                    b1:b0:de:e2:17:18:a1:8b:57:96:9f:a5:20:77:6e:
                    87:0b:03:d7:32:bb:d6:90:e6:89:94:51:50:b9:4a:
                    7e:82:b7:ca:e6:bf:5e:06:00:2b:3e:8c:24:7e:ce:
                    fe:56:2b:01:5a:a1:30:4a:b8:6a:93:73:88:2c:90:
                    79:3c:3a:94:ba:34:e0:9e:cb:3d:1b:cb:99:22:b0:
                    d9:b2:55:4c:d3:00:4a:32:33:dd:18:b1:28:10:2a:
                    07:44:54:ae:6d:de:f8:70:34:0b:b4:55:32:f5:eb:
                    1f:77:76:1c:29:c0:b1:ce:c0:4d:32:4f:5c:e6:13:
                    dd:35:18:ec:eb:34:a0:cf:52:32:ca:cc:af:23:70:
                    f1:ff:fb:34:0f:5e:9c:d1:f0:79:33:07:2f:12:53:
                    35:02:7e:61:2f:99:e0:d4:40:b4:23:6c:8e:8b:72:
                    19:2c:3c:6e:e7:e8:b0:cc:ab:0d:e8:ad:69:bb:db:
                    da:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F8:58:D1:00:68:54:2E:2D:3B:7F:2B:69:27:ED:EC:25:00:BA:AC
            X509v3 Authority Key Identifier:
                keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:32:68:ec:e9:df:4a:3c:fc:72:13:4a:f0:8e:77:6f:98:5c:
         03:17:cb:b3:7b:6b:5c:f3:35:d7:a6:c5:a9:f9:15:e6:1e:4f:
         b9:0c:f3:f8:7a:21:d6:9c:a3:c7:04:15:27:ca:a2:92:f6:b0:
         04:95:10:b6:3b:66:92:88:27:92:7e:41:27:da:6a:43:75:a7:
         8f:fd:68:91:2a:66:87:c7:2e:3a:ce:b7:e9:f8:f3:7e:b5:f5:
         f4:6d:45:43:24:6a:9e:89:6f:fb:f5:f5:82:03:84:d9:c3:c0:
         61:99:9a:7f:7b:da:a3:a8:d2:08:6a:17:b8:db:ef:2d:7f:26:
         d7:d2:fd:7b:74:e3:26:46:b7:50:cc:de:a3:48:b7:6d:42:61:
         eb:ce:3d:5a:c3:8d:2b:f9:d4:a5:da:bc:87:27:db:2a:e3:6a:
         88:e2:a7:3c:96:f6:6a:5d:c9:cb:e6:28:5c:4e:e1:78:23:05:
         6c:c7:4a:c4:71:6d:0e:da:e0:a0:ac:db:9b:56:de:c1:09:e3:
         5d:6f:78:06:ae:ca:11:6b:55:8e:81:7f:e0:5e:77:16:c2:3f:
         37:5d:12:78:1f:c5:31:e9:06:eb:1b:60:d7:1f:11:d9:bf:1d:
         8b:98:b8:6d:a8:59:1d:1b:c4:a6:ee:56:da:3e:2c:9a:f4:d3:
         f8:e1:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:54:43 2025 by rpki-client