Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
File:                     51qM71_SqPGFr_WajG692YNjrGc.mft (raw, json)
Hash identifier:          pv4BtsUiisfxO9Jm8PMamH9aRDSyOHIx+edUlsT+ZzU=
Subject key identifier:   44:7D:DD:CD:42:4A:EC:18:8A:0C:6B:C0:C0:0C:D3:05:38:D7:A2:EB
Authority key identifier: E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67
Certificate issuer:       /CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
Certificate serial:       0199FDDA54186B684136A210D92A2B6E1B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
Manifest number:          0956
Signing time:             Sun 19 Oct 2025 19:02:47 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:47 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:47 +0000
Files and hashes:         1: 0IBqXjTVhcvD4lCSiVgJHykRKw4.roa (hash: Dumvxj6VzhZyR7xgjdh7+SNA6SS4v9smnXFYVL96Sao=)
                          2: 51qM71_SqPGFr_WajG692YNjrGc.crl (hash: +I0nT/ICH84HbVbX7nuxG4ve81A5w81gMUVmu2G24Bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:54:18:6b:68:41:36:a2:10:d9:2a:2b:6e:1b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
        Validity
            Not Before: Oct 19 19:02:47 2025 GMT
            Not After : Oct 20 19:02:47 2025 GMT
        Subject: CN=447dddcd424aec188a0c6bc0c00cd30538d7a2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:0e:2a:29:29:de:23:f5:53:62:d6:04:1e:
                    dd:be:10:c6:83:d2:0e:78:65:93:e2:06:2d:01:e9:
                    18:4a:62:7b:cf:30:d0:2b:72:90:a4:fc:6a:c5:44:
                    42:63:f7:0c:fb:a6:27:9b:0e:e4:c0:bb:87:2c:6f:
                    39:95:b9:31:9b:99:fe:99:e4:da:7d:6c:18:27:ad:
                    00:6e:63:ac:ad:95:bf:50:aa:9f:ed:a0:b6:8c:fc:
                    23:81:31:c5:57:03:04:f9:47:f7:1c:32:fb:00:17:
                    ff:75:32:2b:f2:bd:f0:61:69:de:5c:28:c5:4b:37:
                    7d:e9:78:95:a8:3c:7b:69:01:9e:56:17:bf:78:2c:
                    42:29:07:94:ce:f3:a3:2b:e6:85:e4:c9:63:dc:9d:
                    5c:f2:1b:11:64:21:df:88:fc:f8:1c:dd:d4:ba:f3:
                    ed:8e:fe:3a:88:e5:42:0a:55:6e:42:49:77:6f:89:
                    32:f2:74:38:f3:05:e1:44:13:e1:60:35:0e:00:73:
                    c3:b8:b0:78:b0:10:4f:6f:f3:47:42:b8:8f:a4:e5:
                    de:6e:16:80:a0:61:e3:61:13:9b:f2:34:9e:79:38:
                    44:7b:06:35:df:a2:e4:f9:df:ad:ad:00:29:f9:a2:
                    49:0b:19:7d:a2:7d:eb:af:c7:cf:75:9d:56:ac:e9:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7D:DD:CD:42:4A:EC:18:8A:0C:6B:C0:C0:0C:D3:05:38:D7:A2:EB
            X509v3 Authority Key Identifier:
                keyid:E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:72:c2:62:62:7a:90:43:e6:58:5d:23:5b:d5:fb:13:64:93:
         74:82:13:21:ab:53:b7:e2:a0:81:c8:35:6d:e2:b3:1c:ec:38:
         31:f0:7c:3e:59:45:ff:84:13:c5:de:7a:b3:02:84:4a:e4:8d:
         ad:e3:11:c3:17:e6:d5:75:f7:06:37:50:0d:6b:1d:3a:bf:5d:
         fa:43:99:cf:32:ab:68:ae:40:61:d1:48:6c:53:f4:5b:0a:cb:
         e8:f7:63:41:44:1e:22:ff:62:45:6f:ba:5f:b7:0e:92:bc:81:
         30:e0:7d:80:51:b2:a2:a7:bb:4b:23:59:c6:c9:58:61:01:45:
         15:f1:82:aa:39:48:c3:31:f6:8e:a2:7d:3f:e9:8f:49:9c:bd:
         11:ff:53:b0:a8:b0:58:ae:e0:31:b8:e0:a7:20:06:39:5f:d9:
         79:b3:92:89:ec:68:c7:fa:58:a6:db:3c:93:cf:a9:61:53:9a:
         4a:c8:e8:6f:e2:e2:fb:54:45:34:e8:49:34:9b:7e:b6:a9:cc:
         83:bf:31:c5:97:33:e4:4e:b7:d5:36:07:8c:b7:e9:1f:7e:63:
         b8:8d:29:ec:75:2a:8c:23:44:fb:f1:25:ec:ec:88:ae:a9:d4:
         b4:42:fa:85:de:f6:a5:fd:7a:1f:04:52:2f:82:6e:46:80:eb:
         2c:5e:3a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:41 2025 by rpki-client