Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
File:                     t5msmJxEsuHNq8JY6WypPKrUvWQ.mft (raw, json)
Hash identifier:          SYY+KlJj9j+wEc1jbDWgoGiIgbWn+qszHgWZpwRx21U=
Subject key identifier:   69:B3:D0:82:2C:9E:76:5E:AC:41:F1:49:BE:34:9E:3C:D2:30:09:A5
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Certificate issuer:       /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial:       0199FBEB150765590FEEAEBF4B36E3A98785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
Manifest number:          0A84
Signing time:             Sun 19 Oct 2025 10:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:51 +0000
Files and hashes:         1: N5hZORY6BH0_7cHTBNOVNkVCEYU.roa (hash: WR+MD/xxBtQVHPY1qaKKu6KnkMSkFI0jT+q93Z2CIUM=)
                          2: eG7qPRRyMuGDnTaL5wdOylUl9yc.roa (hash: wEVy8BCY3//obLJ2YEaxXlAcf2i+3jpwZETui93UpjU=)
                          3: eZ9lsBSBE-9HylowSORYyQP1H3Y.roa (hash: 4bc1g2EfiPBsisazV/A2lyPDwqt6FApY78qkMRjIEcc=)
                          4: t5msmJxEsuHNq8JY6WypPKrUvWQ.crl (hash: iMQgwpUKMLAzByhhwm8wZ+ZINYkgV1I5T27LyEiC3ao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:15:07:65:59:0f:ee:ae:bf:4b:36:e3:a9:87:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
        Validity
            Not Before: Oct 19 10:01:51 2025 GMT
            Not After : Oct 20 10:01:51 2025 GMT
        Subject: CN=69b3d0822c9e765eac41f149be349e3cd23009a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:89:b0:b3:1b:52:99:8a:43:d3:2b:5c:b8:
                    35:80:b1:21:ac:68:cd:25:d1:64:6c:29:03:2c:42:
                    26:e2:22:73:a8:f2:87:48:24:95:67:8e:18:12:5f:
                    98:dd:02:ea:61:0b:8d:73:0f:32:04:f1:bd:a7:6b:
                    86:7c:07:38:67:28:ae:8f:f1:52:2c:e8:81:ca:e6:
                    61:13:ea:ea:e0:05:58:fa:8f:fb:31:69:65:82:5b:
                    bf:1d:0e:c2:36:d7:27:e5:7d:2d:df:bd:b2:6a:4f:
                    fd:dc:4a:f7:83:a6:c3:fc:a7:12:7f:82:7c:99:10:
                    bb:86:be:59:0a:29:e1:15:3a:ba:24:ae:83:68:55:
                    d4:d3:8f:aa:c1:29:22:77:ac:f6:30:99:05:d9:de:
                    e8:f9:04:f2:43:f8:6e:ad:92:6e:c4:9e:48:66:77:
                    63:8a:26:cb:28:fa:53:11:c3:51:c7:40:17:91:21:
                    97:69:2f:d3:ff:22:9f:7d:62:01:bd:3d:a2:0c:c8:
                    10:49:7f:97:b7:10:f8:a0:10:d5:98:42:c7:e8:c4:
                    89:60:3e:86:78:5a:7b:5d:a0:36:a0:36:df:92:2e:
                    d3:47:45:36:47:06:9b:ce:da:b6:ca:24:51:b0:01:
                    5a:82:1a:67:36:59:25:5a:ce:df:62:c2:38:64:fb:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B3:D0:82:2C:9E:76:5E:AC:41:F1:49:BE:34:9E:3C:D2:30:09:A5
            X509v3 Authority Key Identifier:
                keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ad:37:3a:b6:4e:91:9c:51:43:8b:35:62:29:75:32:39:4d:
         a6:48:5c:66:d6:7d:79:b1:ea:1c:bf:20:98:7c:18:8b:01:bb:
         a2:e4:41:29:f7:24:fb:a3:44:30:4b:bc:b3:6c:81:a1:65:42:
         23:96:c6:70:f7:c9:45:e7:98:19:03:e6:67:4b:09:cc:a9:dc:
         7a:73:9c:08:70:d7:8d:c8:9f:d5:3c:55:f5:96:d7:54:02:35:
         ce:dc:ef:99:ea:db:e4:66:02:b8:db:69:3f:f8:c5:ee:17:15:
         f2:bc:1c:12:07:50:0d:00:c6:1b:8c:fe:43:b0:2d:5b:50:ac:
         51:4f:11:16:50:ed:23:5b:99:e0:55:97:67:11:67:11:71:38:
         8d:95:92:20:fe:6a:ea:67:1b:3e:80:2d:f0:02:e6:ad:2d:a8:
         f6:db:14:a2:7a:2d:85:08:73:a7:14:ef:21:4e:bf:f0:4e:47:
         8c:85:d7:8c:91:8b:a2:d7:f4:09:0d:9b:77:56:fb:c1:f4:e7:
         4d:7c:82:65:b0:42:e6:72:32:ef:d4:e1:c2:b1:84:ac:5c:09:
         34:b3:db:0c:9b:2e:2f:8a:df:e3:ed:30:f4:b0:bc:ee:e8:97:
         8d:cd:c7:21:29:8a:24:f9:11:ad:53:62:ba:d1:30:09:bc:a2:
         96:81:5e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:26 2025 by rpki-client