Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File:                     h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier:          LJjFR4o5JMsrh96iMBZKfLemKugznSaqv7aqItrv5aM=
Subject key identifier:   7F:BC:93:43:32:F6:C3:B5:5A:6B:09:F4:F6:A9:DD:FC:4E:8B:C6:93
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer:       /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial:       0199FC58D452B7C5D76E7C0A68A5CAF748B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number:          1374
Signing time:             Sun 19 Oct 2025 12:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:43 +0000
Files and hashes:         1: Xaf_adaEk34l87Y0UzQQZjHD3uU.roa (hash: RtEuhMllYELC+PU6yqfyctqQo+07f0YVdbie5OODqqY=)
                          2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: s4xHpfoJp8qYTOr2OBzZqVUYituODqYHhB8o9sbu29A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:d4:52:b7:c5:d7:6e:7c:0a:68:a5:ca:f7:48:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
        Validity
            Not Before: Oct 19 12:01:43 2025 GMT
            Not After : Oct 20 12:01:43 2025 GMT
        Subject: CN=7fbc934332f6c3b55a6b09f4f6a9ddfc4e8bc693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:bd:f7:81:b9:17:d9:8f:1b:6d:c9:13:de:
                    a7:ff:43:83:4e:4f:7e:3b:7b:0d:09:01:8c:8b:81:
                    2e:70:5a:53:c8:b4:39:c9:5e:8b:2d:4a:b3:e0:ce:
                    fe:3f:3b:79:df:51:4a:60:df:3b:d0:b7:e6:fe:c1:
                    16:b3:66:dc:15:c0:f7:e0:5b:fc:55:77:54:0b:e9:
                    53:8d:95:b0:0a:f4:d0:a4:34:56:27:ad:3c:99:5a:
                    bb:89:98:05:f8:6c:c6:7b:33:9e:64:da:4d:32:2f:
                    a1:c7:63:9b:e7:0e:b9:25:10:d6:f0:fa:84:d8:fa:
                    a6:94:9f:7f:a2:31:7a:cf:58:a1:e4:63:93:8f:3f:
                    83:f5:2b:8e:53:59:38:38:6b:0d:2c:06:c9:8c:d9:
                    f6:9d:65:e9:73:4c:b6:60:7a:12:d9:d7:ce:be:19:
                    19:c4:d5:b1:ce:19:21:4f:bc:dd:b7:b0:0b:c1:8e:
                    b6:b5:b3:2c:79:ed:61:94:b5:ea:bb:dd:d5:d3:d7:
                    35:0b:f4:8d:67:4e:a1:42:cb:4d:83:a0:6b:08:09:
                    5f:09:95:09:d7:c3:17:1d:3f:95:bc:cb:06:8d:08:
                    22:43:ce:d0:e1:f8:b2:65:84:59:bf:93:31:ea:81:
                    e1:84:ba:69:59:3d:4e:ba:c5:25:4d:22:1c:a0:69:
                    71:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BC:93:43:32:F6:C3:B5:5A:6B:09:F4:F6:A9:DD:FC:4E:8B:C6:93
            X509v3 Authority Key Identifier:
                keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:65:a6:fa:e3:9d:a5:44:6c:f7:f2:55:56:c4:90:d0:5d:f1:
         05:66:bc:12:e6:30:8d:2a:47:4b:cc:00:ee:1d:b1:11:1b:2c:
         ff:45:99:41:2a:82:29:5b:ae:2c:27:02:40:7f:c2:e3:06:ac:
         c1:ee:bc:0c:4f:da:c4:84:12:5f:a8:29:25:ec:11:5d:29:85:
         0f:81:23:34:f3:c4:2a:6a:fa:37:d2:80:bb:4c:be:ef:e9:4f:
         7c:4f:69:d5:f3:ec:56:91:fb:9a:ff:5d:1f:71:57:bf:be:be:
         ce:a1:05:8a:66:16:d8:46:93:a4:ff:66:15:41:a4:8c:4a:fe:
         59:50:99:68:2b:cd:f8:d2:95:3b:b3:71:b4:82:30:f5:87:19:
         6f:f9:02:b8:dd:a9:1b:e3:6e:83:de:2e:bb:e4:52:ac:fc:d6:
         22:01:db:9d:bf:71:85:3d:7a:0c:9f:01:16:bc:b7:5c:11:a5:
         d8:42:c9:34:c6:43:6f:c1:fa:46:42:d8:99:d3:47:4f:9a:0b:
         fe:4a:2a:c5:06:c8:e8:9b:e6:b0:3b:c0:70:5c:94:08:a3:bd:
         aa:15:0d:df:1e:0e:b2:1d:72:92:ec:62:27:06:e5:35:21:63:
         85:8b:fe:ea:2f:43:e0:ad:83:3f:0f:4b:3f:0a:01:84:ea:c1:
         72:a6:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:03 2025 by rpki-client