Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File:                     XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier:          FfMibgbvorTLYOBNSf8ltLtUmaVryMirPMBFbRrwgb0=
Subject key identifier:   CF:7A:B0:A6:7D:C6:2B:66:9C:AE:81:15:92:2F:D4:0F:8E:B4:A0:65
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer:       /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial:       0199FEB4F6B022E9A2ECEE1E321E7AAE177F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number:          05C3
Signing time:             Sun 19 Oct 2025 23:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:36 +0000
Files and hashes:         1: 02wqSv6S3QfGQclsARr7QXNvdWI.roa (hash: blfoT2HbR+GD9/4BT0/OCiD+iemp7TQrPXABrjQFnJw=)
                          2: RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa (hash: Y4/cSuW1UOGa89zMuz5QH1r95dZUNstGhg+JOqcELak=)
                          3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: 9DduC8/VchfP+bh+cdYMsFUXQz9tCu6/2261a49NFaU=)
                          4: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:f6:b0:22:e9:a2:ec:ee:1e:32:1e:7a:ae:17:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
        Validity
            Not Before: Oct 19 23:01:36 2025 GMT
            Not After : Oct 20 23:01:36 2025 GMT
        Subject: CN=cf7ab0a67dc62b669cae8115922fd40f8eb4a065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1c:9c:63:d6:89:cb:69:55:09:93:ff:0b:d9:
                    72:ba:19:24:23:d5:81:3f:c8:bd:d1:52:a5:43:d3:
                    27:64:84:04:f7:37:b5:c1:76:b1:fc:bd:94:81:90:
                    1c:4e:57:f6:d0:c6:ae:b9:64:e8:57:7e:23:12:d8:
                    70:39:81:d9:93:77:a2:35:b4:da:a3:fe:33:a3:c7:
                    0e:50:db:85:1f:b3:ab:25:94:e0:77:1b:b7:27:33:
                    76:88:77:7c:ea:a6:4f:69:1b:77:cf:a1:0e:1f:23:
                    7e:1d:ef:3a:94:41:f2:f2:bd:3e:07:a0:49:ce:e0:
                    24:80:06:20:c1:b0:ab:64:f3:0a:2f:65:b7:78:22:
                    25:b4:11:ac:4f:44:50:f0:f5:48:ff:33:89:29:da:
                    0f:44:66:92:6e:2e:bb:5d:84:4f:ca:f8:c5:40:f5:
                    2d:91:34:61:8e:86:f8:bc:f3:99:72:70:6f:66:4b:
                    6f:6b:39:88:c9:0d:70:b8:33:cd:96:f7:1e:e6:60:
                    ed:df:93:25:f9:10:7d:e2:fe:28:84:20:55:32:7b:
                    6c:dc:a0:a8:82:6b:9c:0f:0e:5b:81:67:c1:aa:07:
                    a0:c0:17:1c:0e:9e:44:b0:67:40:9e:0b:eb:7a:94:
                    10:de:7d:5d:7e:3c:f2:2d:ce:25:8b:40:b1:2b:57:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7A:B0:A6:7D:C6:2B:66:9C:AE:81:15:92:2F:D4:0F:8E:B4:A0:65
            X509v3 Authority Key Identifier:
                keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7e:99:c2:b3:87:c0:da:b1:30:3f:be:19:47:95:62:23:78:
         8d:82:10:76:d1:00:8a:3f:65:76:46:77:ad:57:5c:a2:cf:c0:
         38:b6:14:c4:35:49:c6:30:9e:2b:12:19:5c:e0:bc:9e:87:86:
         5d:d9:ac:1a:8e:eb:7d:00:57:84:10:40:c3:2a:04:29:ea:74:
         d8:32:09:db:7c:4c:eb:b3:b3:f9:9f:16:5a:b6:21:d0:0a:e4:
         e0:39:6c:ee:7c:58:34:09:4d:77:ec:c8:67:25:37:00:ad:65:
         b3:98:fe:e5:df:15:82:0e:34:c0:d1:b6:ec:09:d6:01:13:49:
         8b:f3:64:bd:b3:5d:61:55:95:0f:04:56:02:48:64:16:fa:da:
         a7:db:16:1b:c9:67:b7:d7:9c:75:ed:df:b4:f2:9d:b7:1f:56:
         db:6a:18:b6:7f:bf:f9:dc:60:17:42:9e:dc:2b:43:8e:36:2e:
         1d:12:bf:f9:cd:aa:6b:8b:da:b0:17:ac:24:34:ae:49:2b:42:
         5b:d3:c6:e2:de:dc:e4:e9:45:22:ea:1b:1d:5e:d9:50:2d:78:
         e6:91:f2:03:04:62:8c:35:71:42:ae:ec:83:6d:57:3e:c0:e5:
         92:d2:f1:7d:90:65:97:50:95:20:dc:fe:9f:99:8e:cc:d5:28:
         9a:99:e3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:17 2025 by rpki-client