Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
File:                     V5Sv215qGIV4CSClT_qCQI6oW6E.mft (raw, json)
Hash identifier:          DJ54ylcKWsMqg+ztfexjjH0L1XVAmZI8UQ1kyhZXgJE=
Subject key identifier:   9A:63:D3:6D:3D:6F:B0:1C:1D:D5:8D:8E:EA:0E:B1:C3:99:F7:32:6E
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Certificate issuer:       /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial:       0199FE1044D1D5E7511069696190F4CD9AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
Manifest number:          1709
Signing time:             Sun 19 Oct 2025 20:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:42 +0000
Files and hashes:         1: 0Q4TTPSEDP2vwJw57Q98mNyLvHY.roa (hash: g+tt3wTt25Gy9GiGDu9XZL7vdB+saK0K7FaXmAomO5Y=)
                          2: DHjfwuWAYJJh7p_MCkbsmnyD1j0.roa (hash: LUkdazz94OiT/KAXqeQfCgc3awAt3nr20omKP9jyUv4=)
                          3: KDqp0KJBu-4WRFmlODTZGvtEzMo.roa (hash: sgx3u4OlPaMIX30o9Pw/sWgXitROdXpHDBcbHgo10iA=)
                          4: Tbcx9w57JlajlSr_D5AgzfLOVcY.roa (hash: 9ZMFnkZJalflC1y21xwgngk/wJpk4yIEOnHaqOzi8Nk=)
                          5: URhndB2z4bBAh3ApjFvckcVFg-o.roa (hash: 8fCApbL0btkJ/iY0cLD4A30Cl8V8tS6A1W9MGWYX73Q=)
                          6: V5Sv215qGIV4CSClT_qCQI6oW6E.crl (hash: AgzRd8FWIJNAfIoY9hMcBf0HBZRI9MDkC7x3bGlG/GY=)
                          7: uAM4WpW0Sk1wUAV5w6VXPbJv9MY.roa (hash: GZ+0j2rVpXrpodZjQH1uYXWWYgFVWGNe8kdd6v4smBQ=)
                          8: wN12RJcK-_CRebSzXn9J25Yr5VM.roa (hash: U3IOSsKfeLNTBtDNIBErlYBjoE5txf9cmKxG7Wkj8ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:44:d1:d5:e7:51:10:69:69:61:90:f4:cd:9a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
        Validity
            Not Before: Oct 19 20:01:42 2025 GMT
            Not After : Oct 20 20:01:42 2025 GMT
        Subject: CN=9a63d36d3d6fb01c1dd58d8eea0eb1c399f7326e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:0f:01:d6:52:90:9a:40:e3:b0:db:a7:71:
                    22:11:ce:d7:93:2b:61:30:6a:46:70:be:1c:83:24:
                    28:a6:15:e4:20:95:fb:5a:a2:37:d6:7d:a5:71:5c:
                    56:58:c6:ab:96:82:86:fb:aa:b0:3f:ed:a0:e9:1d:
                    28:72:9f:e3:94:bd:b9:14:2a:bb:e8:35:57:6d:fb:
                    64:f2:23:5a:64:2b:2d:c5:52:33:8f:08:2f:cb:f0:
                    d7:ca:97:91:84:45:ed:5a:29:a2:4e:06:4f:65:b4:
                    6c:ca:5c:47:49:84:68:99:eb:4c:42:ce:28:b9:80:
                    09:de:3b:e1:9c:8b:22:fc:09:12:bc:69:4d:b9:11:
                    76:4a:d7:0b:89:ae:8d:c3:fe:6c:ea:bb:1a:34:52:
                    bb:23:3a:2b:02:0d:ce:3d:9d:22:e0:cf:86:83:c5:
                    48:d0:00:1f:9b:5c:8a:12:52:3b:79:b8:e5:59:bd:
                    f0:ce:2d:8c:55:c9:da:55:29:dd:c3:d0:b3:ba:d0:
                    6d:ff:43:e7:a1:bf:ad:39:01:62:04:93:b2:5b:bb:
                    90:c6:2d:37:86:79:9f:71:ea:f6:17:fd:6d:24:3e:
                    26:7a:6d:0e:1a:56:5f:20:c9:b5:12:23:84:2f:84:
                    ba:66:27:28:49:15:56:54:1f:3c:2e:cf:ad:1a:18:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:63:D3:6D:3D:6F:B0:1C:1D:D5:8D:8E:EA:0E:B1:C3:99:F7:32:6E
            X509v3 Authority Key Identifier:
                keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e1:55:48:99:c4:e4:3d:90:c0:a4:ae:ec:18:ac:f5:23:d6:
         34:77:fe:f1:40:0b:29:24:65:ac:18:80:5d:fc:7b:82:24:0f:
         11:41:9a:36:a1:e3:e2:60:31:ea:da:71:94:52:1f:e4:d5:de:
         75:c3:46:9b:f5:ee:7f:74:ba:7b:47:cf:da:6e:52:4d:0a:43:
         1d:11:4f:e5:43:ab:3f:c1:7e:76:6f:c9:c7:60:d2:93:56:cb:
         4d:b6:f0:df:e7:e1:c6:1a:66:8e:f2:ba:18:c3:47:3a:be:4d:
         73:24:85:42:ec:d2:37:f9:a8:fd:af:59:22:12:8e:87:6c:a9:
         99:f1:d0:38:b2:f6:d9:a4:27:c2:58:89:af:e4:e0:75:eb:c5:
         96:4d:70:64:8e:27:dc:dc:5e:c4:7f:8c:b2:87:cb:ce:0b:1d:
         d8:88:36:48:22:ce:5a:44:c4:03:16:e1:9d:3c:0c:07:34:77:
         7b:6f:d5:93:f5:6e:b5:13:14:5a:96:66:de:93:02:4c:08:a2:
         af:c1:e5:44:86:e3:7b:60:48:3d:9e:39:43:aa:ab:d7:96:2c:
         d9:21:ea:da:1f:70:ae:49:ab:c1:87:b9:7c:42:bf:b2:fc:50:
         91:31:37:8a:fb:5e:87:a5:1e:a0:27:f3:37:89:99:d1:70:57:
         f2:b3:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:45 2025 by rpki-client