Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File:                     5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier:          PszNZkAqsPv7WZONAOCxwUUliWLMb/H9KD0nWqqVIuI=
Subject key identifier:   34:55:B0:2D:02:40:D7:A2:E6:46:11:12:49:9A:04:BD:C8:4B:8F:2F
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer:       /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial:       0199FC5889629A83CA94C5D75879240DB963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number:          099C
Signing time:             Sun 19 Oct 2025 12:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:24 +0000
Files and hashes:         1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: XFKN0IEbUnJG7PvwPO8XebbJjx9n56C3Ozud+DmUlSw=)
                          2: xKaI03GURyzSZb-rRcYioTYAybk.roa (hash: HlTvUY61ftuf4HfBCvEW2aFKorP77hcqRc1NgwCXzCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:89:62:9a:83:ca:94:c5:d7:58:79:24:0d:b9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
        Validity
            Not Before: Oct 19 12:01:24 2025 GMT
            Not After : Oct 20 12:01:24 2025 GMT
        Subject: CN=3455b02d0240d7a2e6461112499a04bdc84b8f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:50:c5:94:dc:a3:f6:db:ac:2a:2b:e6:2b:6b:
                    6e:b9:a0:77:07:38:1b:56:65:11:1c:71:86:3e:7d:
                    88:86:06:c7:d6:84:35:51:6f:5f:3a:7f:f7:2d:11:
                    4c:d2:8e:38:66:36:c3:c4:32:0a:55:05:7b:48:36:
                    29:87:ad:02:45:4a:85:e2:ef:54:ae:88:11:fe:57:
                    c0:d5:0b:c9:fa:62:ca:51:96:60:1a:c8:ae:bf:e2:
                    e7:9c:13:28:6f:11:2e:c4:b2:c8:74:a1:a7:6e:c6:
                    50:d7:7f:ef:bf:0c:36:41:5c:66:22:c9:31:19:fd:
                    ab:d2:ba:6f:f4:d1:f0:8a:04:61:2c:6e:44:1e:48:
                    79:25:17:7d:c2:42:79:ff:12:72:b6:9f:dd:31:f9:
                    f7:a9:0a:8d:89:6d:a1:f0:9c:2b:31:cc:ce:07:88:
                    0d:54:15:39:7a:ff:3f:ce:e1:f2:77:a7:57:ce:b1:
                    ce:23:64:99:1d:8b:ae:bc:05:07:f8:70:08:ef:a7:
                    9b:ea:92:23:33:21:25:23:b9:0e:dc:b9:05:be:7c:
                    95:7d:da:ad:7d:54:09:6f:19:77:a4:98:e6:85:2f:
                    09:4a:f5:33:ab:f8:eb:08:19:dc:97:1b:34:3f:7b:
                    00:e2:05:19:cc:cd:b7:73:05:88:9c:58:2d:70:23:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:55:B0:2D:02:40:D7:A2:E6:46:11:12:49:9A:04:BD:C8:4B:8F:2F
            X509v3 Authority Key Identifier:
                keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:05:95:ee:25:50:f7:10:d3:12:a4:39:ae:38:36:c1:66:
         fb:74:a9:5c:dc:2a:48:e3:d4:e5:34:11:72:94:81:f2:4c:d9:
         cf:25:1a:82:37:e8:05:28:5a:e1:28:26:24:ab:8c:65:f0:86:
         ac:d1:65:25:cf:c2:42:a3:61:42:1e:e1:e1:b9:74:ef:05:9e:
         19:95:6f:2d:12:dd:ec:a5:a6:14:66:a1:94:97:65:b1:1e:3c:
         e6:59:f6:bf:e8:36:39:28:d9:b3:aa:f4:35:62:5d:76:ca:32:
         5b:84:48:5a:53:60:6b:2b:6a:9e:44:d8:01:a8:87:81:06:1b:
         37:ea:11:f8:1c:4e:ec:21:c8:c0:e4:fc:5d:62:ad:a2:f0:19:
         15:c5:70:d4:b7:d7:10:e6:4d:58:eb:66:da:81:3a:92:f6:fb:
         49:63:a0:14:b2:75:3f:b1:48:52:0e:20:03:bc:ad:7c:71:a8:
         3f:53:bc:b1:96:b1:fb:ac:93:3b:d4:18:5d:3f:ac:f1:5b:96:
         e6:6c:f3:a2:92:0c:38:7f:3a:52:ec:a4:67:fd:92:3b:56:3b:
         86:f3:30:30:48:01:b8:15:46:a4:22:df:9f:3b:f2:f5:46:1d:
         9b:a9:1c:f3:52:43:f0:de:f9:65:ba:66:f6:c9:dd:71:75:09:
         97:5f:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:45 2025 by rpki-client