Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
File:                     5S2LXLp8LSuK8EbrfzEBBawMCaw.mft (raw, json)
Hash identifier:          2/ySxVhTuxZydKqJbUoDPJGhmc4i4PK5i+zwn8n3xQs=
Subject key identifier:   AD:F6:36:47:19:2B:86:96:CC:46:6C:3A:91:98:6C:4B:0C:12:A3:97
Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
Certificate issuer:       /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Certificate serial:       0199FC58514608547D7C26ACEE6502867860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
Manifest number:          04DE
Signing time:             Sun 19 Oct 2025 12:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:10 +0000
Files and hashes:         1: 5S2LXLp8LSuK8EbrfzEBBawMCaw.crl (hash: WnpEtRgvYzFAVjqm76HTsLKbaEPbjyHd+EVjOx/8rls=)
                          2: GuglbdgQwP1s68zPxpBUKeDH1GE.roa (hash: Sf12fpSS/gSIfCrOMCQf0QxlhogqDHOYf+4YlIW4mDA=)
                          3: bXAo7mVEmX8iLg6GBEHUZO92vHY.roa (hash: VzCJRz8Ej6xsupU4wBQwIcnAcaQ/S8QtaCA4CMwW82M=)
                          4: xXGe4wyq05lrsF2tc38x8ySFe-g.roa (hash: ILPVEPIY9D2xyNF63XsnQpEMnM3xKobt0LuSW1aSmX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:51:46:08:54:7d:7c:26:ac:ee:65:02:86:78:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
        Validity
            Not Before: Oct 19 12:01:10 2025 GMT
            Not After : Oct 20 12:01:10 2025 GMT
        Subject: CN=adf63647192b8696cc466c3a91986c4b0c12a397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:b9:3d:c8:45:06:96:44:34:27:fe:c4:21:
                    ef:01:4a:7a:2f:99:2e:31:38:c8:16:cf:50:ec:49:
                    c8:b2:7f:5b:94:bd:d2:6e:4f:50:6f:12:f7:6a:d7:
                    73:d3:ee:4d:a6:9f:9a:c0:b3:6d:b6:37:21:4a:c0:
                    ee:98:ce:73:a5:f3:49:12:6d:b2:88:31:87:ba:1f:
                    d8:ac:ec:10:f2:c8:59:07:4e:36:3d:ab:2f:5b:36:
                    e9:f7:a0:fa:f2:ac:4a:67:0c:51:f1:4b:b1:ab:95:
                    a3:46:1b:37:9c:99:94:15:74:c0:0d:c7:e5:1e:a4:
                    76:dc:b6:98:be:66:9c:35:75:21:19:66:a1:c9:be:
                    13:6e:50:e0:04:7d:de:e2:b8:dc:a8:75:08:a9:67:
                    06:12:85:8a:42:6b:f2:05:0e:73:1c:30:b9:1b:92:
                    2f:a4:e1:cd:39:1b:9f:52:f0:8e:0d:1b:8e:c6:81:
                    3e:cd:97:e3:88:8f:b7:9e:48:94:51:74:b2:54:31:
                    47:a6:34:c2:98:a3:56:a3:a3:2c:1d:76:42:08:4c:
                    91:f0:6f:fd:57:ea:cc:5f:9c:a1:97:59:ef:0a:fa:
                    13:b9:3e:03:47:9f:3d:8f:19:b5:f8:8f:fc:94:1a:
                    53:cf:c6:74:6e:a0:a5:9c:f1:2f:29:14:4f:66:cb:
                    b6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F6:36:47:19:2B:86:96:CC:46:6C:3A:91:98:6C:4B:0C:12:A3:97
            X509v3 Authority Key Identifier:
                keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:89:4f:97:dd:19:14:14:11:8b:f4:dc:22:c2:82:05:6c:
         00:dc:af:3f:54:3b:c1:dd:01:c1:51:0e:34:74:ba:f3:d1:c0:
         b7:47:24:02:c4:cf:8e:92:6c:55:c2:60:04:ca:0b:84:58:ab:
         1c:ed:e5:c6:0b:63:e7:1a:8b:a6:b9:b7:20:77:a4:f6:72:f2:
         6e:84:50:50:66:31:f6:54:96:2c:a0:85:7b:73:b2:00:1f:6e:
         6c:a9:65:2c:8c:58:3d:3f:2e:ed:80:72:c6:34:b3:0d:26:92:
         68:81:3f:ed:64:9d:ee:b1:4a:72:34:c8:a2:ee:1b:39:39:af:
         cf:31:41:9f:7f:cb:32:49:ff:06:63:53:fd:5b:b9:b0:3b:3f:
         33:14:54:a4:c8:d2:dc:d4:68:ac:c5:71:b8:bc:70:32:b4:92:
         d6:83:63:7a:7d:ea:96:82:0a:56:da:4f:a8:85:f6:f4:60:97:
         25:cf:40:bc:20:fd:d1:ef:90:fc:1a:e2:94:a7:4f:a3:1e:a4:
         b0:f9:bb:db:4b:aa:89:3f:f8:63:2a:91:9f:73:19:66:bd:0f:
         ac:e6:da:44:d1:be:a9:52:1e:77:73:d4:73:7f:6e:27:fd:8c:
         94:b0:fd:39:97:50:d3:7b:28:c9:91:7b:26:51:f6:11:3f:d2:
         a7:b0:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:56 2025 by rpki-client