Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File:                     cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier:          /vMx3t8RvHmhqnUvSYUNs4lFyyh0rPfaOcL2T2Y3bug=
Subject key identifier:   FA:E1:5F:16:88:53:7F:98:CA:80:E6:BA:C6:AC:72:A3:5C:66:A3:B0
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer:       /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial:       0199FF59AEEA23F6D46D8B4A0F308C0EF7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number:          E2
Signing time:             Mon 20 Oct 2025 02:01:31 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:31 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:31 +0000
Files and hashes:         1: AUKx0J4WNHpEIs7yN_p5Gj-AKQc.roa (hash: eENZl1wDIRgwnUAmEgxPXPDBi6xMrW0OqSMxiYMTiao=)
                          2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: 216nw29sRHI2iWmWdEm1ap2cmwfvYqFeqtrMN+2TSQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:ae:ea:23:f6:d4:6d:8b:4a:0f:30:8c:0e:f7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
        Validity
            Not Before: Oct 20 02:01:31 2025 GMT
            Not After : Oct 21 02:01:31 2025 GMT
        Subject: CN=fae15f1688537f98ca80e6bac6ac72a35c66a3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:fe:e9:23:79:7e:23:21:67:b1:9a:19:4c:
                    89:ba:3c:d3:39:ac:13:d8:9e:03:f9:0e:e9:56:e4:
                    4f:bf:79:d6:8c:6d:94:fd:03:02:e4:13:3d:b5:fd:
                    48:e0:31:ea:e1:b2:05:ff:5d:5f:44:54:8d:7f:89:
                    90:fe:4e:76:d7:5b:b6:45:d3:ea:dc:dd:77:62:b9:
                    1f:45:a5:ce:a5:a6:4a:8e:47:18:79:90:f4:c0:bf:
                    75:53:80:03:5a:30:d1:0d:e8:da:76:30:56:f2:56:
                    d4:d1:49:36:78:ee:d9:25:a7:7c:1c:8c:a6:26:e3:
                    c1:92:7c:c6:73:5c:29:39:42:09:e6:f1:c0:6f:c0:
                    3e:0c:22:e9:6b:c8:1f:b6:84:91:61:38:d0:c5:c0:
                    66:e6:25:9a:df:75:19:d6:3c:3f:ad:20:87:72:ec:
                    1b:c6:3d:3c:49:10:30:79:8c:ae:27:39:18:9b:36:
                    73:3a:16:33:41:3b:ab:61:05:01:e1:d2:da:c9:60:
                    62:0a:54:1d:9e:e9:76:10:95:f1:9c:51:1c:cd:43:
                    9a:84:2d:fe:9c:4e:f1:5b:2e:26:94:22:8a:9d:c4:
                    84:4f:65:74:d9:fe:44:f6:78:20:ff:76:c9:1b:77:
                    f8:7d:b2:e7:b8:ac:d7:f9:f8:c5:a4:38:a7:4c:44:
                    55:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E1:5F:16:88:53:7F:98:CA:80:E6:BA:C6:AC:72:A3:5C:66:A3:B0
            X509v3 Authority Key Identifier:
                keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c9:88:64:04:86:7c:30:1f:4e:32:38:58:61:50:29:85:0c:
         e6:00:cf:f1:c2:7e:a2:f1:b8:65:77:54:17:1b:7a:4b:66:30:
         e8:c7:5f:f5:eb:b0:4d:8e:af:eb:e7:5f:56:af:14:9d:b7:9d:
         89:3d:2c:dc:39:f8:cc:60:86:e4:ae:a3:40:e9:e4:db:7a:90:
         44:4b:ff:aa:95:56:74:3b:f0:5a:09:87:a1:61:55:b0:07:52:
         72:70:6b:7a:07:b4:24:dd:3d:67:a0:60:ed:99:d0:dc:e9:19:
         85:3d:0a:27:71:b9:b0:b3:93:ed:52:ce:a4:39:e4:1a:7c:3a:
         c3:2c:5e:6c:c6:1f:c1:54:1c:ee:6b:0f:72:d4:60:ba:0d:34:
         f0:c1:be:67:17:b0:63:e7:89:e3:58:43:d3:85:d8:cf:35:fa:
         ee:c9:ab:ac:b3:27:e4:37:e9:8f:7b:06:b3:98:9d:07:a9:c0:
         48:4c:7a:d2:98:61:7f:10:b8:8b:b7:3d:aa:42:ab:db:ed:6f:
         88:fc:2b:4d:7a:09:0b:15:f4:d8:da:e4:fc:2b:7c:a0:05:dd:
         8a:41:b7:90:e7:d4:4b:86:d8:64:1c:4b:b0:1c:82:d9:d6:72:
         c6:36:3c:ac:41:ac:38:72:d3:f2:8d:5b:ba:82:7b:32:46:2c:
         6b:8c:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:09:20 2025 by rpki-client