Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
File:                     5D-RsCFSiCv5YF12vqQhqgvU5ig.mft (raw, json)
Hash identifier:          nlNlr0wPtJevchXNp5Paryn2qwmkotgf9800iFWwaQs=
Subject key identifier:   2F:1C:D3:F0:9A:C0:17:19:37:0B:C7:1D:21:4F:41:C8:A3:30:F7:3F
Authority key identifier: E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28
Certificate issuer:       /CN=e43f91b02152882bf9605d76bea421aa0bd4e628
Certificate serial:       0199FBEB2080AE474105B8FF2666305941A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
Manifest number:          0CD0
Signing time:             Sun 19 Oct 2025 10:01:54 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:54 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:54 +0000
Files and hashes:         1: 5D-RsCFSiCv5YF12vqQhqgvU5ig.crl (hash: eRF3JKzAaP+onfVlsEhY+YYAbyRWDJwurPKu15zJXWo=)
                          2: 6nbOuYfu8sbFCAUPUpe64Bd3Rmc.roa (hash: wbgE92t6bLMyfvwqmBJusUZf/7LqDlcOflMgewrcKFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:20:80:ae:47:41:05:b8:ff:26:66:30:59:41:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43f91b02152882bf9605d76bea421aa0bd4e628
        Validity
            Not Before: Oct 19 10:01:54 2025 GMT
            Not After : Oct 20 10:01:54 2025 GMT
        Subject: CN=2f1cd3f09ac01719370bc71d214f41c8a330f73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:f8:39:7f:95:df:8e:41:55:3b:86:68:84:
                    71:d4:0f:c1:50:4e:7b:94:44:30:f5:71:49:38:e4:
                    b6:36:31:99:4e:1f:76:e4:92:6f:51:ae:a5:23:ca:
                    5c:3e:87:a7:d1:76:8c:da:81:36:57:17:0c:bd:d6:
                    d3:f7:b3:0c:cf:f6:77:1d:50:a7:13:50:95:bb:9a:
                    ea:7a:3e:dc:99:0d:72:00:c2:e0:62:87:07:00:ea:
                    11:d9:aa:7d:e9:c6:4c:63:2c:17:ca:f8:8d:aa:1e:
                    16:dc:5f:b8:3a:85:90:0b:1f:f1:e7:ef:d1:61:f4:
                    1d:64:68:48:79:19:9b:4e:d9:f9:bd:02:e9:90:a5:
                    cc:8e:99:4d:10:46:9a:6f:ab:f1:3e:13:0f:14:78:
                    44:4c:75:52:c3:1d:b8:46:4f:c7:8b:01:6a:cc:2c:
                    3b:e8:23:5d:84:5e:15:aa:cc:2c:e3:e6:9c:cd:8d:
                    27:bc:45:21:67:76:ba:b0:8d:ce:75:31:2e:59:55:
                    ef:e3:24:00:6a:17:f9:14:dd:57:7c:96:a7:05:30:
                    aa:6d:b8:ff:04:f3:ef:54:fd:cb:7e:d1:34:51:8d:
                    0d:ca:66:81:ff:3d:0d:e1:42:98:03:56:28:60:94:
                    12:05:8b:38:43:cc:d5:a5:d1:9e:e8:91:e0:50:fe:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1C:D3:F0:9A:C0:17:19:37:0B:C7:1D:21:4F:41:C8:A3:30:F7:3F
            X509v3 Authority Key Identifier:
                keyid:E4:3F:91:B0:21:52:88:2B:F9:60:5D:76:BE:A4:21:AA:0B:D4:E6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D-RsCFSiCv5YF12vqQhqgvU5ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/334c56-2e69-4da2-b01d-030802641c67/1/5D-RsCFSiCv5YF12vqQhqgvU5ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:a7:3b:b6:c7:e0:0a:11:3d:12:27:9c:36:cb:41:13:3f:b2:
         9e:bc:1a:61:28:42:8d:1c:39:d8:18:e1:ee:8d:8f:ba:a7:0c:
         8e:8c:46:0c:31:bc:95:18:86:8a:65:ae:19:7b:8d:fa:0e:ed:
         95:b9:01:be:21:0e:34:61:f7:9d:d7:17:8d:cf:8e:31:60:23:
         dd:e7:e8:bd:a9:0e:d3:17:85:cd:53:48:dd:26:0b:70:01:14:
         73:26:c1:69:8f:af:16:1e:01:36:38:60:d4:e2:71:a0:66:6e:
         e3:ce:b4:fe:72:61:fe:d0:e0:7f:77:27:83:3d:11:7f:44:bf:
         78:15:f0:6b:b7:ad:7e:d3:80:be:58:b8:a5:f5:96:7a:8f:4e:
         76:4d:e8:b1:61:ab:fb:9c:81:17:84:de:d1:2c:58:80:31:95:
         27:c2:e4:6c:1c:3b:97:fe:04:3d:3a:76:19:a4:d9:df:94:26:
         a4:dc:44:1d:c1:ac:b7:07:f8:05:50:56:c0:a7:a4:7f:63:90:
         15:f7:39:94:f6:eb:45:77:1d:01:9b:e2:65:57:95:b4:da:c5:
         a5:42:27:d6:dd:30:47:08:21:b1:d2:2f:76:ee:6b:94:cb:5d:
         54:83:c0:1d:c9:fc:ea:3a:43:28:a6:70:7e:41:d4:b6:a4:09:
         97:a6:8d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:17 2025 by rpki-client