Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
File:                     5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft (raw, json)
Hash identifier:          Nb6Ixk61u8YjbRUvFDJtmih7CPtX7FFF3FpJ7BUctb4=
Subject key identifier:   9C:BA:C7:10:E7:CD:38:D7:2C:B9:07:0B:EF:0F:DD:82:47:7C:D4:33
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Certificate issuer:       /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial:       0199FE7D7A0111101AB38BBCD3A30C3616A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
Manifest number:          0AD0
Signing time:             Sun 19 Oct 2025 22:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:00 +0000
Files and hashes:         1: 5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl (hash: 8MpPwGn1J+9q/ok/DC+ZJOIj6ArZseeJJAv8dH+BACc=)
                          2: aTpXXC3KXcSwtDcwh6F3niPkHWU.roa (hash: ustcN0bW+oUtpGBdM/dRdF4t5dwpSRMOI1Anoza5nkA=)
                          3: mddXkjH3p_vL4vOQ0h8JV4B1WxA.roa (hash: 9qLzR+8C4wkJn5IoUy5FHXOEqts6JcExi312TdCvl90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:7a:01:11:10:1a:b3:8b:bc:d3:a3:0c:36:16:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
        Validity
            Not Before: Oct 19 22:01:00 2025 GMT
            Not After : Oct 20 22:01:00 2025 GMT
        Subject: CN=9cbac710e7cd38d72cb9070bef0fdd82477cd433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:eb:27:da:d8:82:cd:d2:dd:55:79:ef:c9:
                    ef:ba:3b:e3:20:b2:a9:ce:43:b0:14:d2:80:af:c7:
                    fd:16:8d:da:bf:e1:53:38:00:e3:8a:04:30:1b:6b:
                    4b:82:7e:65:d6:9d:dc:5a:58:27:0a:8d:bd:6b:a2:
                    f8:3b:13:c0:67:a1:0d:67:ab:28:39:83:d1:af:7c:
                    56:72:f1:55:85:a5:11:f3:10:68:51:c9:f3:5b:2c:
                    59:ab:43:0f:86:3c:1a:c0:a8:d9:42:04:ff:ad:fb:
                    47:0a:7a:45:45:fe:45:d3:65:be:ca:ae:ba:b2:8a:
                    f6:4d:81:53:3d:36:b4:22:5d:56:e3:59:8f:cf:89:
                    f6:d1:fc:e0:4e:72:53:58:8f:9c:aa:48:bb:50:d0:
                    00:e2:85:e1:24:99:aa:c4:ff:4c:11:7c:aa:ab:cd:
                    db:75:b5:80:98:4f:17:34:c4:46:27:f1:d0:1b:bb:
                    a0:c8:34:e3:d9:fe:94:6e:27:ce:aa:a5:66:49:5a:
                    9e:9f:03:96:ea:82:5b:f9:6f:2f:70:c9:ee:e5:95:
                    b9:d1:49:b7:6a:a0:ae:34:3b:1a:7f:3a:e1:02:b7:
                    0e:83:6b:cf:68:f8:c5:32:46:a9:c8:cf:72:b9:f0:
                    9e:83:12:63:24:bf:11:17:84:97:5a:69:cf:2d:21:
                    02:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BA:C7:10:E7:CD:38:D7:2C:B9:07:0B:EF:0F:DD:82:47:7C:D4:33
            X509v3 Authority Key Identifier:
                keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:be:87:49:c7:05:17:6f:9d:e7:8c:ac:42:80:1d:42:3d:1d:
         ec:2e:03:85:fb:cd:9e:58:77:e4:ce:2e:b3:3b:cf:d1:a6:8a:
         23:4b:fe:66:16:18:32:ef:bd:3e:43:c0:f7:31:76:84:20:69:
         7c:92:36:76:01:dd:e8:e1:44:79:75:31:65:a9:e9:e8:b6:3c:
         41:54:7f:f3:f9:b3:e9:d7:70:9a:f0:84:e9:97:b9:53:36:18:
         24:8c:d3:a7:9b:da:a4:08:b5:34:91:05:ef:d2:5c:86:53:cc:
         76:0b:ab:72:7f:6b:d9:d1:45:3e:a4:8a:7a:96:57:15:fa:2f:
         49:86:0e:35:34:44:cd:67:8b:22:1c:ee:aa:a8:ce:26:3e:75:
         1f:3f:e4:e5:8b:73:9a:b9:48:2f:78:63:d3:5f:f9:ec:9c:84:
         67:c7:4b:72:52:14:d0:66:1d:57:4a:11:58:7a:bf:95:be:7b:
         82:bc:f2:56:a6:8a:47:31:17:6d:7a:82:2a:2f:22:5f:3f:41:
         4d:57:c8:01:e2:18:f4:bd:80:69:db:92:a5:b6:03:6f:07:04:
         1d:10:1e:47:55:7c:68:fa:f6:5a:76:54:76:22:02:be:20:fb:
         36:cb:c7:6f:3b:d0:3a:7d:d8:5d:60:6f:c6:bb:51:02:6b:75:
         90:4b:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:21 2025 by rpki-client