Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
File:                     5cveddU26RsoojRpNJ0c8ouISjs.mft (raw, json)
Hash identifier:          qR/idnPAnqpsddbjaiuZWPuKwsmy2T21As/qp50apqA=
Subject key identifier:   68:4C:E3:9F:77:1A:C2:5A:CD:2F:A2:85:87:91:E9:E7:FE:FA:4F:D7
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Certificate issuer:       /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial:       0199FBEC36ACB2090044120465489EE78885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
Manifest number:          160B
Signing time:             Sun 19 Oct 2025 10:03:05 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:05 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:05 +0000
Files and hashes:         1: 5cveddU26RsoojRpNJ0c8ouISjs.crl (hash: Fk/Ce4cGyM+oOnbzpi+m2YfkllmdHl+6XnasDpmXtLs=)
                          2: 8vBjC53BVW8zj4fBkE3UHTZwiNk.roa (hash: 1PeNucpAjZUP2ujHYN11UYlssoeYcm9jeCslEET3UiI=)
                          3: 9SKc1OPZn-eLWfpLDmHLKp6N8Ss.roa (hash: aMPoo7LYnaS7eWYIaQDX/Es2RSQYrk3CqkkwnLvbGQ8=)
                          4: UwHwc4Sk_hCRAHef6n3CUGRPGkk.roa (hash: KrGL3wXFY6k1GlYSZENHPy6IRLA8cwbf0xkJCypiFE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:36:ac:b2:09:00:44:12:04:65:48:9e:e7:88:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
        Validity
            Not Before: Oct 19 10:03:05 2025 GMT
            Not After : Oct 20 10:03:05 2025 GMT
        Subject: CN=684ce39f771ac25acd2fa2858791e9e7fefa4fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:8a:1f:0d:cd:d1:0e:e1:5d:a5:3d:5d:2b:
                    13:ce:79:44:60:b8:2c:c7:ab:5b:86:fb:76:fb:28:
                    03:12:47:6a:e3:d5:c8:6d:64:06:74:00:3a:6f:6c:
                    4c:19:e5:fd:15:af:02:c8:5e:e0:ae:e2:bb:84:55:
                    0f:39:6c:97:3e:8d:6c:7e:3b:73:e3:e4:e9:b2:c5:
                    14:c5:2a:bc:55:30:23:39:0d:69:b7:7d:e2:d5:01:
                    d4:fa:d0:1c:6c:fb:28:c0:f3:0d:60:21:5f:2d:4b:
                    b1:eb:78:11:00:db:71:62:26:f0:de:38:10:a4:c0:
                    8f:de:fa:c7:e4:73:18:fe:61:18:96:b7:31:81:91:
                    d9:99:b5:ca:0c:b4:69:49:27:3b:8b:95:a8:79:37:
                    66:e5:ab:f4:97:f4:f0:83:97:bf:ab:31:97:56:b7:
                    a0:a6:a6:59:45:56:42:c6:1c:ce:34:19:b0:25:38:
                    f2:9b:35:c2:e8:a4:04:28:0f:e2:12:cd:57:0c:ad:
                    6b:5e:10:34:dd:71:01:c8:85:11:bc:b9:4b:86:af:
                    c2:19:5e:c6:e3:dc:60:35:7e:61:29:76:3a:54:76:
                    a0:fb:f7:5f:a3:55:31:bb:1d:6d:2a:a4:37:78:4a:
                    6e:33:df:15:0f:79:ee:0d:7f:97:ab:84:d4:a6:c7:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4C:E3:9F:77:1A:C2:5A:CD:2F:A2:85:87:91:E9:E7:FE:FA:4F:D7
            X509v3 Authority Key Identifier:
                keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c2:58:02:9b:72:d4:a5:72:a3:bd:44:56:45:fb:dd:50:43:
         cb:c7:37:56:5c:ae:30:49:a1:32:11:bd:94:97:56:1c:6b:d0:
         89:aa:ba:2c:33:e1:9a:0f:7d:40:c5:72:4a:6a:c6:b1:e1:4e:
         e3:9b:b8:92:57:70:6f:d6:b6:1e:d2:99:56:aa:56:d5:64:02:
         de:2b:6b:35:25:fa:d6:54:01:b2:c5:91:1a:ff:6a:36:a4:cf:
         b4:02:91:75:10:10:d4:f5:18:bc:7a:5b:6e:7a:f5:4b:e4:d2:
         c1:b5:d8:f8:4b:11:f8:7e:51:20:80:70:02:b8:55:ab:b0:d3:
         70:a3:61:22:5c:b2:f1:4b:1e:44:1a:68:8b:ed:83:60:5d:6e:
         69:79:21:d6:55:9a:98:ea:fa:49:9e:59:7b:a4:3d:43:43:1f:
         dc:bb:d6:d2:86:7b:df:b7:fe:cc:a6:72:71:21:3f:5b:1f:b9:
         7b:1b:d9:a7:ba:2d:d5:27:5c:30:b7:3b:10:8b:9f:1e:5d:78:
         e5:8f:6b:54:5d:83:2e:5a:96:29:cb:87:33:37:29:ee:e9:a1:
         4c:bd:12:54:73:b6:09:13:65:85:16:a6:54:05:22:c4:5e:cb:
         4f:f0:da:f4:a2:ff:a9:d0:3a:3f:f1:f4:13:ac:57:7e:78:eb:
         f0:9f:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:44 2025 by rpki-client