Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File:                     _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier:          3JdhRgAB3uy+vnYL1Vel4vc7o7nDCUxiw8SqphXCOjQ=
Subject key identifier:   EB:DF:64:4D:3D:BA:70:3E:AC:37:FA:D8:09:55:AD:37:F4:15:2A:D9
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer:       /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial:       0199FB7CFE61122E90885B46180DC3EED659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number:          0572
Signing time:             Sun 19 Oct 2025 08:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:36 +0000
Files and hashes:         1: YCBMVw8lhfTbZWn4cTYVsc3blBQ.roa (hash: DAw8H6oh39jnMGAPAS2Ix82bT3BCrrolFFfmIIaPBT0=)
                          2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: tMGRg5WusEZtBGxWgUjR3hF3aLLhE6ZCUx0MnPYwhyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:fe:61:12:2e:90:88:5b:46:18:0d:c3:ee:d6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
        Validity
            Not Before: Oct 19 08:01:36 2025 GMT
            Not After : Oct 20 08:01:36 2025 GMT
        Subject: CN=ebdf644d3dba703eac37fad80955ad37f4152ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5a:4c:d8:3f:aa:c2:21:c4:92:b4:aa:f6:09:
                    2f:6e:3b:4b:60:8c:40:25:bb:72:ff:8b:92:05:15:
                    e9:20:5f:27:50:9f:44:64:b4:65:42:c8:89:80:9c:
                    09:ff:57:14:a0:35:1e:b2:ee:57:1a:7c:c6:e6:32:
                    50:1b:8f:5d:57:30:37:9c:ad:ef:93:cd:b8:56:d7:
                    19:d0:a7:a3:fc:24:bc:e6:ca:e2:61:4c:53:e4:78:
                    99:17:8c:49:18:d1:19:a9:cc:ac:cc:c0:ef:e6:f4:
                    b0:8b:d7:cf:9d:ee:50:b9:57:4c:5e:72:ba:98:62:
                    80:5f:43:3c:86:3d:7a:1b:bc:0f:ea:d7:c6:87:75:
                    6a:50:3e:9f:cb:c6:15:34:bc:f1:1d:4d:ee:3d:93:
                    6e:26:eb:53:09:b9:ec:36:77:0f:0d:59:93:bd:2d:
                    94:5f:9b:7e:b6:53:77:7f:ed:af:56:c7:a9:93:99:
                    e3:b8:3e:b0:29:ff:de:42:ba:84:05:19:f2:8d:78:
                    d8:a2:9c:59:18:02:1b:21:e7:6f:51:45:71:b9:3a:
                    83:28:f5:05:83:5f:cc:12:36:f2:2d:cb:ae:ef:5d:
                    48:40:b7:a2:3a:ab:cd:63:96:89:ee:42:a1:08:81:
                    45:7a:f9:72:41:2d:7c:59:e0:d5:3a:41:68:f4:f2:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DF:64:4D:3D:BA:70:3E:AC:37:FA:D8:09:55:AD:37:F4:15:2A:D9
            X509v3 Authority Key Identifier:
                keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1e:c5:12:33:a6:2c:9b:01:f5:a6:f8:fe:c3:4d:11:19:0f:
         ff:86:10:37:a6:19:f1:8b:28:65:1b:8d:d3:73:ed:f1:8e:ef:
         9a:a6:b5:1d:d5:f4:57:df:40:af:24:f9:6d:2d:4a:b6:f8:7d:
         d3:21:86:c3:ca:6c:70:c2:52:8e:1b:f4:4d:a6:bb:84:ab:58:
         c7:66:cb:31:4f:79:68:29:ff:1d:12:69:a2:ca:2d:a9:9c:67:
         c9:a4:3b:b8:f7:31:02:58:c4:3f:84:9c:a1:12:d6:05:5f:8c:
         62:df:52:e2:f3:4d:c8:12:66:8d:49:6f:9d:dc:ed:70:04:7a:
         d6:50:88:27:a1:cc:80:21:43:c6:9f:61:88:08:b4:b3:e1:f9:
         8b:e9:af:72:56:da:da:3c:b1:00:9c:14:61:51:4a:e6:cb:32:
         8e:e7:d8:00:23:8d:6e:00:7d:68:65:9a:7d:ab:10:4a:0a:a1:
         04:a3:9b:fd:1c:a3:f4:00:85:14:48:57:22:12:d3:a7:b5:b1:
         41:fa:2f:79:63:81:43:07:94:9c:cb:37:f0:9e:38:d5:05:ee:
         ec:86:58:26:8e:d9:07:77:cf:b8:dc:0e:d9:47:65:96:9c:24:
         0e:0e:da:c6:1d:51:d5:88:d3:ae:dc:cf:5e:3e:b0:36:13:47:
         f5:d2:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:03 2025 by rpki-client