Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File:                     5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier:          OVraESI1DIgOtugY5aPOeerTOOtOiurdxAxGWm4JN0s=
Subject key identifier:   91:8F:67:E8:E2:BF:6D:DD:98:C9:C7:F5:B5:3D:40:1B:4E:FC:48:62
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer:       /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial:       0199FB46362A3709380237DB7BBDAF893AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number:          0A91
Signing time:             Sun 19 Oct 2025 07:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:46 +0000
Files and hashes:         1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: nGgujwxjCNGYPnrdByrI1cX52HM5k5OwaceK0bJAwMU=)
                          2: m4ZSJvHCvVAdAoCa8Dy3Jfpj2Po.roa (hash: aprBkCfkVmxisnK2NR7zrUxKt0p0KhHf/uKOAfeW9gI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:36:2a:37:09:38:02:37:db:7b:bd:af:89:3a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
        Validity
            Not Before: Oct 19 07:01:46 2025 GMT
            Not After : Oct 20 07:01:46 2025 GMT
        Subject: CN=918f67e8e2bf6ddd98c9c7f5b53d401b4efc4862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:60:be:8e:8c:53:64:df:01:e1:94:93:29:
                    bf:e6:c9:38:0d:98:dc:81:7d:23:b9:bc:cf:dd:5c:
                    d4:d7:9f:e6:33:35:6a:94:6a:bb:89:38:cb:9d:ea:
                    73:f2:74:5b:43:2a:d3:a1:49:d8:28:1d:07:9e:1e:
                    4f:e6:f4:9a:bc:1c:b2:89:28:52:8c:a4:aa:d4:c5:
                    a7:8e:35:ea:8f:6e:a7:cc:0b:34:cb:ea:49:f2:19:
                    ac:ad:5a:bf:53:a6:bf:74:90:e5:56:f7:f4:b1:45:
                    3f:bc:ab:b3:4a:f3:e8:ea:5c:98:f8:7c:c8:5e:ac:
                    75:11:2b:13:31:bf:ab:aa:ac:d4:57:57:21:82:56:
                    02:81:b9:5c:70:7d:55:9d:1c:97:2e:a4:62:53:75:
                    c3:c9:c2:5e:72:56:2f:9e:b6:c2:eb:f3:2f:31:40:
                    70:4a:d6:20:e8:bf:0a:f6:65:85:7f:bf:04:42:0c:
                    e4:07:fc:db:fb:29:81:8e:ec:f4:a5:31:51:02:d7:
                    e6:49:ef:ea:ee:60:52:99:a6:ea:26:f8:91:58:07:
                    95:98:f9:19:cd:1c:83:28:85:0a:dd:59:85:a9:e2:
                    33:3c:e1:a2:f1:27:2c:ca:b9:01:dd:c1:dd:90:cb:
                    1c:1f:c2:ff:11:fa:da:86:4b:94:aa:74:19:a6:ad:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8F:67:E8:E2:BF:6D:DD:98:C9:C7:F5:B5:3D:40:1B:4E:FC:48:62
            X509v3 Authority Key Identifier:
                keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:55:e6:64:0d:3a:89:df:10:ef:fd:d4:bf:66:f1:50:f5:5e:
         1c:03:05:40:d9:dd:e8:34:da:40:1a:be:9f:cf:4c:4c:8e:a9:
         7b:e1:42:b8:f8:78:80:64:f5:30:9c:4a:4f:dc:af:a9:c5:98:
         f0:36:b5:17:09:2e:91:ad:72:62:bc:32:30:b8:89:c1:71:98:
         e2:d2:d4:3f:dd:dd:d4:61:e6:1d:54:eb:c9:b2:04:c5:89:10:
         e3:f8:9e:c3:d2:f2:b7:ca:25:de:d7:83:2a:4b:0f:e5:e5:54:
         26:9c:bd:4e:8d:da:a8:49:cb:fc:da:f4:9d:4e:c5:8e:7d:7f:
         21:f0:a1:39:05:df:50:13:f9:a1:60:34:75:62:48:48:41:5f:
         f8:ca:6f:6f:95:ce:24:b3:9c:23:77:5b:f1:91:3a:76:f6:c3:
         63:7c:26:d9:74:ac:4d:5d:4e:d1:8c:a7:83:ab:9e:d4:88:83:
         8d:50:86:1e:86:6f:14:7e:e1:98:84:e8:87:33:91:b6:70:60:
         41:b6:63:75:04:64:6a:3e:8c:00:16:57:a6:16:b6:67:56:94:
         f4:9a:f5:bb:18:cd:ff:16:cf:3b:38:fa:c9:ce:2c:df:89:c1:
         08:c1:43:48:b1:11:d5:81:cc:a4:7c:d0:7c:d5:e6:67:fa:f5:
         1b:9f:cc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:36 2025 by rpki-client