Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File:                     X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier:          ob3KFNU7q2BUrMuiBH00ddRVvzY7GHQqiLjXiC8L1G8=
Subject key identifier:   54:B6:AF:0C:0E:04:9C:A5:1E:4B:6A:FA:B8:E2:9D:44:FD:97:F8:79
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer:       /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial:       019A02FEBD6051A79E93E9C26C12255A8FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number:          0AB1
Signing time:             Mon 20 Oct 2025 19:00:40 +0000
Manifest this update:     Mon 20 Oct 2025 19:00:40 +0000
Manifest next update:     Tue 21 Oct 2025 19:00:40 +0000
Files and hashes:         1: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (hash: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=)
                          2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: E7j9XW132WjHiGl1AMBkqFfEq8gk+tbJB8UZ3brmUWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:fe:bd:60:51:a7:9e:93:e9:c2:6c:12:25:5a:8f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
        Validity
            Not Before: Oct 20 19:00:40 2025 GMT
            Not After : Oct 21 19:00:40 2025 GMT
        Subject: CN=54b6af0c0e049ca51e4b6afab8e29d44fd97f879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:62:60:42:60:9e:f4:ce:75:80:ce:5c:74:
                    ce:b3:97:47:b8:00:a0:4e:85:48:ed:77:46:59:6e:
                    fd:de:f1:db:0c:92:05:2d:79:c0:01:73:54:91:3b:
                    af:10:de:17:2d:0d:ae:51:d1:a4:48:7b:15:b6:d5:
                    00:87:d5:82:81:14:da:34:bc:66:73:30:23:07:ec:
                    1c:85:87:14:51:03:36:22:7f:89:60:d2:90:8d:27:
                    47:33:48:e5:ab:85:2d:7d:15:7a:29:51:52:1d:6f:
                    19:6f:96:b7:fc:71:c8:93:1f:9b:b1:ad:3c:dc:10:
                    66:c8:a5:5f:39:e5:72:29:08:ba:cd:5d:5f:14:b9:
                    6c:b7:a2:32:4d:6b:69:08:fb:b2:25:58:1a:5c:71:
                    b8:5b:64:05:9c:f8:a8:e9:d6:1d:c6:50:c1:14:9e:
                    00:ab:ca:3f:09:1d:60:e5:1f:66:d6:a4:62:2f:01:
                    02:c4:af:4c:0a:0a:ad:be:c9:3b:f8:d5:72:3c:60:
                    d0:79:e4:91:47:40:08:25:63:42:3b:18:f2:73:84:
                    d4:f8:44:11:2a:f8:52:17:8f:50:8d:e3:25:67:ee:
                    b3:eb:4b:d2:3d:96:d9:c5:55:9d:4b:8a:48:79:53:
                    8b:c1:16:b5:b6:47:43:70:12:71:5a:14:94:b1:06:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B6:AF:0C:0E:04:9C:A5:1E:4B:6A:FA:B8:E2:9D:44:FD:97:F8:79
            X509v3 Authority Key Identifier:
                keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d1:b0:25:ac:cb:ff:88:29:5e:3c:9b:76:5a:c9:bd:3a:c2:
         2d:10:39:49:35:e2:c3:11:d9:78:45:0f:2f:c5:8d:97:f4:41:
         8b:11:65:3f:8c:1e:41:a1:7f:5e:e7:81:cd:9f:49:92:dc:05:
         84:4e:8e:ed:80:c4:8e:88:43:25:70:77:6e:48:f3:42:c2:5c:
         16:84:bd:5e:98:a1:10:a7:56:46:f2:ef:7c:b2:94:35:b8:ef:
         70:44:d4:92:73:04:e9:2d:51:72:ac:1d:ce:7f:69:9b:5d:b1:
         69:58:24:9a:c7:42:4b:d4:1d:d5:d8:f7:fc:67:91:7d:60:c4:
         bf:02:61:7a:24:71:1f:86:07:d1:eb:4a:70:29:b6:ff:53:cd:
         e1:f7:08:4a:34:1d:61:d4:fd:e4:5d:58:bc:00:cd:fe:50:2d:
         22:1a:4a:9f:46:ff:e2:8b:18:1c:9c:b0:b2:6d:bf:2d:ee:0c:
         ae:d5:c0:87:11:28:81:98:c8:a3:d0:ec:0b:5e:06:dd:2b:f1:
         1d:59:28:97:d9:da:a6:a3:82:fd:ec:f9:1a:d2:73:26:f3:69:
         7c:3b:98:f9:bb:71:82:8d:91:3f:4f:b2:2a:0a:ee:48:17:07:
         a4:42:dc:3a:93:12:c2:2d:09:6d:0d:cb:1e:b5:00:6a:88:ab:
         54:df:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:10:45 2025 by rpki-client