Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File:                     XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier:          uIOqYFTc5og/s4RExLi2SZpY0WtWefFScbTIMxoS2HE=
Subject key identifier:   50:BC:8E:E8:DE:C9:D9:20:83:AB:B5:4B:AF:D6:DD:0F:2A:1E:C8:63
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer:       /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial:       0199FE46F59072093AEA39C148560DE13423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number:          0E02
Signing time:             Sun 19 Oct 2025 21:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:27 +0000
Files and hashes:         1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=)
                          2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=)
                          3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: jU1iJYLRTnBLoOyeqiY3iBstcV0F6ZRBm5O14Sdjq8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:f5:90:72:09:3a:ea:39:c1:48:56:0d:e1:34:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
        Validity
            Not Before: Oct 19 21:01:27 2025 GMT
            Not After : Oct 20 21:01:27 2025 GMT
        Subject: CN=50bc8ee8dec9d92083abb54bafd6dd0f2a1ec863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:47:30:31:76:2f:3d:82:b2:70:28:c9:3e:
                    a2:98:3e:8a:d0:2f:50:8c:d7:53:4c:0d:de:b0:ed:
                    d1:d0:bb:f1:d7:fc:5f:77:7b:67:c7:9b:16:79:a3:
                    da:82:df:c6:cf:bf:77:47:2c:ec:ae:38:2c:ec:7e:
                    49:80:0b:f6:b5:1d:aa:76:51:4b:06:a0:48:70:59:
                    50:c3:6f:42:60:bc:10:40:00:31:72:8c:aa:ba:40:
                    85:c2:17:9d:6d:bd:fd:7c:fb:7d:4d:da:af:af:24:
                    3e:a7:7e:53:bd:36:71:0d:39:61:94:8c:29:39:ea:
                    4f:c0:b6:e2:0d:fe:8f:1a:f5:1e:c9:e5:62:fb:2f:
                    a9:bd:7b:c9:c7:b9:e2:3a:24:cf:0c:b3:cf:99:fa:
                    e7:48:77:f1:07:e8:df:b4:f3:fd:fb:0f:1c:9d:68:
                    26:7e:6c:f9:3a:95:c0:3f:2d:de:4b:0b:10:24:01:
                    24:5a:69:e3:1e:10:97:66:75:6e:ec:0c:c1:3d:d0:
                    75:70:45:14:c5:92:fc:e4:ec:fa:f1:12:24:22:2c:
                    c0:ca:a4:c2:eb:3d:de:09:35:f8:d0:f7:89:7b:56:
                    2e:57:2a:71:5f:83:fe:89:25:27:29:ef:af:27:b1:
                    7f:2f:6c:0b:9c:45:2e:e2:83:6c:87:0e:6f:64:d0:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BC:8E:E8:DE:C9:D9:20:83:AB:B5:4B:AF:D6:DD:0F:2A:1E:C8:63
            X509v3 Authority Key Identifier:
                keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:32:bf:99:b1:67:85:e2:4b:64:7f:9c:3b:51:e4:df:73:8d:
         af:4f:70:e2:b5:60:02:9b:cd:c6:15:71:84:89:88:23:26:8e:
         09:59:1f:6f:7a:dd:aa:7a:70:d2:9d:54:7e:9b:a8:86:80:d1:
         ef:8f:c4:37:1a:52:fa:3a:6b:b3:2d:0b:d1:20:81:d4:88:49:
         36:5c:97:11:b2:99:fb:3d:57:4c:0b:d5:93:77:5b:b4:c5:11:
         b3:2b:3e:0d:96:6c:11:9b:2d:93:61:7d:2f:2c:14:d6:85:18:
         ec:ed:ee:66:e7:7a:90:c1:61:67:a2:3b:6d:fa:f0:2f:4b:33:
         98:cd:e4:7d:f7:78:6b:33:4b:3d:ce:4a:0a:26:2f:fb:4a:1c:
         2a:11:88:fa:02:04:e7:49:19:33:11:01:8e:e9:2b:46:78:cb:
         59:ec:55:ca:8c:71:71:1a:2f:e4:6a:e3:17:ee:49:4c:e4:b4:
         86:67:a4:34:d3:e0:80:5d:2a:42:cc:e0:c8:68:c8:f3:28:0f:
         08:4d:1c:24:b1:e2:44:a6:57:01:e6:3c:1e:bc:ae:6f:a4:bb:
         84:d6:44:7f:14:ea:2e:da:ce:0e:c8:e6:44:18:77:03:80:c2:
         13:92:1a:69:8a:40:42:f7:4d:75:5f:d8:d9:61:f7:c9:cc:0b:
         c0:14:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:29:14 2025 by rpki-client