Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
File:                     e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json)
Hash identifier:          Cltm23JFYubOdCOeuc1/dMez6BoBZWWc08TF9AA9mQA=
Subject key identifier:   C1:AB:E4:0A:28:71:FD:15:D3:26:A6:D9:FA:20:BD:81:87:2E:BD:A4
Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F
Certificate issuer:       /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
Certificate serial:       0199FFC8C7396CFA244AD72AFC365CCCD3E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
Manifest number:          0210
Signing time:             Mon 20 Oct 2025 04:02:52 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:52 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:52 +0000
Files and hashes:         1: TTBErUL6vl3lSqjsByIpaDDgE6U.roa (hash: 4weVW558ecVuX1Zae4lOHzv/p4kGkETVv2eYyWWuW94=)
                          2: YlKjKgaOiisW0FHjngmaioczr4Y.roa (hash: FpDMBSbxjsLWLw0isR/r6zYDC4KzpsK8uQPc6tOVZcY=)
                          3: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: QFHOeZE2mxooA1w4fZoHdPkzCyoaVoV1Wcrw6JLJpAE=)
                          4: fkPctyPmNa-jHOMFlt54MEYI4-Y.roa (hash: kbI+XVxVhIkvFoyf5y5abPuJl3WbFcY/24KPezeLpg8=)
                          5: t3925RybJKpzuyJQzvXokPYENvE.roa (hash: p5hTmlnfy9kgRKECZU/KUoIzwRM+yqBSMG9cz48tDC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:c7:39:6c:fa:24:4a:d7:2a:fc:36:5c:cc:d3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f
        Validity
            Not Before: Oct 20 04:02:52 2025 GMT
            Not After : Oct 21 04:02:52 2025 GMT
        Subject: CN=c1abe40a2871fd15d326a6d9fa20bd81872ebda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:cb:61:3d:02:ca:fc:19:4d:5d:63:a4:1f:
                    32:c3:42:8d:2e:b5:a5:ff:5e:2f:38:1e:de:ad:f1:
                    bd:39:7f:b1:a6:e7:d3:d7:9c:2a:d0:f7:bc:fc:b6:
                    2c:f2:44:4f:d8:de:36:3e:b0:98:65:a9:58:9a:15:
                    00:f2:7b:ea:a3:00:58:13:72:30:12:49:98:5e:29:
                    bc:0c:89:24:36:df:0f:75:fc:76:a1:46:16:75:e3:
                    fa:8a:2c:48:54:e4:6f:fb:3d:6d:d8:eb:f0:95:8b:
                    20:a9:cd:68:2f:db:8f:48:6d:5f:f4:0f:8a:7d:8b:
                    b8:04:48:9c:0c:5b:09:bb:ea:06:db:ed:6d:9e:eb:
                    d4:d1:0f:a9:15:ca:26:92:4f:d4:c8:15:66:ff:27:
                    2f:51:d1:f9:2e:8d:56:e8:cd:ee:30:0d:f2:43:41:
                    9b:93:3d:7b:47:0e:03:61:89:72:fb:60:d6:93:68:
                    ab:f5:6d:5a:04:92:94:14:27:0c:76:1d:c6:82:88:
                    19:a6:59:87:5c:d5:53:42:35:1e:a0:2d:ab:bc:2e:
                    76:c1:f9:70:b7:54:7a:12:01:4a:a3:59:98:68:bb:
                    a8:5b:8e:3a:b8:c9:79:db:20:14:3a:9b:ff:44:39:
                    b0:83:80:83:26:e7:b1:b0:03:ea:43:0c:d8:2e:bf:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AB:E4:0A:28:71:FD:15:D3:26:A6:D9:FA:20:BD:81:87:2E:BD:A4
            X509v3 Authority Key Identifier:
                keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fa:df:d7:27:cd:00:60:17:73:e6:21:c0:d9:aa:5b:a3:0e:
         e6:e9:78:c6:72:36:a9:61:b6:b4:c1:7d:47:8a:4d:ad:53:4f:
         42:66:05:9e:e4:ec:66:95:2e:7d:b3:13:c0:14:d3:af:e3:2b:
         6e:1a:ec:40:a0:d5:40:31:7c:cb:41:b6:03:35:1a:cb:ab:da:
         0b:7c:18:e7:32:65:7e:c1:8a:4e:0c:b9:c7:83:d3:57:73:fe:
         68:28:f8:ee:18:5e:c3:61:30:a7:66:22:eb:52:6e:05:6a:5f:
         8d:ff:22:83:64:76:7c:f6:41:ae:a3:57:d5:52:ea:6c:86:4d:
         66:27:32:2b:ec:b7:41:27:4e:69:89:4b:d9:d1:d5:8e:95:1b:
         0d:a9:11:63:2f:42:9c:42:f2:7e:88:63:02:34:f9:0a:08:ee:
         ef:f1:14:ca:6a:00:12:32:67:85:b5:ed:37:ad:87:73:89:39:
         04:98:7f:31:33:29:b3:ae:52:3d:1f:de:c9:19:7f:ca:a1:e9:
         a9:21:62:31:bf:68:49:fa:af:e3:10:91:07:ef:9f:4d:56:ae:
         ef:c7:fe:ad:8b:71:8d:83:cf:8f:ed:69:0e:64:ca:40:15:48:
         bd:d1:1f:86:48:f6:0c:38:1f:6e:10:e5:59:ad:59:ea:4a:39:
         cc:2e:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:31 2025 by rpki-client