Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File:                     5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier:          oeDhObJj6M0Nyx6G+mzlm6LrjyHPXMEPizQQ+sDDqHM=
Subject key identifier:   97:8D:3C:F0:A5:E3:64:7F:F0:F0:F7:94:60:28:5D:59:C9:F9:B0:F7
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer:       /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial:       0199FC8F1A6340321F9928DE7160E6D1D545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number:          1684
Signing time:             Sun 19 Oct 2025 13:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:00 +0000
Files and hashes:         1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: UK09dEcdU8+BjR8RxZbJi07014+3G3P2j65dFy7hrEQ=)
                          2: pOwukpz6uQtAZQ26wgZyWA0w-Pc.roa (hash: 0LNaJ+BbQgNK+Ci6/J4w+3/assiqy/xOnI28WaXKzkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:1a:63:40:32:1f:99:28:de:71:60:e6:d1:d5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
        Validity
            Not Before: Oct 19 13:01:00 2025 GMT
            Not After : Oct 20 13:01:00 2025 GMT
        Subject: CN=978d3cf0a5e3647ff0f0f79460285d59c9f9b0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:60:e4:96:22:58:87:55:f3:81:c4:ae:a2:28:
                    71:e9:e0:16:4a:be:cb:4e:87:c9:d2:3a:a8:4a:bd:
                    f2:a7:24:44:c5:60:f0:52:8f:e1:c3:de:80:7b:f9:
                    1e:af:4b:5a:75:d0:93:c7:8b:d2:a1:f6:a6:6a:cb:
                    bc:f8:6f:e8:e1:75:a7:3e:a9:50:e8:0e:db:82:92:
                    ca:45:e2:cd:62:11:a9:62:fc:aa:d0:df:b8:80:5c:
                    4d:f6:22:f3:4f:fc:2f:99:bc:94:02:bd:af:14:82:
                    5e:0f:38:79:bf:e9:20:4b:74:8c:3d:e3:b2:5c:65:
                    7b:4b:e6:80:e2:30:85:cc:27:c4:60:1f:20:80:a5:
                    a9:b6:40:cc:ca:14:4c:f8:90:b8:a2:38:15:3f:22:
                    96:a7:8d:1a:b8:c2:71:80:5d:69:6a:4e:be:c8:62:
                    1a:9b:12:06:39:f5:03:08:0e:ef:ab:a9:c7:f3:a4:
                    ac:3e:45:8f:b1:67:0d:7a:24:d3:fc:1c:d1:64:0a:
                    42:79:ea:8b:0d:b3:12:8e:f8:6b:a3:47:5f:a9:7e:
                    a0:3f:56:f6:1b:47:1d:30:93:83:b3:62:9f:b1:34:
                    3f:02:64:62:81:e3:8b:b1:f0:d6:ee:81:4f:b7:f5:
                    a5:23:0f:93:fb:6f:cf:f5:16:86:16:c8:e5:2a:4c:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8D:3C:F0:A5:E3:64:7F:F0:F0:F7:94:60:28:5D:59:C9:F9:B0:F7
            X509v3 Authority Key Identifier:
                keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a0:c3:28:84:9d:7e:92:9f:4b:cf:08:8b:21:ae:00:8d:85:
         8e:46:e9:57:46:e6:df:c8:cf:f3:26:85:75:32:78:9c:6c:7b:
         ee:39:f2:5f:68:7f:59:a8:e7:42:06:d9:96:7c:ce:51:64:b0:
         44:a1:81:f1:ae:09:e9:17:62:de:60:da:75:8e:13:94:3d:f6:
         17:42:c4:78:34:5e:e7:94:d5:08:61:57:cf:1e:19:2e:84:27:
         ae:f4:e2:41:25:58:d9:0e:4e:0c:87:43:f0:66:66:78:a0:df:
         75:d5:7d:97:66:ef:c0:e3:2f:c2:84:c5:ac:14:10:2a:26:58:
         17:68:62:47:c3:3c:42:be:88:b1:3b:f2:06:fe:54:ec:63:da:
         b9:ba:81:48:11:b7:9c:e5:50:bb:c6:15:a0:df:9b:46:1d:22:
         a9:e9:79:f4:17:27:ef:ee:8b:25:1d:5b:9a:a6:4f:07:0f:88:
         a7:97:dc:2e:06:b2:d6:f3:10:6f:83:6e:f0:7e:40:ed:1f:25:
         eb:9b:7f:b2:fb:90:90:d2:9e:13:79:ed:f7:6d:0d:8f:2c:7d:
         70:ef:f3:9d:ee:5c:d9:58:65:02:87:5e:76:24:db:d3:82:6c:
         cd:78:8c:64:92:b1:d0:f4:f7:e3:2d:40:f1:52:34:35:68:a6:
         bc:59:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:36 2025 by rpki-client