Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
File:                     xpHzRaUDy4yKneQn6IEu__IbIrU.mft (raw, json)
Hash identifier:          4uic1+VKUQ5cE2i3FdbgAbupz2KHXUp0Wg9P4AcVNzw=
Subject key identifier:   3B:66:79:56:BD:41:28:3A:DB:67:90:63:13:9B:D9:76:67:C6:81:78
Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5
Certificate issuer:       /CN=c691f345a503cb8c8a9de427e8812efff21b22b5
Certificate serial:       0199FC2146853E1347135FAA410A8653C467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
Manifest number:          0529
Signing time:             Sun 19 Oct 2025 11:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:03 +0000
Files and hashes:         1: 3Gbnet98ld2uF50D7YCjLTfkMpA.roa (hash: VXqXm4z6E41hAlJYaZsYhRtFw5yW6/XPRFTdwUW8xG4=)
                          2: sE_yBIBHGOP00_8ICipXACLmvpc.roa (hash: FyBE1dNPqJ1LeCxUv53xtEACyPL7Fifk2VrXCbMm6MU=)
                          3: xpHzRaUDy4yKneQn6IEu__IbIrU.crl (hash: JxC4aYzabfvPnGoVXJ7WWfYN31NXtubehZ8dv6oca+c=)
                          4: y8rUqaqv7ENTk3dMoJ53cbPWsS4.roa (hash: xuqlNaZw0JfK1zeCz1wuG1Q98hbdJatlBMg2l2xV/d8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:46:85:3e:13:47:13:5f:aa:41:0a:86:53:c4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5
        Validity
            Not Before: Oct 19 11:01:03 2025 GMT
            Not After : Oct 20 11:01:03 2025 GMT
        Subject: CN=3b667956bd41283adb679063139bd97667c68178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:36:96:f1:14:34:83:26:0c:82:e4:51:8c:
                    6d:12:4f:af:e2:4d:30:1c:51:18:29:49:d0:3c:d6:
                    63:d5:78:e5:e6:c1:3f:b3:af:2f:f2:b7:bc:2e:70:
                    c3:39:f3:ef:f4:e7:f4:3f:2e:e9:4b:15:db:6c:f6:
                    3a:4e:d3:fd:4b:b0:a6:a6:78:0f:2e:a1:8d:27:7c:
                    7e:28:5e:ab:cd:9e:7c:23:f5:57:47:5c:35:3e:ab:
                    6e:79:5e:08:2a:84:ea:b3:9d:e0:1f:7c:5e:5a:76:
                    25:ea:25:6b:a5:72:3a:ca:4e:00:15:7c:4e:d1:31:
                    87:ee:d1:95:73:be:e5:35:d9:82:0c:81:13:70:45:
                    97:79:1b:e5:39:6b:54:a3:1a:13:d8:3c:2b:7b:10:
                    bb:db:8b:cf:ed:c9:fa:b1:d8:76:a0:1c:d8:48:7b:
                    7e:9b:03:16:05:c8:96:5a:89:85:2e:e7:c8:65:88:
                    ca:2d:96:6a:2a:5c:0a:9a:79:d4:7b:2a:b6:62:fc:
                    38:18:ee:60:31:4d:ac:3b:17:89:14:b7:c0:53:f7:
                    f8:4b:a7:78:5f:32:6a:f5:61:53:2a:6d:d4:a6:f1:
                    47:e5:dd:c2:82:53:7a:73:16:39:d9:1f:80:d0:57:
                    8b:b0:f9:08:8a:a3:15:35:56:ea:9b:e6:e9:53:10:
                    59:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:66:79:56:BD:41:28:3A:DB:67:90:63:13:9B:D9:76:67:C6:81:78
            X509v3 Authority Key Identifier:
                keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8f:11:0a:93:f4:0c:4f:1a:bc:7e:90:9c:df:2f:47:0d:16:
         ed:c2:c5:17:c2:d5:72:f3:05:fc:1b:0a:70:bc:25:44:16:df:
         ea:4a:21:6f:a6:66:72:fd:bf:15:eb:82:70:eb:49:d9:d0:02:
         8a:aa:66:8d:f6:fd:ab:6d:9d:7c:b1:17:35:c4:2e:f1:21:84:
         9f:41:42:41:dc:9a:95:ff:c0:d3:e3:3a:ac:98:fb:05:cf:31:
         c1:69:f6:e7:14:cb:ee:c7:39:38:eb:d1:a7:6d:98:7d:e6:e1:
         81:c5:93:e1:a3:ba:98:9c:b6:c6:64:9b:3a:23:51:41:6e:1d:
         99:15:fb:04:9d:ab:b5:39:2e:b6:4f:41:f8:83:be:cf:49:68:
         f3:23:a0:42:53:03:96:c3:3a:29:98:6e:bd:e1:cb:3b:5b:fc:
         59:fe:2c:95:dc:c1:4b:37:db:40:ba:09:d9:04:f0:e0:e0:9c:
         62:61:88:e3:de:b0:52:bd:67:f7:48:e9:4f:bb:36:4e:0b:4a:
         14:fe:79:1f:32:e8:23:2b:d2:42:66:75:e7:d2:9e:06:58:5c:
         e1:8b:d8:50:24:18:0a:85:6a:a3:d2:7c:ef:0c:db:cd:4f:ab:
         a9:5a:b3:e5:99:3b:c9:59:6f:58:83:86:4d:15:64:d0:c2:4b:
         0c:4c:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:41 2025 by rpki-client