Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File:                     z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier:          YDnm9s4vKUkCeiEPpgTUbK0M9tCghfFb7bHAL1BHIrI=
Subject key identifier:   88:67:89:53:93:03:2B:C4:49:CC:86:50:E7:50:6A:B2:AB:31:05:01
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer:       /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial:       0199FEB47AD89520F3E06464C1E19EA3A798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number:          1505
Signing time:             Sun 19 Oct 2025 23:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:04 +0000
Files and hashes:         1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
                          2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
                          3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
                          4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: z55GDUcTsxLiZ6HugOraT9+D8hPa8V5CKjdB5W5Vef4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:7a:d8:95:20:f3:e0:64:64:c1:e1:9e:a3:a7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
        Validity
            Not Before: Oct 19 23:01:04 2025 GMT
            Not After : Oct 20 23:01:04 2025 GMT
        Subject: CN=8867895393032bc449cc8650e7506ab2ab310501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:2c:39:ff:65:ec:b1:20:e1:fb:81:c1:ea:
                    da:b8:07:48:ef:89:56:e5:07:bb:b3:96:a7:44:50:
                    79:f8:2b:99:21:da:ab:2e:73:97:ff:cd:f2:1a:e0:
                    20:0d:0c:4d:1c:d5:8d:23:1a:4a:06:58:65:b9:da:
                    56:6f:ba:bd:7c:84:26:2a:ad:fb:44:96:68:1e:ed:
                    9b:2f:21:31:ba:93:d5:d5:fa:c3:b1:39:1c:51:a0:
                    87:f6:c0:92:88:36:6a:f6:eb:cd:27:a5:88:8e:5f:
                    97:a9:97:c5:05:25:81:5e:da:9e:2d:36:00:a7:e7:
                    05:51:39:d6:f9:08:ad:b2:7a:1c:19:c2:58:42:76:
                    75:33:42:9c:85:39:7a:c9:f7:24:72:f0:ff:45:fa:
                    7f:b3:34:ca:f4:e3:4f:e5:26:c5:fb:11:b9:64:a7:
                    72:3d:57:d0:f6:62:32:0e:70:5c:4a:ea:44:10:9d:
                    f4:d7:94:28:a6:bb:8e:13:69:1e:44:95:c7:00:e1:
                    47:79:80:4f:7b:da:36:84:53:98:c6:ae:42:b0:b4:
                    0d:54:cc:11:4c:df:7e:79:2a:06:5f:50:c1:57:1c:
                    48:eb:f7:f0:11:ea:46:51:63:59:23:0f:aa:db:66:
                    db:82:d6:35:17:8c:08:40:90:ae:96:8f:f1:52:1f:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:67:89:53:93:03:2B:C4:49:CC:86:50:E7:50:6A:B2:AB:31:05:01
            X509v3 Authority Key Identifier:
                keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:af:ee:00:0d:5f:59:59:48:2a:14:d2:34:8f:8d:ef:74:
         aa:1f:38:e6:50:f7:e7:4a:41:b9:2f:93:2c:35:84:1f:5f:fd:
         99:b8:1e:5c:e2:b3:2b:53:4e:93:65:df:7a:b4:90:76:d6:bd:
         36:6c:d0:c3:7d:3f:8e:53:55:fe:ef:43:62:b0:9a:6f:c4:4c:
         e8:d3:a9:1e:67:d6:4a:f5:24:99:f5:32:0b:a6:c4:b9:20:e8:
         5d:08:41:a0:2f:c3:12:ad:bd:9d:84:03:e5:fd:2e:92:9f:a2:
         bb:3d:9f:f8:a1:2c:cd:13:e4:84:98:15:90:25:b0:85:eb:a8:
         88:ab:fb:68:b2:83:b0:59:d4:5c:fa:41:70:13:59:de:07:4f:
         34:92:a2:72:2e:3f:16:05:18:ee:09:36:64:90:30:16:f7:24:
         72:29:07:a8:45:68:67:ac:7a:19:11:99:fe:34:d6:4f:cf:09:
         92:ba:c1:03:ac:4e:c2:83:b5:cc:95:a9:11:b7:b1:66:2e:cc:
         1f:0f:ec:ea:48:8c:cd:7e:11:6c:b8:96:66:2e:e1:53:68:73:
         33:59:20:d0:c5:6f:13:cf:96:f9:66:4f:15:68:a2:ef:1f:dd:
         eb:06:1d:ac:46:45:21:ce:df:25:ba:eb:a0:46:3a:d4:d3:69:
         2d:ae:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:26 2025 by rpki-client