Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
File:                     5YW66mL41gYmJIc4xF370iFzf0w.mft (raw, json)
Hash identifier:          Cz60CJ+985Gf3TS2nwnGW8UpUVlUY0ajw+Mhd1g7lY4=
Subject key identifier:   DD:C9:D4:CF:79:E6:81:B5:35:D7:BA:B5:74:0C:7C:72:9E:61:E3:6A
Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Certificate issuer:       /CN=e585baea62f8d60626248738c45dfbd221737f4c
Certificate serial:       0199FC21C034B6D65976F7181A781907220C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
Manifest number:          1672
Signing time:             Sun 19 Oct 2025 11:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:34 +0000
Files and hashes:         1: 5YW66mL41gYmJIc4xF370iFzf0w.crl (hash: 2qjy3uFkztaZOgC1Kj+XvD/JlH07yap5WEaBDXzBvmA=)
                          2: 8aYlnDZg4v75vC6LNHm5OghRmm0.roa (hash: ST2fwGD3DZOiSeI3vgn+uSP6XW7Dy6QYeIzwYCfP/n0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:c0:34:b6:d6:59:76:f7:18:1a:78:19:07:22:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c
        Validity
            Not Before: Oct 19 11:01:34 2025 GMT
            Not After : Oct 20 11:01:34 2025 GMT
        Subject: CN=ddc9d4cf79e681b535d7bab5740c7c729e61e36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:2d:14:17:d1:0d:88:b8:09:5b:c7:d3:39:
                    31:ba:ef:cb:53:bf:f6:c8:b1:a2:eb:00:96:80:38:
                    61:79:59:b0:32:d7:18:26:13:38:3b:66:d8:5e:4a:
                    db:5a:a2:ed:13:fc:3b:95:db:63:8b:a4:45:9c:20:
                    02:80:ea:9f:98:cb:5b:bb:78:19:a8:49:d6:bb:d3:
                    58:9a:26:f6:41:a6:f3:40:1a:eb:f4:2e:76:b4:01:
                    aa:82:de:d9:c0:43:ee:c8:fb:0a:c6:28:dd:a4:35:
                    1b:32:4b:81:70:5f:e3:97:73:0e:ac:98:80:f1:1d:
                    11:1d:69:37:48:cf:7a:30:07:88:1f:d9:3d:d4:db:
                    2e:32:d0:c8:3a:1d:43:45:98:e5:e3:df:f5:0f:5a:
                    e5:ca:f0:da:a2:5f:4d:bd:be:e0:1a:9b:03:28:67:
                    c5:b2:99:7e:4c:b0:4d:09:e0:06:7a:9f:78:41:53:
                    e6:c0:70:0c:85:48:9c:e1:e3:96:fd:87:60:74:d3:
                    49:cb:40:3d:a9:02:2a:5f:c6:f1:2d:32:98:49:59:
                    c1:ff:c3:d1:f4:66:6f:13:36:3b:4a:18:97:94:42:
                    34:7b:a7:ae:a5:ce:5a:77:c7:b9:f1:8e:b7:a0:6c:
                    ee:6e:2c:e0:e2:20:3c:33:f1:75:63:27:35:4e:f5:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C9:D4:CF:79:E6:81:B5:35:D7:BA:B5:74:0C:7C:72:9E:61:E3:6A
            X509v3 Authority Key Identifier:
                keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:45:94:d0:7e:6a:12:54:f4:86:46:48:9f:3a:57:c6:b0:48:
         c5:23:df:2c:aa:0d:5c:35:ad:46:bf:5e:0d:9a:55:1d:bf:b1:
         c9:65:93:18:fc:c9:b5:22:86:98:a4:a2:3d:e9:a1:92:9f:ed:
         6f:d6:0e:2c:ad:bc:b0:a9:6e:31:38:e9:12:59:63:24:6e:d1:
         7d:7f:a6:96:dc:a2:06:67:44:db:b8:e3:9d:fc:01:54:56:cd:
         53:a8:7a:ea:01:99:9e:21:d8:05:06:1d:68:3a:d5:33:fa:a7:
         1a:23:f7:46:32:9b:4a:91:da:a6:22:c7:fb:7a:e9:7d:c5:ed:
         58:e9:f1:fb:2f:28:fd:1b:bd:a1:bb:72:fc:3b:da:ed:fa:5d:
         f1:00:72:a5:59:26:0c:1d:31:22:58:55:75:19:e7:a5:f7:d9:
         5c:70:11:ab:23:13:38:74:2c:f5:4b:7e:75:41:27:b8:69:11:
         9d:f3:9a:4b:36:5e:64:a1:60:f4:3b:a3:b9:d8:a4:f8:d3:1f:
         ac:71:82:a3:5e:e7:11:fb:c1:ee:79:77:ad:d8:d5:bb:2e:5f:
         a6:f1:9e:25:25:de:32:f6:ac:30:01:58:2d:46:f9:7b:1a:e8:
         f7:39:0f:42:bf:f6:60:7b:e4:16:17:9d:ec:03:da:de:a0:ff:
         22:5c:9e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:26 2025 by rpki-client