Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File:                     pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier:          D11vNaIwv4U2PAMZo7GEGJuRFJfXEjrGKdlRxp1ycWE=
Subject key identifier:   EC:8D:E9:27:75:15:66:94:A2:40:02:B9:60:72:24:90:5D:B7:31:51
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer:       /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial:       0199FAD7F17E4A5321920B90FEE23872C8B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number:          0D97
Signing time:             Sun 19 Oct 2025 05:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:20 +0000
Files and hashes:         1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=)
                          2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: CupQPn55Ll5x3067kTxc5I+Tfz/+tfIETI6m2fInLpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:f1:7e:4a:53:21:92:0b:90:fe:e2:38:72:c8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
        Validity
            Not Before: Oct 19 05:01:20 2025 GMT
            Not After : Oct 20 05:01:20 2025 GMT
        Subject: CN=ec8de92775156694a24002b9607224905db73151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b5:ee:6f:20:d8:1b:eb:4d:b6:55:9c:b6:80:
                    4b:95:9c:7f:68:49:a4:f6:4a:61:60:47:2c:f7:68:
                    96:7f:9d:44:b5:82:56:d9:34:dc:1b:47:c8:8d:1b:
                    aa:70:86:75:c5:c2:c6:57:f0:3c:8d:a8:83:0c:5d:
                    aa:3e:33:07:87:e0:0d:17:77:87:d6:8c:4f:a6:38:
                    a9:7c:58:2c:9d:5e:a3:ff:03:46:7a:28:25:24:4c:
                    31:07:42:00:70:8f:27:68:84:8f:a5:81:e3:b7:ee:
                    cc:83:9a:b4:2f:4f:1f:fa:c6:f3:70:ee:a4:c8:5c:
                    c3:6a:5e:99:1b:18:2f:e3:96:5b:a8:f5:d7:84:1d:
                    9c:cd:a8:80:1f:59:ef:f1:0d:9f:cc:a7:45:e1:c3:
                    bd:a8:7d:4e:4b:4d:28:ae:aa:77:0c:9d:e0:ed:f5:
                    6a:6a:a5:df:8b:52:6c:a7:86:e2:7d:96:98:18:b2:
                    22:5d:a1:f7:91:38:9f:8f:b2:66:31:22:cd:37:93:
                    5f:18:86:72:43:c0:ea:fa:12:ab:66:cf:42:8b:8a:
                    09:37:4d:f9:c5:36:8d:c9:0d:50:ce:56:d8:f9:6c:
                    d5:a5:2b:ca:b8:65:0d:8e:be:4e:47:c2:c6:3f:69:
                    d5:e6:f1:19:de:2a:86:ec:3b:fe:51:d3:92:de:7d:
                    43:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8D:E9:27:75:15:66:94:A2:40:02:B9:60:72:24:90:5D:B7:31:51
            X509v3 Authority Key Identifier:
                keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:98:46:ac:c5:79:c5:3f:15:68:9e:db:3a:b7:3e:bd:96:8a:
         4d:fa:71:9a:f4:da:ad:90:79:dc:e5:74:74:a7:e8:92:b1:91:
         14:85:f8:79:f6:32:09:68:9b:98:aa:36:27:75:a4:fe:fe:af:
         8d:ee:b0:47:7d:e4:cf:5e:ac:f1:f1:d8:fb:c3:c2:ea:6b:b4:
         64:e9:79:0b:74:80:81:6d:85:1f:3c:d5:c6:6b:73:a6:03:1b:
         f8:40:a9:88:40:04:ff:19:9d:00:7c:2d:8b:0f:73:c9:3e:af:
         13:79:e7:dc:dc:52:34:37:be:f6:bb:07:1e:59:a7:22:28:d4:
         a5:d3:88:e5:1a:6a:27:63:85:74:59:61:06:43:5e:e1:25:ab:
         71:21:c5:09:b8:ed:5b:b6:31:c7:70:8b:1e:f4:cf:6f:ee:c9:
         2f:a1:13:a8:e7:f9:52:50:cd:5d:7c:6f:0b:c9:ec:c7:ef:d7:
         8c:a9:3a:41:e3:73:ea:e8:fc:5f:0a:f4:16:4a:f1:6b:2c:ad:
         17:97:bd:e9:04:c1:1f:e4:bd:00:e3:98:90:cc:d6:6f:a3:3f:
         51:fb:94:ea:46:cd:9c:99:e4:fb:f6:69:60:1a:25:29:89:aa:
         ed:63:70:20:52:c1:33:5d:4d:ba:14:76:01:8e:a5:24:3b:3b:
         e8:58:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:07 2025 by rpki-client