Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
File:                     4MW7PaU0Nb9B4X997EfUSE5_MSk.mft (raw, json)
Hash identifier:          4LcvQCeeYmqKv1XAmDaV3pjfethriMb4dTY2kMByjPM=
Subject key identifier:   87:4D:33:61:94:25:3B:F9:53:98:4D:CE:EC:D9:6D:E4:80:9F:A2:D0
Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29
Certificate issuer:       /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
Certificate serial:       0199EE9D2D6D4BA7FE5ED78727993170E685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
Manifest number:          A9
Signing time:             Thu 16 Oct 2025 20:01:42 +0000
Manifest this update:     Thu 16 Oct 2025 20:01:42 +0000
Manifest next update:     Fri 17 Oct 2025 20:01:42 +0000
Files and hashes:         1: 4MW7PaU0Nb9B4X997EfUSE5_MSk.crl (hash: rIQWeSJ/MJ2l01LTCWxs+loeIPqnwXWWW2/fULQg22k=)
                          2: 9GR2dHkwSLVkeTC97SQWtO-Ou6s.roa (hash: 8dva46ddaCVAVhuRS29XVF0xv3mbOQXR/o6u4dePeK4=)
                          3: DOzJON1bs3hiZ3VHnEmsvsi0zBQ.roa (hash: 0UphDOF22C9mcUTv3cPQJDc8LIXIF1k+LyuIOSGCS50=)
                          4: OSYxWvdp836ljzdJlZno6YzlpGY.roa (hash: /5wE/HFby5mcM6+MFX0ZUh7Bq6r/zEB35ZUNILuEf84=)
                          5: Pfa8J12SK6qYlpp-JCEIEXT9ItQ.roa (hash: m14RvIzc2rz/0aG6QUUC8I/FrsLRlE3a6BpD0Y3vDzU=)
                          6: svN3Ok6VL2a-EVdJe6UTIYjW6Ug.roa (hash: MGU8Tr1wY79f7aOOX/E7HRh3hZPVTx7pl2+ACWyvncY=)
                          7: vmS5BdN7qv6lm6TAxWJK3LZ33KQ.roa (hash: 15/dbHkyNejRc1b3Z2HNyUYHE9FyHjv1laHgorxIb9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Oct 2025 20:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ee:9d:2d:6d:4b:a7:fe:5e:d7:87:27:99:31:70:e6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129
        Validity
            Not Before: Oct 16 20:01:42 2025 GMT
            Not After : Oct 17 20:01:42 2025 GMT
        Subject: CN=874d336194253bf953984dceecd96de4809fa2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:12:c4:20:94:e2:ce:f0:7c:4f:3a:99:7f:77:
                    7d:36:cb:ff:ad:a8:5d:9b:68:cf:02:0a:92:2c:54:
                    e1:20:36:85:af:31:ff:0f:36:8c:df:c9:6c:f6:7c:
                    73:45:3e:b7:d7:9c:32:96:79:c0:89:a9:c6:87:6e:
                    94:d9:ea:de:c0:68:c4:df:73:c8:2c:7d:bd:6e:80:
                    55:73:3c:14:73:19:56:e5:bd:bf:bf:64:9d:d4:55:
                    a6:93:cf:31:9b:0f:d0:c4:8d:31:cf:f2:8d:0e:48:
                    f9:1d:b0:29:32:3b:e8:d5:3d:ca:82:6b:0c:13:22:
                    0b:75:3a:31:e1:4b:71:97:7d:5d:aa:bf:03:3a:9d:
                    63:33:49:2d:f1:00:ba:a4:e4:a2:c3:d2:56:2d:6a:
                    40:bf:2a:3f:57:ee:d6:f6:e6:e9:88:32:d3:2c:34:
                    2c:b5:a5:9f:0c:c8:e9:12:8e:6a:32:aa:f7:25:b3:
                    67:33:3d:91:63:a0:00:f1:39:68:fa:8d:0e:b1:87:
                    5e:53:04:23:08:fc:7c:f0:09:b8:32:ab:cf:fb:65:
                    4f:ae:67:3a:7e:d3:b5:5a:8c:d9:86:bc:3c:4e:66:
                    37:e7:72:8c:4f:bd:30:75:73:c1:9b:13:07:e5:47:
                    80:7c:67:95:f2:82:e5:71:dd:42:99:9c:2c:7e:b2:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4D:33:61:94:25:3B:F9:53:98:4D:CE:EC:D9:6D:E4:80:9F:A2:D0
            X509v3 Authority Key Identifier:
                keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:48:fd:e1:b2:d0:ba:ee:5a:4f:f1:d1:26:93:f2:6c:c8:95:
         ea:7d:73:55:ed:63:9f:78:43:8b:19:13:ff:98:2c:69:63:d5:
         7b:82:f4:61:c1:cf:00:08:57:3f:78:9d:5d:5e:3d:eb:98:e6:
         7a:62:e6:59:29:d5:a2:aa:86:1d:f1:5e:44:43:1c:b7:f9:fb:
         ba:0b:d7:1c:e8:39:bf:61:83:d5:2f:5c:9a:c9:f0:b2:0f:34:
         e6:91:d2:40:91:d3:7c:0c:ee:47:af:17:a8:da:1f:3a:d4:6f:
         cb:c0:bf:aa:19:2b:b5:ca:da:c0:19:dc:93:85:a9:3e:8b:1b:
         c4:35:07:32:0f:cb:26:8e:41:71:80:21:19:2d:59:e0:c3:12:
         91:5e:69:00:06:24:84:fa:7b:7c:3d:59:6a:f1:80:f4:dc:9e:
         19:61:2c:f1:24:5f:c7:5c:2d:6f:e2:51:5c:9c:33:24:f7:7c:
         e0:a5:a8:ff:67:0e:de:c8:6c:ab:c1:20:33:27:86:c7:80:27:
         78:30:d2:da:22:5d:74:dd:7a:b7:71:dc:5c:a9:2b:47:ea:31:
         3a:f0:f2:ef:b8:33:3e:14:f1:fa:c2:a5:a3:ce:27:bc:c3:81:
         ab:01:2d:b0:0b:35:8d:50:35:a0:7e:de:a7:bd:2b:16:bd:ab:
         18:8d:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 04:43:13 2025 by rpki-client