Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
File:                     V-cs5_jElCNaCEgjlluQRwS8gkA.mft (raw, json)
Hash identifier:          fH02yy2Anvm5IScmz84anNSDtxy7NezDbOf+BUcsr2E=
Subject key identifier:   D8:FE:3F:85:EC:5D:BF:D2:73:36:A3:E7:6D:8D:27:E4:7A:64:55:BD
Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
Certificate issuer:       /CN=57e72ce7f8c494235a084823965b904704bc8240
Certificate serial:       019A71EE7F2A126A6B05546162EC9ABD95F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
Manifest number:          0382
Signing time:             Tue 11 Nov 2025 08:00:46 +0000
Manifest this update:     Tue 11 Nov 2025 08:00:46 +0000
Manifest next update:     Wed 12 Nov 2025 08:00:46 +0000
Files and hashes:         1: V-cs5_jElCNaCEgjlluQRwS8gkA.crl (hash: HKHTnVg62Ces/lni5uFUhugb5euWrLPHrRVWnnoACwo=)
                          2: nosSlJwBAj_YBNjkT9avrBuc-tE.roa (hash: TuuhoWGeRJQwFAhBMUAaCZIEFTM7M38j/+BjxywcK08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:7f:2a:12:6a:6b:05:54:61:62:ec:9a:bd:95:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240
        Validity
            Not Before: Nov 11 08:00:46 2025 GMT
            Not After : Nov 12 08:00:46 2025 GMT
        Subject: CN=d8fe3f85ec5dbfd27336a3e76d8d27e47a6455bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c9:a8:92:48:74:17:a8:f9:16:76:76:60:09:
                    1a:d3:70:fd:47:e1:6d:3c:27:c6:dc:b7:a8:16:61:
                    3c:f6:2b:f1:be:5a:f0:cd:e8:fa:7d:5e:9b:48:5c:
                    45:11:91:0d:93:1a:3f:55:87:b6:39:16:7b:da:a6:
                    ab:66:3c:e6:2d:2b:8a:06:bf:43:c6:bf:e9:d7:4c:
                    f8:6e:95:e9:9e:52:7d:fe:9d:14:59:d1:f3:d6:68:
                    65:2e:13:44:05:61:d3:5a:6b:9e:25:80:65:72:86:
                    5b:d5:e9:ad:44:15:af:b9:45:22:9b:da:d2:0c:ff:
                    24:72:14:12:60:d0:55:66:d1:8b:15:7f:3d:b6:dc:
                    00:85:65:af:fc:b1:76:85:36:11:b8:31:16:cd:b3:
                    e5:06:bf:cd:58:07:be:e3:56:dd:96:42:11:e3:c0:
                    e0:24:67:ed:a3:3a:61:ac:d9:81:aa:84:12:d9:2c:
                    cd:a9:74:95:9b:5a:f5:5f:9a:fd:aa:30:51:7e:d2:
                    8e:f9:0a:2c:db:ad:e6:ed:da:ac:bf:c1:43:dd:f7:
                    81:91:07:72:8b:87:d6:6f:16:ed:8e:fd:d7:88:34:
                    25:ac:e5:f0:de:1b:0e:fe:49:37:1a:89:84:c8:b2:
                    9b:b3:7f:d3:6d:a6:dc:30:a8:9f:ca:7f:47:3a:f7:
                    64:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FE:3F:85:EC:5D:BF:D2:73:36:A3:E7:6D:8D:27:E4:7A:64:55:BD
            X509v3 Authority Key Identifier:
                keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6f:10:f9:5b:b0:01:97:91:a0:cc:b8:72:fc:72:27:77:e5:
         e7:d1:dd:08:d9:0a:4a:c3:29:06:7e:af:1f:f6:2c:60:c2:a7:
         6f:12:1f:ee:94:50:bb:d3:60:f0:c1:58:50:67:94:ab:e5:99:
         3a:78:ed:52:c9:e9:21:83:e9:22:9d:cf:3d:f7:b8:cf:da:aa:
         f5:8f:eb:0b:15:7c:8e:b4:2c:9a:62:b9:be:19:3c:0a:a0:9e:
         ad:df:92:79:f5:8e:5a:97:1e:f9:21:72:2c:83:a5:e3:7c:22:
         14:0a:f6:b6:04:d3:f1:8d:ac:1b:a6:fe:55:09:ab:fb:59:a9:
         de:3c:32:14:f7:d2:34:44:38:1b:b6:f1:d1:c4:b3:2b:32:1f:
         8e:84:f9:f9:29:8c:93:9d:5e:4c:48:b8:e7:12:95:04:43:01:
         73:59:61:9d:21:13:49:41:2c:65:2d:16:ac:06:e9:08:e4:a4:
         cb:f4:fc:31:99:55:36:89:1f:42:63:b3:7d:9d:92:1d:5b:e9:
         b8:37:40:bf:fc:22:69:ef:5b:94:e2:31:23:32:75:dd:fc:33:
         4f:a1:55:aa:db:36:78:b8:9c:7a:45:dd:ca:f9:d3:a8:d6:fa:
         db:71:53:6f:ca:ff:7c:27:c8:ee:44:00:33:79:ea:e8:17:07:
         50:a8:39:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:40 2025 by rpki-client