Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File:                     5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier:          P0f9vqe7O1sXKDCVSkrVN/KxNbSASIXP9RxIMDF5Zbg=
Subject key identifier:   E3:9B:0B:ED:E7:4B:26:BD:7E:02:3A:09:D0:12:EE:18:C7:63:AE:C7
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer:       /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial:       019922FA9CE027222CE57DEDBF9599A5D506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number:          0835
Signing time:             Sun 07 Sep 2025 07:01:13 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:13 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:13 +0000
Files and hashes:         1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: Mgo6qMXpYJkhPxYoDK42dgqEgK+djLR54o9ZJKMcH8A=)
                          2: UsysYH87_MeusDVf_2VMl6ZiNoA.roa (hash: l/efuOvavvhLwF5l7zidaNvIJhmEgoHAGGzbipbPPZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:9c:e0:27:22:2c:e5:7d:ed:bf:95:99:a5:d5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
        Validity
            Not Before: Sep  7 07:01:13 2025 GMT
            Not After : Sep  8 07:01:13 2025 GMT
        Subject: CN=e39b0bede74b26bd7e023a09d012ee18c763aec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f5:e3:2e:47:e9:7d:7e:01:a2:03:29:8c:9a:
                    26:60:8d:b4:4e:87:bf:c7:ec:93:4d:45:4b:da:bc:
                    e4:f4:25:8c:e2:b3:cc:cf:92:16:2f:ab:fd:71:59:
                    cd:4e:1f:24:72:e9:be:4c:03:ae:fe:3a:25:c7:7d:
                    7f:d3:ec:a6:be:46:d5:51:f9:60:f8:02:be:3b:da:
                    7c:ac:f8:59:de:a7:be:7e:52:b4:8e:51:2d:bd:6b:
                    7a:16:4e:f6:f3:3c:5c:ca:32:26:69:28:cd:e3:9a:
                    ec:37:2d:e0:31:07:ac:1e:01:29:e5:54:a4:dc:ee:
                    b1:c8:60:c9:e2:9a:1d:d7:3f:3d:87:f2:72:f3:32:
                    6d:21:3c:7b:a1:81:d6:86:5f:95:e4:cf:cf:b9:72:
                    0b:61:fb:0d:aa:e3:d4:96:8c:f0:43:f2:d2:50:31:
                    a9:04:6e:4e:7f:17:d3:34:9e:a9:b2:94:76:10:17:
                    98:7f:1f:1b:7b:0b:a6:f4:b4:64:f6:fd:63:2d:9b:
                    79:ce:22:21:c1:56:fb:34:0d:7d:ea:bf:0e:34:32:
                    ce:bd:e1:9b:8c:6c:94:8d:1c:1d:84:38:0c:06:07:
                    c6:b5:8f:35:96:39:b8:7d:19:15:da:d6:2f:32:bd:
                    98:cd:a3:a8:73:82:26:27:eb:b9:f1:05:3c:3f:4c:
                    93:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9B:0B:ED:E7:4B:26:BD:7E:02:3A:09:D0:12:EE:18:C7:63:AE:C7
            X509v3 Authority Key Identifier:
                keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9c:ec:2d:90:a7:9c:c1:c5:aa:43:a3:35:e1:ac:82:37:4c:
         f8:c2:c8:01:16:bf:05:61:75:e6:a1:0e:1f:3a:5e:a3:72:65:
         63:7c:fa:6c:c7:be:ab:2c:bb:94:ae:cf:28:61:00:ee:9b:19:
         23:e9:e5:d7:fa:69:d8:87:c7:95:89:11:ad:29:16:26:90:47:
         99:b6:e7:81:9e:fe:60:36:f3:f6:6d:bf:bb:3c:89:73:2c:9a:
         ea:4c:f5:33:d8:45:aa:9d:0e:a8:7c:0f:18:67:99:67:b0:5f:
         0e:d3:44:ae:c8:38:ad:72:7b:42:2c:4d:c7:e7:15:f9:1b:5d:
         cf:a2:24:d7:34:8b:e3:b3:fc:7f:d0:5b:41:fd:df:fd:6f:57:
         f5:95:43:5a:0a:33:a3:5d:9b:0f:ca:73:03:8f:1a:cf:65:52:
         2e:82:68:e0:95:8e:5c:62:01:68:1f:2c:f2:5b:bb:09:8a:59:
         a4:08:4d:ef:e7:8d:4e:0c:bb:78:40:98:7b:32:94:85:8b:0c:
         a8:0c:b1:84:e4:b4:89:9b:1b:a3:27:56:02:ca:cd:dd:b2:a4:
         f3:85:54:1e:46:bd:20:3b:1c:83:c9:0f:20:b5:e0:8b:d8:20:
         9f:52:f6:a8:e4:2b:8f:af:b8:a0:75:fb:40:13:4c:b4:e3:2d:
         a0:c9:cc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:15 2025 by rpki-client