Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File:                     54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier:          4PNsR+tin+OjjT8tlyMc1VB7ODdV51AQduNTSCc6DCs=
Subject key identifier:   C4:8A:1E:5F:0C:8A:BA:7C:EC:48:04:72:BB:EC:5B:8E:B3:66:2E:98
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer:       /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial:       019A213FB125B05FA8D57099D5A95ED78FDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number:          1688
Signing time:             Sun 26 Oct 2025 16:00:13 +0000
Manifest this update:     Sun 26 Oct 2025 16:00:13 +0000
Manifest next update:     Mon 27 Oct 2025 16:00:13 +0000
Files and hashes:         1: 4KuSjXjGdyF1nScN1LwMlleHlmA.roa (hash: HlUuzXxOiMUBV49vY7GcCdve69QZxWM3RwORJ/36zYI=)
                          2: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: gv1UjOBCKmkJJ0X543uCvIkvCCT8A0ANjpIF8cmkaC4=)
                          3: 7lacSGraqTGoKqaT-zAuzKx29Fk.roa (hash: FcCPAhyHMElJytjQ2WhAIPJGkfaFqPbC3K17eZo24Pw=)
                          4: 8yDd52yiQnWrlCx6kxIE7m9PFW0.roa (hash: B6yZTku2TmuXp6OETqEJRAmXjacawP+SH3G431U19zA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 16:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:3f:b1:25:b0:5f:a8:d5:70:99:d5:a9:5e:d7:8f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
        Validity
            Not Before: Oct 26 16:00:13 2025 GMT
            Not After : Oct 27 16:00:13 2025 GMT
        Subject: CN=c48a1e5f0c8aba7cec480472bbec5b8eb3662e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:5c:4b:6e:2b:e8:ad:71:4d:94:6e:1d:ce:
                    17:14:5e:f7:be:b3:c3:be:90:3c:89:c3:54:83:8a:
                    6f:24:72:a7:ff:8e:98:be:54:33:16:6c:b7:26:f0:
                    de:fc:97:86:49:6c:08:9d:5c:38:ca:2d:9e:65:72:
                    91:da:4a:1f:47:a4:c3:c2:79:7d:f8:8b:0b:bc:83:
                    54:78:b0:9e:1a:7b:a3:ac:90:65:84:e5:3c:d6:6f:
                    b1:3f:cd:46:7c:bd:d3:0b:00:39:40:f1:a6:bb:e4:
                    63:c1:56:5f:8f:df:49:74:4d:13:13:b7:9c:de:7e:
                    37:35:7c:b5:32:e3:19:2e:8c:ad:ef:a5:8d:c8:c5:
                    fb:f8:b7:4f:0d:0c:69:21:8a:ee:2b:96:64:66:b8:
                    69:52:0d:34:ee:e7:73:38:d6:fb:2e:11:76:07:46:
                    9e:8e:8c:e9:8b:d2:b8:27:bd:c1:61:6a:4b:c7:83:
                    4a:79:b4:56:d6:88:bf:47:d1:18:8b:88:be:5f:80:
                    b2:0a:b9:bd:26:c8:27:f1:0d:d4:d5:21:52:18:cf:
                    a9:90:e5:47:d1:cc:e6:7d:dd:a0:a6:cd:04:66:06:
                    32:fb:c2:30:ff:4b:7c:c6:ac:e0:8d:f2:71:33:92:
                    33:4d:49:14:7e:91:d5:dd:14:52:cf:ae:48:7d:76:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8A:1E:5F:0C:8A:BA:7C:EC:48:04:72:BB:EC:5B:8E:B3:66:2E:98
            X509v3 Authority Key Identifier:
                keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:03:84:da:52:de:e1:c4:f3:c0:09:bf:f7:4c:0a:e9:82:4f:
         0c:aa:44:a9:d8:fb:72:1a:56:cf:e5:e9:ec:4f:3e:55:d6:02:
         84:2f:b4:73:c7:7d:75:b7:c5:b7:e7:7e:a2:6b:99:ab:9e:88:
         9e:60:20:06:1c:9e:7f:b7:1d:f5:0f:93:8a:8c:0a:4e:2c:cb:
         b7:f2:05:a0:74:9a:1c:33:3d:c8:69:cc:12:9e:c8:38:c8:2c:
         a4:0e:fb:dd:b5:66:7f:c4:2d:f5:90:16:81:79:70:3d:f6:34:
         d3:b2:f7:43:4f:66:ed:2e:cf:d7:91:e5:9d:78:34:3f:9e:4f:
         40:bf:bd:b7:6a:81:60:7e:d8:be:96:62:37:9b:09:27:81:76:
         fd:86:a2:93:58:cb:3c:b3:c6:3c:7e:fa:f9:b7:10:5e:30:d1:
         28:43:60:19:eb:ee:a8:0e:b8:0c:b5:cf:76:35:43:6f:96:bb:
         09:80:35:9d:78:b8:e6:fd:ed:d7:61:71:c9:ad:1a:c3:63:4c:
         b0:d7:36:27:b2:f6:8a:6b:f1:7e:d7:81:90:15:c5:e1:d5:c6:
         99:70:ea:a7:9f:67:b6:28:39:90:c2:d5:81:6b:85:51:5b:83:
         46:0e:0b:18:de:c6:75:e8:fd:27:7a:5d:d2:72:d7:d2:05:b9:
         45:e5:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:40:21 2025 by rpki-client