Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          SePWvxdjGG4s5XlcWd3OZl+TfkIsHib/PKvmmVGka+w=
Subject key identifier:   DD:50:35:C1:4E:85:38:E6:85:B9:79:38:0A:10:B4:CD:F5:85:C8:8B
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       01992DEC2F5154B033A3E875986506C939EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          0F66
Signing time:             Tue 09 Sep 2025 10:01:17 +0000
Manifest this update:     Tue 09 Sep 2025 10:01:17 +0000
Manifest next update:     Wed 10 Sep 2025 10:01:17 +0000
Files and hashes:         1: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: pNF0zVTHgZOssXlzoAYS3N8N72IIWRauALEXbkfHkxM=)
                          2: 99MFFBjF3Dc4zTlDGHUkWaGScYw.roa (hash: WeTl8ArSSJSSsmY/ooHSrE+g99Jv4JYzfunEC3Fj5PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 08:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:ec:2f:51:54:b0:33:a3:e8:75:98:65:06:c9:39:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Sep  9 10:01:17 2025 GMT
            Not After : Sep 10 10:01:17 2025 GMT
        Subject: CN=dd5035c14e8538e685b979380a10b4cdf585c88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:71:f3:61:bc:b2:be:9c:8e:74:7e:b2:5c:
                    9a:ab:b3:5f:56:f4:63:ac:53:98:1c:62:8e:23:46:
                    ee:32:0b:7d:12:fa:07:2a:5d:7f:bf:53:33:97:3d:
                    8e:be:aa:90:21:75:f9:fc:07:17:cc:21:d4:a0:33:
                    cf:51:f6:6f:51:2b:8d:7e:ac:59:83:c6:25:41:b3:
                    4c:22:38:fc:8c:93:44:7c:ea:02:e5:db:71:14:a2:
                    28:0e:c7:5f:d5:2e:f4:66:69:92:36:84:5d:ae:fe:
                    f0:99:80:1c:ea:19:7b:ca:7d:61:2e:0d:f8:de:18:
                    f0:11:68:04:24:5b:5e:06:c4:18:be:53:eb:8f:fa:
                    8d:7b:61:6c:3e:7b:f4:6d:bf:d8:0b:e3:3c:b1:b5:
                    b9:62:cd:fb:9b:44:d7:a6:bc:b3:17:78:53:cd:d4:
                    43:f1:24:2d:8a:f4:84:3b:ea:99:2f:08:07:d9:7a:
                    b6:af:24:8a:c1:a5:66:f9:a1:18:09:cc:7e:21:78:
                    73:68:e6:7a:bb:8f:a7:6a:0a:f5:00:bf:36:c5:8c:
                    93:65:37:ea:f6:6f:2e:25:50:d7:fd:61:17:b8:a1:
                    5e:64:16:4a:2d:d7:a3:25:1e:73:a8:75:2b:10:97:
                    46:8c:88:7e:a7:35:c2:51:b4:d2:e8:4c:d1:5e:1f:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:50:35:C1:4E:85:38:E6:85:B9:79:38:0A:10:B4:CD:F5:85:C8:8B
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:fb:8f:14:22:fa:61:0a:58:b2:77:fd:74:84:c9:ff:a1:b4:
         2e:52:1c:ef:4c:80:8c:be:95:c8:0d:51:2d:41:f2:1c:89:7c:
         ef:4e:62:ec:c6:9a:ea:5f:57:b2:75:36:dc:82:9a:93:b7:a5:
         31:84:e5:eb:2e:de:5f:f2:f7:d6:41:5a:db:a1:ba:b2:be:b7:
         f7:e6:73:5b:ad:c8:0f:85:02:da:f8:b9:be:cc:0b:8a:95:e5:
         94:6c:fd:8f:b9:31:d8:8f:c5:43:a4:cc:1b:59:00:30:c2:60:
         4f:a8:a5:8a:00:c8:ff:f7:b5:67:c0:ca:51:81:82:d4:96:bd:
         7a:42:35:55:af:ef:f1:f4:b5:03:a9:3d:db:8a:b7:eb:ee:c7:
         12:52:ad:2b:0c:ef:c2:58:df:0c:bf:fd:99:c6:2e:a8:60:44:
         be:77:7d:c7:af:c1:19:22:09:83:45:d7:83:3f:c9:23:0a:3a:
         ce:97:df:36:70:e8:6e:1e:66:f2:a6:14:bb:9d:58:a4:c3:c9:
         b6:97:d0:7c:ea:34:54:26:4a:c4:d1:fc:78:d5:bb:c2:43:4c:
         82:ec:63:33:02:57:4b:1e:0d:cf:a7:57:c2:96:bc:7f:4d:68:
         44:ee:15:91:32:2d:a8:26:c1:6c:7a:3f:e7:05:40:87:60:aa:
         1f:8e:6e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:18:20 2025 by rpki-client