Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          mW0LAeq3E1ennP9nWyGY8CO97+SUD61XMlV6BgTgBks=
Subject key identifier:   BA:BB:B5:2A:3D:44:76:A6:7D:D8:B9:DA:BA:44:7F:5A:E0:11:E8:89
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       019950AF41A2F2ACEAC415A54562FED7A65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          16D3
Signing time:             Tue 16 Sep 2025 04:01:26 +0000
Manifest this update:     Tue 16 Sep 2025 04:01:26 +0000
Manifest next update:     Wed 17 Sep 2025 04:01:26 +0000
Files and hashes:         1: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: hK6q7vzL085022NtbMLmtgfxunlM25X9ZShlS+mVaPQ=)
                          2: AGz8FgUVvE3Lvt6ftw3qobdQzrI.roa (hash: cmT93Ok9vnccSbuDE+6sxmO4c4ItItfSqVr3WTEQ4QE=)
                          3: G0ftlnbe3AfUxkIlVJu817sXseI.roa (hash: 1QDTj5XgAWQ+NORVH29ULpxQ4HDX5cEh/RzgDzWTnkA=)
                          4: Kcwvf_LAYIgCUsjZTWJ5jUAjHvs.roa (hash: DBuOCdcgOfeSRZCdhr9N5T6hmZRIvpkgOJLbi6ZyJsY=)
                          5: sUzkXd5LwWwY0BXr324HOrp9knE.roa (hash: 9KlN4ytdVrB1XXBuhrFHGGSpHYOeDVdFTdNk2ffdYmY=)
                          6: y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa (hash: veQZfmM2vQ79LyoIwIgPeLyEYqZZHAzen/nPgRCSK7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:50:af:41:a2:f2:ac:ea:c4:15:a5:45:62:fe:d7:a6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Sep 16 04:01:26 2025 GMT
            Not After : Sep 17 04:01:26 2025 GMT
        Subject: CN=babbb52a3d4476a67dd8b9daba447f5ae011e889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:2b:1c:23:a7:70:ff:ba:46:93:c2:80:16:
                    e3:f5:77:9d:10:4f:6c:1e:b9:fa:ab:d8:3d:ea:6a:
                    37:8e:a7:f0:b2:16:f6:aa:b8:5a:28:e8:83:78:c6:
                    51:85:b8:6e:eb:3c:52:02:b1:9a:ab:66:23:0b:f0:
                    5d:a6:bb:4c:40:7e:6b:de:a8:f4:ea:3c:a5:6a:d1:
                    9d:ea:5d:5d:01:ae:2a:15:ed:08:df:8c:ad:da:93:
                    a6:a7:48:de:b0:91:45:6b:93:c8:a6:6c:f0:35:ee:
                    33:d0:69:ee:32:bf:30:f1:e2:6c:2d:e5:9d:b0:50:
                    71:a4:03:4b:a9:77:7b:73:1a:b8:36:64:30:6a:2e:
                    e4:5d:32:e4:9c:5d:cb:07:03:c6:18:3f:a4:3d:9b:
                    2d:e1:d4:90:41:6c:64:f1:d2:5d:d3:de:c4:5a:45:
                    63:07:25:3a:7a:81:17:94:05:2d:fb:14:0a:90:41:
                    9c:86:b7:8d:b5:bf:22:71:ef:03:66:02:05:c0:93:
                    cf:ab:3e:98:c6:f0:a6:2e:d3:8f:31:39:6d:3a:de:
                    2b:23:a4:c2:8d:6c:79:50:29:f2:c9:a3:b4:5f:a3:
                    33:dd:3c:62:66:82:4b:ea:fd:e7:1a:4d:10:f3:06:
                    16:90:11:be:69:a2:c0:4f:67:6c:89:85:44:1d:de:
                    32:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BB:B5:2A:3D:44:76:A6:7D:D8:B9:DA:BA:44:7F:5A:E0:11:E8:89
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:13:ea:80:92:b9:27:d5:b5:88:56:23:7a:ad:2e:36:d2:10:
         44:80:c5:78:17:5a:47:80:42:7d:66:82:2f:ee:d7:73:dd:c8:
         9d:91:1f:eb:1d:b3:79:94:48:ef:d0:38:82:ca:35:5f:37:43:
         fa:6e:0f:46:95:7c:c4:15:8b:6c:62:4c:90:91:c1:99:38:a7:
         e7:83:6a:a4:cb:18:2d:c9:97:c8:bb:94:3a:fe:3c:cc:34:dd:
         4b:4c:7c:f8:ec:15:bd:d8:4c:a0:5a:8c:88:fb:a5:ce:45:d6:
         2d:d0:e1:a9:c3:0f:7d:a1:c0:3d:06:e2:60:30:21:2a:28:f0:
         38:72:b2:f4:0c:6f:91:7d:54:56:85:d0:45:a3:03:8f:24:e2:
         9f:65:f0:1d:43:13:81:7c:56:81:eb:44:21:ec:95:af:92:27:
         cf:95:91:f7:3b:72:66:de:00:98:b4:aa:86:cb:a8:c7:87:02:
         1a:85:57:33:7d:91:e8:b1:ce:e7:3e:70:0d:5a:ea:6d:4e:4f:
         5f:c6:86:cd:3b:99:76:dc:a7:d5:82:98:75:fa:b4:23:51:9b:
         51:4f:fc:0c:9e:0e:86:49:19:88:86:1c:b4:c3:c7:5d:40:4b:
         c5:40:36:5e:09:3d:f0:cb:e6:8f:5b:41:0c:3a:80:0a:7b:f2:
         80:ae:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 08:54:34 2025 by rpki-client