Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          rH2WkXjzqzP2JmJS5h4vHGEuXMII5uI+0kjbJGmKiR4=
Subject key identifier:   C2:E1:40:2F:48:4E:17:2D:54:2F:A4:8C:17:A2:09:84:6B:A7:C4:CD
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       019A71808441479A25FF43C599B8BF8F7BBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          176A
Signing time:             Tue 11 Nov 2025 06:00:39 +0000
Manifest this update:     Tue 11 Nov 2025 06:00:39 +0000
Manifest next update:     Wed 12 Nov 2025 06:00:39 +0000
Files and hashes:         1: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: XusR8PgiYg2O36ZsvAI2Deykh0NA4hMZuME1lkRP0DU=)
                          2: AGz8FgUVvE3Lvt6ftw3qobdQzrI.roa (hash: cmT93Ok9vnccSbuDE+6sxmO4c4ItItfSqVr3WTEQ4QE=)
                          3: Kcwvf_LAYIgCUsjZTWJ5jUAjHvs.roa (hash: DBuOCdcgOfeSRZCdhr9N5T6hmZRIvpkgOJLbi6ZyJsY=)
                          4: _jBBLJclW6nMPhZc0h0BDYneTxc.roa (hash: D22UFkL8xJNqJbxl26CraIfPR1Jjfc9VQ/gH0NzdnfM=)
                          5: sUzkXd5LwWwY0BXr324HOrp9knE.roa (hash: 9KlN4ytdVrB1XXBuhrFHGGSpHYOeDVdFTdNk2ffdYmY=)
                          6: y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa (hash: veQZfmM2vQ79LyoIwIgPeLyEYqZZHAzen/nPgRCSK7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:80:84:41:47:9a:25:ff:43:c5:99:b8:bf:8f:7b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Nov 11 06:00:39 2025 GMT
            Not After : Nov 12 06:00:39 2025 GMT
        Subject: CN=c2e1402f484e172d542fa48c17a209846ba7c4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c1:44:f1:40:0a:6b:ac:ab:66:f1:ff:4d:de:
                    2e:0e:c0:3a:a4:f1:21:b3:d4:3c:00:68:c5:94:7e:
                    e3:da:7e:53:4b:2f:80:a8:9e:55:32:32:a0:e1:cf:
                    a3:cd:e6:f2:2d:ae:d7:28:97:32:6a:7f:af:61:9e:
                    1b:a6:04:53:6e:b6:06:39:71:7b:a1:27:75:b2:9e:
                    aa:e4:e7:27:04:6f:88:41:15:24:e4:33:ce:b1:51:
                    76:1c:43:89:99:bc:17:8c:a8:30:b0:22:5d:57:c3:
                    aa:d8:7d:69:de:5a:d4:d7:05:cc:0b:64:6d:49:9f:
                    fe:07:ea:21:b9:71:5b:19:63:b4:de:2d:ee:40:0d:
                    43:51:24:8a:d8:1b:f6:cb:e2:66:da:4c:3c:47:18:
                    f5:18:4c:ac:c7:91:93:f2:f8:e8:27:c9:98:ee:b7:
                    7d:72:6a:f6:a7:c1:79:d6:98:03:81:64:eb:7f:b0:
                    a5:37:14:e0:13:90:e6:b5:8a:81:dc:22:16:06:a9:
                    4c:3c:12:20:b1:e8:cf:01:29:cd:c1:9c:56:54:ad:
                    33:38:f5:18:48:7f:01:c6:85:a8:e7:03:96:f0:a6:
                    37:02:51:eb:6d:f4:67:69:72:23:d3:dc:86:c9:1b:
                    6c:4f:17:34:73:55:59:ab:fa:39:04:ec:1d:7c:2d:
                    ca:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E1:40:2F:48:4E:17:2D:54:2F:A4:8C:17:A2:09:84:6B:A7:C4:CD
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1d:13:af:98:7b:6e:6e:d5:7e:de:90:44:5b:5e:bc:27:a7:
         39:cd:fc:0f:bc:0c:69:fb:15:d9:cc:26:61:3d:a5:94:cf:12:
         79:92:cd:2b:ab:21:69:c5:c3:c4:8d:66:71:e9:0c:3a:3a:5b:
         1f:f6:72:93:eb:40:8b:25:2f:22:11:ac:da:17:45:b9:a6:d8:
         11:f7:38:74:15:aa:ee:34:ed:a9:af:c4:41:79:fe:93:0c:20:
         91:c7:4d:fe:fd:2b:fd:05:74:92:e6:f0:d5:48:22:07:d0:ba:
         fd:0e:98:ba:97:0b:f4:bd:e0:18:71:49:b8:89:1a:fb:37:af:
         91:be:5e:1d:0c:57:be:b3:cc:2e:1e:19:54:a0:77:96:60:1c:
         0d:1e:16:5f:b1:ad:6c:c2:54:4d:25:d9:c8:db:f1:38:f2:58:
         07:b5:ed:de:a4:8d:47:bb:9a:f7:3c:58:7f:cc:92:ff:30:12:
         60:92:a1:f0:bd:f1:d2:59:e0:8a:83:5c:ed:97:35:20:31:08:
         98:02:dc:75:3d:c7:65:60:e6:e6:40:28:e3:50:da:57:a4:f8:
         76:8e:03:fd:eb:87:6f:e8:1f:06:03:f1:b6:b3:dd:0b:4d:37:
         44:bf:79:7c:96:12:85:1a:2f:9e:dd:12:e0:8e:77:4f:f3:0c:
         5a:b0:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:45 2025 by rpki-client