Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File:                     5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier:          aD+BSwNNcDOA1OmOOGw6I9f/0pyDBtp/WlzSO8K0kVQ=
Subject key identifier:   0F:99:C6:8E:6A:CE:E2:A1:0F:AD:30:F4:61:46:15:C7:D3:88:EE:B0
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer:       /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial:       0199225587CEAAAC00DF0B4AF931FF586FFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 04:00:54 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:54 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:54 +0000
Files and hashes:         1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: P0yBmFJZowyX3IBrL/S1cANk5Xw1/q5cGfJFG8XUxno=)
                          2: rR9_uvw4xytf2agupQ_iUhFHPXQ.roa (hash: X8fcaKRyDp0VyO5muGsQviUm1Dvz7ExE7FAL5YYozyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:87:ce:aa:ac:00:df:0b:4a:f9:31:ff:58:6f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
        Validity
            Not Before: Sep  7 04:00:54 2025 GMT
            Not After : Sep  8 04:00:54 2025 GMT
        Subject: CN=0f99c68e6acee2a10fad30f4614615c7d388eeb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:ba:95:a5:9b:7a:49:40:d1:90:73:19:bf:
                    31:9f:8f:75:0e:9b:3d:84:c6:dd:7f:16:91:57:38:
                    be:5c:cc:ee:7d:1b:ff:b1:6e:d5:be:b6:d6:4c:04:
                    21:b1:df:aa:b9:27:f8:26:b2:5e:2a:4e:fa:89:1b:
                    1b:15:c2:46:4d:1d:ed:b6:4a:37:99:7e:92:3f:10:
                    57:b4:c8:17:b8:4c:a0:90:05:06:ca:0e:21:43:ed:
                    ab:35:f6:91:bf:37:4b:9a:e6:e5:6b:4a:9c:21:de:
                    e6:ac:70:40:5b:33:cf:2d:58:fb:62:63:e4:4f:ae:
                    6d:8c:04:28:1d:52:1f:cc:4b:47:14:dc:7a:9d:fe:
                    af:29:47:41:c6:b6:e0:0a:c3:b4:1a:45:f8:64:7e:
                    a2:54:8a:52:18:03:00:48:6b:82:9e:51:16:ce:72:
                    1f:89:6b:5a:6f:7e:15:83:04:31:e4:a9:2f:f0:02:
                    80:ae:79:8e:63:78:ca:f7:66:d9:1c:67:c1:18:44:
                    91:c8:b9:d6:0f:b2:38:30:98:7f:36:1e:8a:b6:ec:
                    33:9e:59:eb:8e:4a:86:5a:fd:35:9c:7d:8e:7e:79:
                    7a:c4:ea:16:e4:74:99:ba:d7:78:2a:31:96:28:bc:
                    98:91:7f:da:a8:98:b4:02:e7:cb:55:e5:2d:c2:be:
                    63:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:99:C6:8E:6A:CE:E2:A1:0F:AD:30:F4:61:46:15:C7:D3:88:EE:B0
            X509v3 Authority Key Identifier:
                keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bd:84:e7:ee:54:60:84:4b:8a:a1:91:89:a7:54:fc:a6:8e:
         7a:a5:fd:b3:b3:54:cb:db:82:b6:6f:71:91:82:6c:d9:a0:d1:
         1b:1f:92:be:95:7f:72:fe:c7:42:95:8e:32:b0:d9:dd:4a:08:
         4a:b2:19:b1:60:30:e2:8c:9e:2e:de:5c:3f:c7:f2:23:d9:3f:
         94:3c:54:80:e1:99:52:fb:3c:b9:c7:0e:91:ac:cf:ed:13:8f:
         0c:e7:d3:18:b6:11:8e:8c:da:84:3b:8c:94:6f:03:79:e5:77:
         78:99:cb:c0:4a:71:b1:b6:fb:0f:22:44:ed:bf:8a:fc:fb:1c:
         9c:67:9a:6b:34:66:9c:09:d1:79:96:2c:9e:ce:f2:d8:35:ea:
         3f:ca:70:ff:99:bd:71:28:93:2a:8c:b7:54:5a:fd:24:b6:7f:
         f2:71:57:e5:75:14:41:43:d1:75:e5:35:8b:2e:c8:13:95:b0:
         22:a4:b5:f4:49:65:62:87:25:e5:c5:f9:ba:f7:86:57:74:23:
         7f:e4:53:18:39:46:cf:77:a2:81:d6:ce:c1:64:c0:71:82:55:
         ac:b8:a6:19:47:61:5b:cb:67:2c:f4:81:f9:d0:e0:22:23:70:
         36:a6:cc:4b:5a:00:12:c9:be:8a:cf:b7:ad:46:e0:ee:55:a0:
         df:c7:bb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:39 2025 by rpki-client