Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
File:                     n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft (raw, json)
Hash identifier:          1WwSSTSg99Xe+v8V6k8YaWxpzLVgqsYesNKeaK7sFzk=
Subject key identifier:   9E:96:C5:FD:47:95:18:51:70:38:A7:03:05:F9:A2:BA:55:68:91:FD
Authority key identifier: 9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC
Certificate issuer:       /CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
Certificate serial:       019A15727A347A250C25C4C52F7F7EB6801D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
Manifest number:          0676
Signing time:             Fri 24 Oct 2025 09:00:14 +0000
Manifest this update:     Fri 24 Oct 2025 09:00:14 +0000
Manifest next update:     Sat 25 Oct 2025 09:00:14 +0000
Files and hashes:         1: i5QXiPkXceFCKpymhBdKs-kxqdg.roa (hash: JW9l6XsHQNvt/hO+lQdoU/xk33G+5qgeiTQZTkcdU8Y=)
                          2: n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl (hash: INhORfyL9OBut0R/8OjYTskkVcratCQb+goDVUebnWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Oct 2025 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:15:72:7a:34:7a:25:0c:25:c4:c5:2f:7f:7e:b6:80:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
        Validity
            Not Before: Oct 24 09:00:14 2025 GMT
            Not After : Oct 25 09:00:14 2025 GMT
        Subject: CN=9e96c5fd479518517038a70305f9a2ba556891fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:32:42:98:b9:33:45:3a:47:94:34:33:2b:ce:
                    1a:31:af:2e:e1:30:39:ad:03:e0:16:c9:73:5c:ba:
                    01:6f:6d:9b:1b:08:a2:7b:47:bc:fe:dd:6c:45:81:
                    1f:29:de:4a:f5:03:b1:5d:b3:28:43:88:ac:06:8d:
                    87:27:89:df:94:64:6a:a2:d3:5c:f7:2e:37:5d:1a:
                    e9:e4:8f:27:47:0d:52:c7:16:ad:29:ac:8c:29:42:
                    c1:67:f9:ee:8b:c7:ae:c0:0e:c8:70:c1:2f:eb:7d:
                    00:11:ad:99:39:53:27:bb:f6:06:25:2a:0a:73:18:
                    7c:9c:f8:c5:c7:67:92:48:1b:bc:fa:20:ba:0e:d4:
                    5b:e2:dd:21:7f:07:7b:bd:ea:82:a9:ff:49:82:23:
                    49:2b:2f:04:44:5a:da:8f:2a:82:4f:ab:0b:37:4a:
                    e2:4b:28:42:1b:04:f5:a3:88:5c:8a:3d:f0:22:d8:
                    c1:f0:9b:5f:74:98:33:8d:9c:18:04:b7:c3:58:d9:
                    08:83:05:18:0e:55:a0:ed:f3:4c:d9:25:b0:c1:bc:
                    29:e6:ab:ac:1b:7d:8d:47:e5:e0:8e:ba:80:b6:d7:
                    c9:94:57:68:10:9d:81:5a:db:2d:de:f2:c7:4d:9f:
                    60:d1:5a:1f:8b:7b:6a:6d:35:2c:2b:85:60:e4:54:
                    27:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:96:C5:FD:47:95:18:51:70:38:A7:03:05:F9:A2:BA:55:68:91:FD
            X509v3 Authority Key Identifier:
                keyid:9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6d:17:2b:27:f2:89:2b:fa:d7:3f:94:75:de:91:7f:66:e7:
         d9:e4:d6:c0:42:eb:a2:77:80:dc:2e:6d:f3:28:d0:7a:4c:28:
         4e:37:48:3a:e9:63:e4:76:b8:44:1c:1a:1e:2e:89:35:46:23:
         1b:c4:c6:a1:8d:a3:46:f6:ab:69:f7:9f:ae:6d:94:5f:c4:5c:
         55:a8:cc:95:8b:46:f9:60:f7:18:49:20:b7:7a:b1:2a:b9:2f:
         b3:20:e6:98:b1:e4:90:c1:3c:75:80:2f:7d:79:0a:f4:26:ed:
         fc:90:88:fd:e4:53:84:c6:86:e7:61:37:5e:0c:10:ac:dc:0b:
         71:15:d7:c8:07:f7:31:5f:8d:ae:1b:58:db:87:54:e6:ac:8e:
         6a:d2:18:ab:c6:c0:37:e0:3b:bf:dd:ca:01:14:85:f8:4e:65:
         df:d0:07:94:ce:de:4c:ac:99:c4:b0:55:ed:65:42:47:28:43:
         d9:87:9a:e6:fc:02:d4:8b:85:a5:57:78:02:94:30:91:d3:f8:
         eb:67:97:a6:97:53:73:8a:3f:39:5c:68:db:5f:de:3c:81:9a:
         18:89:d0:8d:82:a1:ff:b4:1e:5a:cc:8f:8d:64:8e:6d:d7:03:
         4d:40:01:6c:77:f1:05:82:93:c3:01:a2:a6:0f:b6:b5:3d:76:
         70:65:f5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:14:59 2025 by rpki-client