Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
File:                     5c949fM57nd9p0khCpbs7Za38uc.mft (raw, json)
Hash identifier:          gBmdRn0O1y1GrYOx3l9i9P8JftgfyYk1G2U+Tsn22J4=
Subject key identifier:   CF:58:49:92:92:91:C3:24:EA:1F:F8:3B:44:10:6E:45:E0:95:42:05
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Certificate issuer:       /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial:       01993EA9812F92FC16B76B55EE5AAB207ABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
Manifest number:          1681
Signing time:             Fri 12 Sep 2025 16:01:59 +0000
Manifest this update:     Fri 12 Sep 2025 16:01:59 +0000
Manifest next update:     Sat 13 Sep 2025 16:01:59 +0000
Files and hashes:         1: 5c949fM57nd9p0khCpbs7Za38uc.crl (hash: 2JrRBEO4riCi6yVgwpPG3RKq6P6OW1vGNm9h5R2Hofk=)
                          2: DV42p8se3L2zEopyG9pYChd08dA.roa (hash: AMDicnnABT602ZAKhipXKupbfFlgytQMYVTZdMa1H7g=)
                          3: fX6SqoqQUEoAM6pytW3ukSOt0zg.roa (hash: +rGQFaL4Fu3eymYJPVwzdqTwvlNhHBaV+a1ByGv4FVg=)
                          4: hvfjiAD64cA7L9D8OrPaqton6c4.roa (hash: HStUaUAHWIe7bU8iFx/jg5xzG2TZ8LFTU818HvhbG2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Sep 2025 08:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:3e:a9:81:2f:92:fc:16:b7:6b:55:ee:5a:ab:20:7a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
        Validity
            Not Before: Sep 12 16:01:59 2025 GMT
            Not After : Sep 13 16:01:59 2025 GMT
        Subject: CN=cf5849929291c324ea1ff83b44106e45e0954205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:c0:12:8f:54:7e:6f:6c:b4:35:bb:0d:ba:
                    f7:aa:77:b6:e1:19:ef:4b:0d:88:5e:09:8b:ec:30:
                    ed:62:58:2f:30:4d:d9:4c:26:a0:45:02:a8:ac:78:
                    1b:05:a9:3e:e9:e0:8e:3e:6d:25:14:fb:e3:95:80:
                    a5:a8:c9:21:3f:56:91:3d:a9:6e:aa:15:52:a0:b7:
                    0b:e5:f2:f9:6b:e3:62:8b:7d:b5:61:35:37:3b:39:
                    72:9b:37:ec:28:e7:50:d9:0f:3e:1c:a4:a5:7f:e2:
                    f2:9a:dd:16:a2:ec:8d:7e:60:b9:2f:41:93:6e:dd:
                    39:7e:f6:50:92:69:6d:8a:da:57:9f:f5:87:4b:44:
                    7c:05:79:40:f7:8b:c8:5a:9f:ba:b6:44:f7:aa:41:
                    ab:0a:ec:78:8a:95:54:af:7c:f6:e9:94:f5:e4:93:
                    63:34:1d:ee:6b:3b:b5:29:e8:8a:91:e3:0b:43:5c:
                    fa:ec:57:d6:8b:8c:b7:d4:9d:82:12:00:6d:d7:ee:
                    54:98:c6:55:02:4a:f8:72:b6:3a:dc:a6:36:dd:d2:
                    9e:cf:7d:6d:e0:14:33:d7:4a:64:94:40:98:b5:54:
                    71:59:82:18:f4:c1:32:8e:8b:a4:9b:8b:a7:25:bc:
                    70:ee:6f:4b:9c:77:08:ae:5a:7f:37:d1:a8:dc:8d:
                    4b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:58:49:92:92:91:C3:24:EA:1F:F8:3B:44:10:6E:45:E0:95:42:05
            X509v3 Authority Key Identifier:
                keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:e8:a6:f5:bb:e1:73:03:f9:b8:2f:1e:76:b9:e1:34:6b:
         38:74:ed:3d:ca:f6:23:7e:99:2a:3d:ec:e2:67:8c:cc:ff:53:
         e6:91:0c:75:25:9f:14:09:2f:8d:8a:31:2e:c3:46:fc:98:da:
         3c:44:fc:88:de:54:e6:08:05:5f:69:9b:39:f5:64:69:4d:28:
         bb:79:6b:04:00:ac:df:65:cd:ee:0c:f5:70:bb:13:25:d7:bc:
         93:ba:48:69:07:68:75:36:e9:0d:6b:2d:54:3e:cb:9d:63:c4:
         c1:96:d7:6e:21:3f:43:e4:32:d2:c3:be:ef:7c:48:06:6e:60:
         6b:a8:73:95:ab:57:68:b6:5d:e4:5b:b0:3a:5c:e7:20:9c:85:
         e2:9f:c6:13:59:50:61:d4:d5:16:0e:84:0c:f2:85:c3:84:c9:
         8a:ff:76:1d:18:f3:5a:6d:1e:03:ad:f6:8d:ed:5a:4d:90:02:
         c8:76:34:47:1a:0c:58:f4:43:3d:5f:18:3a:65:ea:84:bb:39:
         4d:fd:8b:f0:ef:c2:a1:3c:c0:28:77:fa:10:aa:33:40:0e:e5:
         11:7f:38:b5:ff:86:3b:19:ad:b4:f1:6f:f9:92:3c:b3:4b:6d:
         fb:31:1e:64:32:84:0f:dd:12:eb:29:33:e8:e5:41:71:15:5f:
         3f:9b:67:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 17:26:05 2025 by rpki-client