Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
File:                     V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft (raw, json)
Hash identifier:          JPS+cI056Volx+cjNPBWOiySJ7skcioyGnkU+37MSQ8=
Subject key identifier:   66:C4:8E:96:4A:D2:3E:94:C8:D5:66:C6:17:CC:D4:DC:C7:A1:15:64
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Certificate issuer:       /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial:       019A19F431814A1778205C35442CE8FDC000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
Manifest number:          153A
Signing time:             Sat 25 Oct 2025 06:00:25 +0000
Manifest this update:     Sat 25 Oct 2025 06:00:25 +0000
Manifest next update:     Sun 26 Oct 2025 06:00:25 +0000
Files and hashes:         1: TvA9yelIeCEsBOpJLkUsBtajKVo.roa (hash: LU0UMBgUcT/XT2r0CrVUUIqkTToEzuecRy7vAdwTq9c=)
                          2: V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl (hash: 63fPYjm/z5XdMkONMIPv8YlbD3oxNPk1hAE1NBfoYkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:19:f4:31:81:4a:17:78:20:5c:35:44:2c:e8:fd:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
        Validity
            Not Before: Oct 25 06:00:25 2025 GMT
            Not After : Oct 26 06:00:25 2025 GMT
        Subject: CN=66c48e964ad23e94c8d566c617ccd4dcc7a11564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:2f:42:07:b2:31:da:c3:85:f2:95:f5:79:
                    b5:e1:9d:20:53:59:03:0a:97:26:17:8c:74:4b:25:
                    da:8c:6f:68:48:61:98:e2:aa:76:e4:73:53:5d:96:
                    09:e1:ee:2f:ac:67:f2:66:93:b9:15:6a:7e:7b:60:
                    8b:b4:c5:d9:5d:e1:6c:47:b9:e2:bf:da:d2:8f:61:
                    dd:98:5e:8a:4c:96:00:87:47:91:2c:ff:8b:e5:2b:
                    1b:9d:ae:84:00:e6:61:f4:5a:06:67:1d:cd:87:45:
                    32:bf:9b:52:86:60:5c:7e:13:6a:dd:64:34:13:85:
                    32:13:75:f2:8c:cd:dd:d4:e7:46:de:52:f0:7d:cf:
                    da:5a:e0:ab:1d:10:ff:c0:32:7b:6d:4c:53:a2:16:
                    cc:ea:34:0b:45:a0:a3:da:c0:54:03:c7:a5:6d:0c:
                    91:b3:ed:89:8c:d7:ed:d3:52:8f:33:8b:44:3b:97:
                    4a:f6:bf:ac:57:c6:fe:46:87:7c:af:e0:34:3a:86:
                    35:81:37:6c:6f:76:84:55:58:4f:af:ef:42:a8:23:
                    de:91:4f:e8:4b:1c:57:5c:fe:09:f4:bc:bd:5d:43:
                    33:96:cb:db:05:94:f2:46:3c:e7:06:11:e7:b0:c0:
                    3f:7e:42:0d:2f:0d:c0:e2:17:75:b3:b7:91:8d:e7:
                    50:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C4:8E:96:4A:D2:3E:94:C8:D5:66:C6:17:CC:D4:DC:C7:A1:15:64
            X509v3 Authority Key Identifier:
                keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:aa:a5:82:18:4a:3a:b8:f4:73:9f:fe:8d:40:25:b6:fe:f4:
         b5:5d:96:74:e8:12:36:ff:24:e7:b9:ea:2d:f3:da:9a:e7:f5:
         c1:d8:d5:72:76:9f:85:86:03:c7:f4:9b:db:2a:c9:bb:fd:f9:
         55:50:0a:d5:5f:09:62:50:2e:fa:a6:fd:34:94:c4:89:f9:b6:
         76:6d:66:bf:9a:1b:75:e4:0c:0b:20:8e:d6:73:2b:f7:59:6d:
         e6:37:a2:e2:8a:00:21:fc:26:9f:8d:ba:55:70:f9:2e:d5:94:
         0f:44:aa:06:f2:0b:3e:2c:d4:43:2a:d0:94:1f:a2:22:21:d1:
         45:e2:f3:a6:b2:f6:e8:a8:d8:f3:92:ba:6f:ff:9f:47:0b:2a:
         d9:24:a5:c8:c5:25:4f:c4:de:8a:2d:4b:38:c3:71:de:e3:da:
         bc:ba:49:d6:b7:ed:68:8c:a9:30:7d:1d:26:62:b0:85:d0:64:
         b3:f2:24:9c:d4:8b:d4:db:55:87:b7:58:8e:8e:8c:9a:78:d4:
         24:cb:bc:29:54:fa:bb:82:a0:00:e4:a4:5a:a1:75:8b:83:ff:
         ae:a0:58:99:80:17:ff:db:6d:5d:3a:3b:ef:f4:fa:c5:79:77:
         43:98:89:76:3b:93:0f:ba:d5:bd:b8:c9:29:4a:74:a5:49:b3:
         7e:a5:fd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:10:12 2025 by rpki-client