Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
File:                     SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft (raw, json)
Hash identifier:          wexhcjlmztOi6Q686VF/Gq7NsVRHKQvTh7/lUR/zrpM=
Subject key identifier:   5C:CB:3F:59:7A:C6:CF:DB:EF:0A:05:7C:79:80:E2:C4:D1:08:A9:5E
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Certificate issuer:       /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial:       01995F7E3602FC24CAB5D9EDF15BEBC02D2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
Manifest number:          05AD
Signing time:             Fri 19 Sep 2025 01:02:10 +0000
Manifest this update:     Fri 19 Sep 2025 01:02:10 +0000
Manifest next update:     Sat 20 Sep 2025 01:02:10 +0000
Files and hashes:         1: SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl (hash: qHnntYCsh8WIqTa15FPvXZZxJRUpkiB5Ab7u9klXi8Q=)
                          2: U-j6AH3Jk894ib2lGr8hU_3DRF8.roa (hash: w5lxC2CItXuabeADCVx84G8ZOzDwpOBIylCCN5VOoy4=)
                          3: oxulDl5efUsnH_zB2CKuyCzWnYc.roa (hash: SkrSgjDKSdwo4WofC+cl8qo1zYQp5rl0nDLt9YudYRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 01:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5f:7e:36:02:fc:24:ca:b5:d9:ed:f1:5b:eb:c0:2d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
        Validity
            Not Before: Sep 19 01:02:10 2025 GMT
            Not After : Sep 20 01:02:10 2025 GMT
        Subject: CN=5ccb3f597ac6cfdbef0a057c7980e2c4d108a95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:b6:6f:80:c2:16:f3:1a:ed:ec:89:b2:12:
                    07:24:4e:2d:dd:13:b0:2a:c5:c5:ab:45:b5:55:ed:
                    4f:fc:97:ee:72:2e:7e:50:e4:ed:87:fc:a9:60:3f:
                    2c:5f:51:ea:80:20:bf:73:15:ee:ca:3e:d7:b6:ef:
                    c0:5b:4c:47:f9:27:40:e4:75:e9:37:d0:a2:ef:a0:
                    9d:83:d1:0f:80:74:f8:86:0e:8c:a3:c7:0f:d3:34:
                    2f:f3:30:d6:27:99:98:b5:22:d1:ea:8d:92:83:2f:
                    61:7e:08:bf:2b:67:47:a2:3b:c1:bf:ad:83:8a:f7:
                    bd:67:ff:bc:4e:e5:73:00:a4:4a:33:9f:35:b6:ce:
                    12:a3:1a:7e:39:5c:0a:fd:81:f6:8d:48:20:16:e3:
                    22:1b:48:6a:a2:a7:28:d9:fd:87:f8:e6:81:09:14:
                    d1:97:2d:9b:f0:d9:7f:fe:e1:89:6e:9e:04:02:48:
                    5b:43:1e:28:75:9b:3d:3f:38:eb:d7:93:5b:2f:52:
                    a1:9e:da:60:57:a7:47:c3:37:43:ea:d2:e6:3e:69:
                    b2:31:db:22:03:8e:e8:c8:c4:c6:3f:14:85:db:2c:
                    90:77:49:30:69:28:05:10:da:61:08:cd:23:e3:66:
                    27:00:85:85:2a:98:74:22:2a:c1:ec:5d:61:ea:22:
                    25:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CB:3F:59:7A:C6:CF:DB:EF:0A:05:7C:79:80:E2:C4:D1:08:A9:5E
            X509v3 Authority Key Identifier:
                keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:05:5d:21:c7:a9:bb:35:e8:b3:b3:4d:cf:3c:38:17:4f:70:
         0f:a4:de:f3:86:83:2a:2d:30:04:2b:f6:65:10:93:52:43:8e:
         90:34:a8:0b:d5:ed:7c:2d:bc:9e:d4:c8:81:72:c0:a7:fe:85:
         d6:fd:70:3c:7f:68:f4:ac:92:73:b9:fe:df:3b:1b:a4:30:84:
         0c:27:52:99:f3:61:ef:a9:45:3c:e7:5a:01:ab:cb:aa:29:99:
         d4:50:5e:d1:d5:ac:6c:1f:bf:be:93:06:e4:29:cc:42:bf:15:
         c8:9a:ca:58:7a:8b:dc:98:44:fc:80:d3:2f:e8:ee:f8:be:c4:
         3f:d0:43:ce:f0:13:d0:9c:e3:01:6b:65:dc:cc:44:08:0a:fd:
         82:96:ca:f7:0b:c9:4e:83:21:66:65:16:c4:e9:ce:db:3e:8c:
         80:17:83:67:c9:8d:8a:e7:a0:d3:e1:2c:a0:47:f4:74:a6:93:
         4e:00:ac:f1:21:4b:87:de:c7:c2:73:cf:31:79:df:80:f8:2e:
         29:25:e0:3a:b6:f1:d0:d5:45:70:a2:e8:7c:7c:fe:d4:ff:b6:
         da:a0:69:e7:9d:65:f1:d7:53:67:4d:87:dc:a1:a6:a7:26:76:
         b1:64:2e:68:24:af:a1:09:f8:3e:f6:34:21:a1:f4:7b:38:55:
         1b:78:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:35:44 2025 by rpki-client