Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          vqZp4yDyvbdP+8vFBx/cCKpNcAHkM6Hr51V3M0rVu9Q=
Subject key identifier:   6D:BC:A1:F0:9B:3F:EA:FC:9C:7C:1C:D0:28:DD:95:BA:FB:8B:A8:11
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       019A5187ABDFA91903988C2C8DDE8D9DD22D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          0FFD
Signing time:             Wed 05 Nov 2025 01:00:36 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:36 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:36 +0000
Files and hashes:         1: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: Y4g96v0YF9mU8w38+utI8fj4zNq+EVaD7ZjM9vT84iI=)
                          2: 99MFFBjF3Dc4zTlDGHUkWaGScYw.roa (hash: WeTl8ArSSJSSsmY/ooHSrE+g99Jv4JYzfunEC3Fj5PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:ab:df:a9:19:03:98:8c:2c:8d:de:8d:9d:d2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Nov  5 01:00:36 2025 GMT
            Not After : Nov  6 01:00:36 2025 GMT
        Subject: CN=6dbca1f09b3feafc9c7c1cd028dd95bafb8ba811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:97:61:a5:68:ed:d8:8d:49:7f:e0:6d:09:a9:
                    8f:33:f2:86:37:ee:50:84:64:a2:57:c9:e8:36:11:
                    88:d7:cb:53:e5:b2:cc:4b:0c:55:18:bc:bd:32:61:
                    67:f6:35:59:69:9e:9a:9e:c4:ac:28:b2:ee:88:b5:
                    72:82:93:54:d7:0a:e0:ad:f1:7b:d6:0e:c3:7c:ea:
                    27:a1:1e:1c:52:97:e3:43:39:05:9f:72:06:4f:66:
                    df:00:be:41:1a:96:ab:06:5b:e6:ca:cd:c4:e2:a9:
                    50:f0:af:35:55:c7:a1:e1:37:67:d0:e1:2c:86:5e:
                    19:65:19:4d:5f:ae:7f:94:c2:ce:e9:eb:3c:e4:bb:
                    fd:c4:11:81:98:ef:c2:29:c5:40:88:9f:3f:87:82:
                    1d:ae:a9:6b:83:36:b7:f2:44:ec:bf:ba:9f:1e:4f:
                    1a:6c:eb:e4:28:14:28:6d:97:fe:53:1f:b2:32:7b:
                    ba:8b:33:74:03:ac:c0:a7:aa:25:64:df:6b:99:08:
                    81:b2:3e:31:b9:a5:6d:a4:ec:71:da:ec:c8:38:dd:
                    c6:14:ef:f9:5d:23:ab:e6:34:ec:8a:a8:00:77:ac:
                    00:d2:a8:1c:4d:c9:d1:b7:ec:b8:c7:b9:fa:1c:e8:
                    df:0c:de:6d:c9:f6:28:eb:6e:8b:fc:33:72:ce:40:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BC:A1:F0:9B:3F:EA:FC:9C:7C:1C:D0:28:DD:95:BA:FB:8B:A8:11
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7c:a7:f7:d5:3a:88:6e:e2:e5:e5:1b:4d:58:bc:15:50:2e:
         a6:0a:1e:91:e2:3f:00:98:dc:c9:6e:71:9e:e7:f3:97:7a:cf:
         13:50:a7:f7:54:60:ff:7c:12:0d:55:c8:5a:3c:ff:7c:32:f0:
         e9:71:a7:73:49:22:c1:c7:12:ac:f5:e7:09:63:c5:de:c6:96:
         cd:d6:8a:17:f3:e0:9a:fd:65:7a:d7:a1:d4:91:fa:2a:b0:4d:
         b9:ef:58:76:f5:ba:65:64:84:26:5b:fb:4d:f0:e6:a0:96:d0:
         32:16:2a:6c:69:2e:54:ab:63:27:09:55:78:b3:33:de:fc:40:
         7e:af:a0:41:1e:61:bc:b4:1e:40:a6:90:3d:2a:73:46:fc:8c:
         24:6f:e5:d7:2b:2d:6f:0e:5d:c3:f9:7d:bd:7f:76:7e:e3:a1:
         03:7e:d5:8d:b8:40:f7:70:71:ed:b8:f3:4c:48:fa:f5:d2:5c:
         54:ec:f2:5f:a8:1f:8e:8f:84:a3:bb:88:07:d2:bd:94:f6:73:
         f9:65:49:5a:08:90:85:7a:9f:d7:56:0a:6e:9e:24:4f:3e:d3:
         b6:22:e5:c5:b9:d1:0c:d3:ad:e9:b9:ab:9a:4b:cf:a1:ca:58:
         ee:27:35:c7:41:b5:3e:55:08:37:05:76:34:9e:bc:21:42:c5:
         8c:62:68:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh6vfqRkDmIwsjd6NndItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NzNmZjEwZDdhNTU0ZmM1MWE3Zjk5YzFmNjFlMWNlZWY5
OTg1YmMwHhcNMjUxMTA1MDEwMDM2WhcNMjUxMTA2MDEwMDM2WjAzMTEwLwYDVQQD
Eyg2ZGJjYTFmMDliM2ZlYWZjOWM3YzFjZDAyOGRkOTViYWZiOGJhODExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpdhpWjt2I1Jf+BtCamPM/KGN+5Q
hGSiV8noNhGI18tT5bLMSwxVGLy9MmFn9jVZaZ6ansSsKLLuiLVygpNU1wrgrfF7
1g7DfOonoR4cUpfjQzkFn3IGT2bfAL5BGparBlvmys3E4qlQ8K81Vceh4Tdn0OEs
hl4ZZRlNX65/lMLO6es85Lv9xBGBmO/CKcVAiJ8/h4Idrqlrgza38kTsv7qfHk8a
bOvkKBQobZf+Ux+yMnu6izN0A6zAp6olZN9rmQiBsj4xuaVtpOxx2uzION3GFO/5
XSOr5jTsiqgAd6wA0qgcTcnRt+y4x7n6HOjfDN5tyfYo626L/DNyzkCPHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG28ofCbP+r8nHwc0Cjdlbr7i6gRMB8GA1UdIwQY
MBaAFOZz/xDXpVT8Uaf5nB9h4c7vmYW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jYmU3ZTUtZGNjOC00MjY1LThkN2Qt
NDhjYTMzNjc1YTUwLzEvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jYmU3ZTUtZGNjOC00MjY1LThkN2QtNDhjYTMzNjc1YTUw
LzEvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj3yn99U6
iG7i5eUbTVi8FVAupgoekeI/AJjcyW5xnufzl3rPE1Cn91Rg/3wSDVXIWjz/fDLw
6XGnc0kiwccSrPXnCWPF3saWzdaKF/Pgmv1leteh1JH6KrBNue9YdvW6ZWSEJlv7
TfDmoJbQMhYqbGkuVKtjJwlVeLMz3vxAfq+gQR5hvLQeQKaQPSpzRvyMJG/l1yst
bw5dw/l9vX92fuOhA37VjbhA93Bx7bjzTEj69dJcVOzyX6gfjo+Eo7uIB9K9lPZz
+WVJWgiQhXqf11YKbp4kTz7TtiLlxbnRDNOt6bmrmkvPocpY7ic1x0G1PlUINwV2
NJ68IULFjGJo4g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:47:50 2025 by rpki-client