Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File:                     5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier:          mPU/ny7rqymrcpOycfHv5jEonueh2UqYpUz90nK+7G4=
Subject key identifier:   67:1C:A4:EC:4A:FA:AB:E5:FC:EF:0C:86:50:93:DC:0F:05:8E:9E:73
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer:       /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial:       019A52D1BFA108011FF3F9A56AA62C881C17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number:          0AF7
Signing time:             Wed 05 Nov 2025 07:01:08 +0000
Manifest this update:     Wed 05 Nov 2025 07:01:08 +0000
Manifest next update:     Thu 06 Nov 2025 07:01:08 +0000
Files and hashes:         1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: 3VcYm3Dz3Rg0Cg40HtwYY9L78le5gjkv4gfNnKkGE1Q=)
                          2: ZMyt0wlwwtfEVeBGSMwWH5LMwOs.roa (hash: ZRcLJw84jWUkZxRHh71cpWt8gGeiHiTOOmsOGRDFxnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d1:bf:a1:08:01:1f:f3:f9:a5:6a:a6:2c:88:1c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
        Validity
            Not Before: Nov  5 07:01:08 2025 GMT
            Not After : Nov  6 07:01:08 2025 GMT
        Subject: CN=671ca4ec4afaabe5fcef0c865093dc0f058e9e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:9f:11:0c:17:2b:54:4b:4e:e6:7b:d2:1e:
                    aa:b4:71:db:6d:d2:99:e1:9b:79:65:24:ff:20:ae:
                    bb:38:31:b7:4b:6b:8f:a6:d5:7f:5c:6a:8b:57:04:
                    15:de:02:c4:36:a5:22:a6:c8:7f:ea:7e:a5:fc:50:
                    9e:c7:d8:7d:7d:e2:09:43:b3:a8:cc:5d:f4:f3:03:
                    03:82:b9:68:64:c4:4a:6a:e3:43:e5:e5:ac:c8:9a:
                    aa:eb:2b:8c:37:46:5d:cf:4a:6f:00:13:5f:50:f4:
                    bd:d0:07:c4:cc:8f:c9:87:0a:a0:cc:b4:f7:75:b0:
                    13:06:db:78:bc:51:77:af:b0:e8:00:c4:be:22:24:
                    d9:ed:44:0d:46:d1:78:b8:89:9d:a4:42:dd:99:6a:
                    c1:61:15:b7:b4:96:41:5d:8b:f7:7b:bd:4f:76:6e:
                    ac:a8:45:7e:99:54:e0:ca:9e:61:60:72:b8:11:02:
                    7e:03:c9:34:c9:c3:75:12:63:17:f5:a2:b8:62:c1:
                    29:bc:05:a6:32:ea:c6:a9:1a:62:18:c5:90:54:73:
                    8b:24:0a:c5:f7:0e:aa:7b:01:bb:a5:d0:26:b8:b6:
                    f0:8e:cf:f3:d7:65:28:b1:b8:35:c3:5a:35:5a:9d:
                    44:77:f9:19:bb:e3:2e:d9:01:e3:68:7f:8d:5e:07:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1C:A4:EC:4A:FA:AB:E5:FC:EF:0C:86:50:93:DC:0F:05:8E:9E:73
            X509v3 Authority Key Identifier:
                keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3d:c8:2d:51:ec:a8:19:39:b9:bf:a9:3f:e0:53:c4:76:64:
         31:23:da:05:c7:3a:36:e2:01:5e:ab:b3:2b:3b:21:61:6b:f1:
         bf:14:6e:e3:37:1b:ce:e3:14:fc:ca:97:04:5c:37:8b:3f:61:
         39:78:75:2e:cd:17:5b:36:03:66:da:57:31:66:58:e1:d6:09:
         54:fd:45:4b:49:a4:18:94:82:50:bc:73:de:06:fb:84:f1:31:
         23:cf:55:55:2b:25:74:cb:f3:04:2b:20:49:db:f2:70:da:0a:
         97:2c:43:f7:c1:c0:fb:f1:aa:66:06:62:20:25:04:02:d2:a7:
         d0:7a:13:39:30:ac:9f:13:f5:29:cf:b9:01:44:99:6d:18:a3:
         ca:63:16:91:99:c7:82:28:2b:61:6b:01:b5:dc:05:ad:58:09:
         26:41:30:59:0f:a4:2f:ec:6e:18:19:86:87:1e:e3:7e:2b:8e:
         f1:6c:51:30:53:5f:07:4a:4e:6e:92:2c:1c:70:7d:79:5e:19:
         d7:10:2a:87:21:47:62:65:18:e2:29:82:ee:77:bb:40:7d:9f:
         ec:75:97:23:42:c1:6d:75:b7:b7:06:b3:c0:c3:7e:75:9d:66:
         87:b8:f9:98:a8:da:4b:e5:4b:0a:dc:f9:27:51:13:da:47:cf:
         af:9e:3f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:36 2025 by rpki-client