Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File:                     1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier:          mgcHMQoSNijB680kyjkV2uKWbtO9szOiSJYS8TTjs9w=
Subject key identifier:   74:BD:08:FC:72:A7:72:B8:9C:62:09:19:58:F4:2D:91:52:3A:31:24
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer:       /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial:       019A51877D14BBDEDE222DB4751BD19E09D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number:          0362
Signing time:             Wed 05 Nov 2025 01:00:25 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:25 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:25 +0000
Files and hashes:         1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: WRU/T5LGyID5HTyOarSdNanVqQbFO6Ax1nF1NS0nwa8=)
                          2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:7d:14:bb:de:de:22:2d:b4:75:1b:d1:9e:09:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
        Validity
            Not Before: Nov  5 01:00:25 2025 GMT
            Not After : Nov  6 01:00:25 2025 GMT
        Subject: CN=74bd08fc72a772b89c62091958f42d91523a3124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:94:b7:a7:db:a2:f8:32:41:29:78:7c:6e:
                    09:57:15:6b:bc:7b:b1:1b:87:0b:b3:86:7e:7b:65:
                    a8:30:96:18:62:4e:fa:46:f9:6e:08:10:dc:54:e7:
                    00:dd:ad:b6:50:81:fc:96:0c:9c:b1:a4:e8:58:a5:
                    3a:2f:0f:26:6c:3c:d6:0e:39:1b:e1:c9:c7:ea:ca:
                    f5:4a:86:6f:32:43:27:63:d9:e4:1f:67:0b:c6:b8:
                    b2:8a:9a:a7:05:4a:c8:18:0f:63:43:0e:7c:e0:53:
                    ea:e8:f9:7d:e2:ae:22:6a:25:da:70:93:d0:6b:98:
                    75:82:44:22:96:33:6b:02:58:92:de:01:91:fc:6c:
                    5b:ad:f9:a3:df:bc:9e:ce:18:e6:b4:91:d9:bd:9b:
                    1f:24:6a:0a:34:ca:e0:0b:1c:db:49:6f:7b:8b:b0:
                    f5:7c:0e:ae:54:cf:d9:e4:fc:32:6c:ba:6e:8b:ad:
                    f3:20:e0:b7:38:10:d7:68:91:36:62:66:8c:f7:97:
                    d2:58:bc:b5:f1:4b:39:d7:ce:e1:ad:aa:21:54:ab:
                    4d:a4:ba:c3:ca:2d:01:74:5b:9f:2a:0c:7a:54:a9:
                    29:fe:a2:a5:b1:50:de:46:cf:78:eb:de:da:a2:60:
                    1f:2f:b3:b6:79:6c:2e:69:ef:e4:1d:c6:4e:45:0e:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BD:08:FC:72:A7:72:B8:9C:62:09:19:58:F4:2D:91:52:3A:31:24
            X509v3 Authority Key Identifier:
                keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d6:6a:03:8d:48:5d:3f:b1:c8:94:df:2b:b7:e2:60:be:9b:
         ac:9e:89:17:59:b2:47:95:0e:11:e8:ab:ef:f8:11:35:13:83:
         5a:5d:94:9b:eb:0e:a6:3b:47:61:b7:7b:f4:70:b9:0a:7e:b7:
         d3:b4:97:03:53:16:7a:84:35:72:5c:34:89:2f:64:83:f9:73:
         2a:35:d3:cf:a8:e5:da:9f:e7:e9:84:eb:d3:9e:3f:7e:bf:ed:
         0c:fb:31:ec:a8:00:e7:99:41:09:71:49:0a:34:f4:b3:71:2f:
         96:5d:a5:b1:14:96:43:53:b0:7b:21:28:b0:76:c1:f1:0c:b3:
         5a:0c:1c:ca:c8:45:80:ee:d9:6a:c3:22:5b:4b:73:75:b6:b9:
         b5:f3:8c:68:c5:76:35:ce:36:99:4e:33:11:53:b9:f3:ff:18:
         f5:e9:60:9b:60:54:59:32:91:d6:ac:c2:11:77:55:07:aa:8a:
         a4:09:c7:08:7b:5a:70:85:7b:3f:ba:a1:5e:c1:90:f7:24:67:
         7e:bd:72:12:05:1c:9e:ee:01:e5:90:e3:44:2a:40:a3:a3:90:
         fb:39:64:7e:19:ef:59:b2:e4:16:64:8d:82:b7:4a:7c:f8:fc:
         5d:6a:db:64:2f:0b:24:de:35:2a:e8:ad:0b:05:a8:ec:ff:0e:
         13:5b:0e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:14 2025 by rpki-client