Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
File:                     V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json)
Hash identifier:          QTDjHX91byac+Ewmc3sKO3itie/FO3Or2rE/q5/LqEg=
Subject key identifier:   F5:9E:65:7D:F0:41:60:ED:E6:95:71:89:4B:A2:4F:9C:6F:7D:C4:CC
Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00
Certificate issuer:       /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
Certificate serial:       019A54C070F6C4CC99A579CDD7848448B382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
Manifest number:          0925
Signing time:             Wed 05 Nov 2025 16:01:29 +0000
Manifest this update:     Wed 05 Nov 2025 16:01:29 +0000
Manifest next update:     Thu 06 Nov 2025 16:01:29 +0000
Files and hashes:         1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: rKL4RZBL81oAfty6acR/BbampEstWXva1TPvRWByHI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 16:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:c0:70:f6:c4:cc:99:a5:79:cd:d7:84:84:48:b3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100
        Validity
            Not Before: Nov  5 16:01:29 2025 GMT
            Not After : Nov  6 16:01:29 2025 GMT
        Subject: CN=f59e657df04160ede69571894ba24f9c6f7dc4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:1a:4d:07:88:06:57:df:7d:cf:78:cb:96:
                    f9:f1:ca:8a:e8:e4:f2:d1:f9:0a:e6:a8:d8:7a:76:
                    cb:86:e2:d6:60:5b:f6:e6:e0:16:2a:2b:32:3f:e6:
                    03:f0:f4:32:19:32:d8:d6:4b:98:f6:07:7b:8f:0d:
                    94:5d:dd:88:31:dd:85:d1:34:12:22:c3:74:b5:43:
                    47:28:94:a0:70:2a:b4:b3:28:1b:8d:99:17:b0:e5:
                    48:d3:2e:01:06:bd:9f:46:47:0e:e1:9b:a3:d1:0b:
                    be:df:fc:b9:4a:fe:9e:46:4a:0b:f4:b1:30:49:3d:
                    78:3a:82:1b:21:07:be:c6:f0:58:0f:4a:06:70:70:
                    4c:81:9b:b8:17:4a:62:19:24:eb:73:1a:17:ed:55:
                    f3:3e:50:29:ec:24:e4:5e:57:d6:80:33:62:bc:44:
                    7b:7a:86:a9:71:05:09:1e:a7:8b:e8:e3:dd:4c:e9:
                    ba:ea:fd:b4:7f:ac:50:2b:ee:5d:0f:43:2d:c9:6c:
                    e0:68:0c:e5:f9:0d:ad:e1:1d:79:b4:c9:e2:cf:e0:
                    90:2d:0e:19:9a:98:f4:35:61:89:6b:55:be:f8:28:
                    43:70:42:b0:3b:98:64:ed:2d:f4:6b:be:8e:1e:39:
                    1d:9e:2f:57:be:e2:68:e4:a4:da:49:0f:d4:c6:20:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9E:65:7D:F0:41:60:ED:E6:95:71:89:4B:A2:4F:9C:6F:7D:C4:CC
            X509v3 Authority Key Identifier:
                keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d6:19:da:42:9d:17:7f:4b:1f:3a:81:5a:1d:38:8b:29:fb:
         ee:61:d4:65:a7:99:ab:f9:49:33:22:db:c2:3c:d9:df:20:89:
         88:cb:8d:eb:46:e9:bf:c8:d9:68:e7:5e:5c:54:ba:cb:9c:5a:
         da:28:94:62:7b:ab:1d:fe:36:d6:05:04:14:3f:26:ff:d1:78:
         3f:90:ca:47:ce:15:7c:76:04:05:8a:61:c3:bb:1e:cf:f0:d2:
         39:3f:f3:87:9c:b0:7f:e1:b2:24:09:43:15:9c:75:08:98:27:
         c4:88:84:3a:4e:ac:2c:ac:8c:94:9d:6e:7b:01:a6:16:af:1b:
         85:f5:c6:dd:1d:81:69:20:30:91:c5:cb:64:8e:e8:79:68:0b:
         9d:3e:d3:6e:50:f7:67:f5:27:37:04:2e:60:b3:9e:89:aa:c4:
         b2:a5:09:b9:b5:6c:87:86:16:75:83:0c:a1:2f:a9:be:33:84:
         c1:9d:aa:d1:41:f5:29:81:77:ac:33:22:c9:a3:7d:3c:de:19:
         52:44:ce:d2:49:82:8b:75:d6:27:c0:ab:12:27:b7:93:e6:da:
         70:58:75:fc:16:7e:2f:9c:af:c2:77:21:46:b2:c3:a8:7d:30:
         20:e5:66:73:86:bb:94:ff:27:63:bd:34:1d:1c:87:68:be:3f:
         2c:c8:64:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:37 2025 by rpki-client