Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          xDoD+IlYBHDR2k2GyCgBugquwv1iqZJd070pDH6Yx8g=
Subject key identifier:   4F:E4:73:2D:23:74:ED:EE:D4:FE:F7:94:14:8C:76:9D:EF:32:7C:1F
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       019A4F994C92AD8332FBD002C33F9A302470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          1717
Signing time:             Tue 04 Nov 2025 16:00:37 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:37 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:37 +0000
Files and hashes:         1: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: aPgABMHPIqIjrCI6nPiH/OlltY14rzUEvWhRQ2U1lTY=)
                          2: TJcT2DJKq9sbzduugmROupXys-s.roa (hash: 945dsBaVvuzrinluSo92NkW9CX506XM50XuIK87H/WU=)
                          3: qi7IIsHiw2r5ApLjqmnfIZyDYrI.roa (hash: 2E8e6YWLaIukfT6w9as+SzWaRk3QDMUINAxBnfY7Uh0=)
                          4: qrp40JibSYUajfp86w1boBXGmSo.roa (hash: Hf8opJvaDtrLthe1laKTVc3MNwDoesRiktOsOBQx/Ss=)
                          5: t4Wibxq4ODCb7PZTxEDqd4zIWdE.roa (hash: 8Nf30qr6PkolOBfuLtitg9kbH2hSLfyR4zbwrMUsPFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:4c:92:ad:83:32:fb:d0:02:c3:3f:9a:30:24:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Nov  4 16:00:37 2025 GMT
            Not After : Nov  5 16:00:37 2025 GMT
        Subject: CN=4fe4732d2374edeed4fef794148c769def327c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:65:31:60:8f:83:8d:6b:b5:8a:e3:24:d4:
                    14:ac:fe:7e:45:50:f8:06:da:54:72:e7:00:cc:60:
                    e5:52:0b:de:85:db:e6:e2:bc:7a:1d:02:7b:a3:e9:
                    12:aa:89:b3:bb:f1:cf:a8:82:b7:0e:c5:6a:63:34:
                    87:0b:02:49:eb:e0:0c:a3:9a:72:1e:cf:93:08:cf:
                    70:44:20:c1:b8:58:d2:3c:5e:bc:32:e0:0d:67:a3:
                    50:f0:0e:41:99:06:fb:f4:06:95:17:aa:aa:11:1b:
                    0c:d3:42:17:1a:42:7f:45:c3:92:cd:90:99:ba:67:
                    30:9e:f6:7f:ca:e0:e3:90:99:22:a5:41:da:5a:f8:
                    9d:d2:64:4a:6d:ca:f8:43:ec:ac:2c:fb:2f:f9:c2:
                    4b:88:8d:f9:af:63:6a:4f:0f:3f:fe:8d:71:be:d5:
                    5b:4a:91:72:27:cb:50:d7:65:73:11:b9:1e:a3:75:
                    38:67:7e:69:e9:0d:0f:eb:27:98:fa:45:4c:7d:5f:
                    46:af:46:19:14:7a:1e:e6:55:b2:53:e5:57:5b:28:
                    af:21:03:22:cb:fd:7b:7a:37:89:64:40:a4:59:1d:
                    1d:7d:29:80:ad:bb:bd:48:d6:08:15:4a:9d:62:db:
                    c3:91:11:64:94:5d:a0:90:6f:71:45:31:1c:bf:ce:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E4:73:2D:23:74:ED:EE:D4:FE:F7:94:14:8C:76:9D:EF:32:7C:1F
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:30:75:69:e3:5d:2e:3d:ad:43:4f:92:e0:34:21:8b:fe:82:
         bd:99:a4:9b:0f:c5:99:7d:18:3b:77:84:07:7a:ff:8a:f4:a9:
         6d:ae:62:61:ba:06:17:04:ed:63:d3:e3:ae:47:39:0e:81:bc:
         85:c6:75:52:8b:26:56:55:7d:1c:80:84:de:59:a5:47:97:96:
         8d:0d:c6:9c:88:4c:a8:23:86:37:8e:0d:1c:ea:16:a8:23:3d:
         46:00:58:7d:13:7c:e0:dd:e4:65:10:8c:15:69:07:6c:88:29:
         b6:8e:02:33:d2:27:aa:eb:71:9c:03:82:bb:4a:53:bd:4a:19:
         ec:cf:b8:80:ed:e7:24:eb:cb:93:9c:a0:ab:15:86:16:e0:93:
         3c:1f:f3:c0:82:06:c3:1c:8a:b9:44:1e:4d:b7:ce:9c:6e:f7:
         cb:83:48:2b:7d:41:dc:74:3c:1e:4b:51:b9:e1:2a:14:bc:20:
         4b:85:86:2b:9c:86:80:b1:b9:33:97:c5:8a:3b:36:60:52:31:
         b0:be:da:d7:a1:f8:37:1e:6c:a3:04:61:7d:c1:5c:27:f2:11:
         4f:31:a7:f7:be:fc:02:61:bc:d9:ce:9f:a8:64:d4:80:6f:6e:
         ce:f1:fd:0c:3f:88:dc:e5:20:80:05:b9:12:72:17:65:a0:9b:
         a3:c2:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:24 2025 by rpki-client