Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
File:                     V5G7EVC-rF6gxyTznSzn_M_BVGo.mft (raw, json)
Hash identifier:          ms9UrtqHkrQCHzCkKXwJdAoVVDItFVcUqkqy9kbCxdU=
Subject key identifier:   E5:B5:A5:B8:83:3F:EF:7B:49:0B:24:A9:39:4E:23:00:9A:4F:DC:0E
Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A
Certificate issuer:       /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
Certificate serial:       019A4EF5B5C222EF02D4BEE7099EE7E84242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
Manifest number:          1627
Signing time:             Tue 04 Nov 2025 13:01:56 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:56 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:56 +0000
Files and hashes:         1: 20JIcxX-YRfmUdZsM-A9KFCVQ9A.roa (hash: Jy9A0VoisBWre1TOkMryXEsS8YexNx87KiBRG3mU7GI=)
                          2: 64bniClUPfUDALDLv0vwIlVjfMA.roa (hash: lL8XeUncI5mQZtyJg5Qencz5SVSK52g5YBySwrx2+kI=)
                          3: V5G7EVC-rF6gxyTznSzn_M_BVGo.crl (hash: +qXWrCkY3iayJ8lnv9HAc+rWTx3HmnMh1PKpPn3SE+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:b5:c2:22:ef:02:d4:be:e7:09:9e:e7:e8:42:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a
        Validity
            Not Before: Nov  4 13:01:56 2025 GMT
            Not After : Nov  5 13:01:56 2025 GMT
        Subject: CN=e5b5a5b8833fef7b490b24a9394e23009a4fdc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:a6:29:17:e0:30:d0:43:0d:2b:8a:e3:18:
                    68:53:df:70:e7:45:8f:9d:bd:20:93:0e:71:da:c1:
                    cf:cf:8e:93:cc:2f:50:41:57:7f:9a:f1:b7:0f:59:
                    8b:eb:52:b6:c3:e7:4d:99:12:3b:59:d7:d9:77:f2:
                    26:1f:66:6e:0c:70:4a:5d:52:29:93:55:3e:b0:27:
                    5b:b4:27:d4:90:a0:9e:9f:ba:de:f2:4c:d0:20:3b:
                    d7:8a:8f:5e:85:f8:42:98:a5:a7:1a:ca:03:5c:f2:
                    ad:44:eb:1a:0c:f1:f0:70:33:e2:c3:b9:6e:24:04:
                    49:b5:cd:be:24:76:69:c1:45:9e:0e:47:21:ff:72:
                    7f:76:e4:cd:a0:d2:4b:1f:30:27:9b:91:b8:d7:d0:
                    2f:0b:b5:67:ca:7f:17:11:1a:db:a4:47:25:7f:a0:
                    d3:73:df:74:0d:22:0e:37:40:ab:82:4c:39:31:6e:
                    6a:7f:bb:4c:a0:6d:34:de:70:cf:01:8a:ce:e7:cd:
                    fd:ba:b0:7f:ed:44:31:1e:c9:c5:4d:ea:6e:ba:61:
                    85:63:b3:3d:9e:75:74:e4:5c:72:b3:c9:6d:51:6a:
                    9c:ad:82:3f:1f:4c:c1:8f:03:59:7e:a5:50:62:fd:
                    b5:cc:e0:ba:9b:4c:2d:9d:f3:fb:67:74:b7:3a:17:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B5:A5:B8:83:3F:EF:7B:49:0B:24:A9:39:4E:23:00:9A:4F:DC:0E
            X509v3 Authority Key Identifier:
                keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5a:25:ac:a9:12:d0:f7:d8:b0:13:a4:6c:f1:2d:6c:0b:f7:
         7a:2a:5a:7d:87:a2:cb:69:51:d0:8b:6c:66:67:d9:d9:af:90:
         60:c4:d0:a6:14:15:3c:9f:ed:b6:8a:e2:da:42:60:22:d5:d2:
         02:09:b4:e4:9b:2a:15:6e:99:71:37:36:08:cc:4f:54:8e:13:
         09:62:6b:01:6b:d0:df:61:6f:49:88:17:55:13:2f:ba:a1:8a:
         8b:d2:ab:94:25:82:cd:95:74:cf:bc:e8:dd:b8:db:74:b9:12:
         d4:84:d5:62:be:f0:c9:eb:3f:01:a3:55:57:98:3d:e1:88:59:
         71:9b:d6:ca:19:81:23:e3:e7:2f:02:d3:87:48:b6:ca:05:ee:
         31:73:f4:09:86:a9:a0:a7:6a:83:c2:19:97:ce:f6:8b:b8:75:
         56:7d:ea:a2:b6:25:c0:b8:dc:28:68:21:d1:a2:89:01:ca:22:
         d4:eb:81:7a:cb:2b:cc:d9:15:58:36:bc:14:8e:91:48:52:4f:
         8e:58:3a:93:2f:e6:dd:a1:0b:a0:72:4c:22:f0:83:6e:1c:ad:
         63:6b:58:a3:32:cb:d7:ab:28:3b:a5:8b:7d:44:2a:c1:a0:60:
         e2:32:8d:1d:f2:f0:2b:f3:04:b7:6e:ec:5a:ac:11:f6:3e:5c:
         ec:10:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:06 2025 by rpki-client