Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
File:                     E-XdFL3pMjctyLWTLMVNYI276Qg.mft (raw, json)
Hash identifier:          SduTUPiJXu6gq8tMjEfcjoxksWZyRWr7jEjoRlwsNBg=
Subject key identifier:   FE:E2:9C:2B:26:D5:A6:2D:C0:CD:88:C7:9D:97:E7:40:DE:24:FE:ED
Authority key identifier: 13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08
Certificate issuer:       /CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
Certificate serial:       0199FCFD7A35CD43F9EBC2D035BCA7667608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
Manifest number:          02D2
Signing time:             Sun 19 Oct 2025 15:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:34 +0000
Files and hashes:         1: 12_j47AEFlNkQmnvJ6lQS6k9OJM.roa (hash: QL5MIkOPhYomrHDRf0wI6//DVHKZ3F+ShGeX+xkxEXo=)
                          2: E-XdFL3pMjctyLWTLMVNYI276Qg.crl (hash: R2c23YjuipqZNN9v7cMOEJs4m0G6Tnu8WV1/4FZUa7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:7a:35:cd:43:f9:eb:c2:d0:35:bc:a7:66:76:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e5dd14bde932372dc8b5932cc54d608dbbe908
        Validity
            Not Before: Oct 19 15:01:34 2025 GMT
            Not After : Oct 20 15:01:34 2025 GMT
        Subject: CN=fee29c2b26d5a62dc0cd88c79d97e740de24feed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:bb:d6:4a:ee:53:48:35:37:be:d0:f2:56:
                    b9:08:b0:4d:ce:42:c4:8e:72:f7:23:d7:34:9a:62:
                    39:c0:38:95:51:62:49:90:cc:25:19:c4:2f:92:2a:
                    9f:12:d0:48:80:42:70:78:07:38:31:89:de:73:d5:
                    fd:03:a6:7c:52:4a:f8:f8:d9:16:d1:45:e3:fd:37:
                    df:c2:88:0c:d3:59:bd:79:8f:1f:3d:41:fe:4b:34:
                    8c:7b:1b:d2:9a:53:31:74:46:62:b7:b5:d5:f5:17:
                    8f:69:fd:b5:3e:8d:72:9f:a5:18:24:bd:44:84:8f:
                    08:25:73:30:d6:36:c7:11:90:29:17:9c:54:25:0e:
                    dd:25:49:88:a6:15:1f:c1:09:c0:15:2a:f8:8f:e7:
                    17:a6:16:22:e4:dc:70:0e:41:23:de:58:bb:62:9f:
                    0a:12:e5:75:72:69:5f:f2:57:1d:97:d1:58:f2:9b:
                    e3:44:d2:b3:98:7a:e8:b7:33:71:08:8b:97:5c:5b:
                    4c:76:52:cf:f9:2a:37:f3:42:21:66:25:bf:84:a7:
                    fb:f4:47:53:88:27:28:02:f5:21:1a:50:18:70:53:
                    90:cb:dd:a6:7b:11:45:a1:3c:d7:80:b5:a1:cd:c6:
                    18:a3:2b:ac:32:b9:a8:d9:c4:5c:34:dc:5a:e1:63:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E2:9C:2B:26:D5:A6:2D:C0:CD:88:C7:9D:97:E7:40:DE:24:FE:ED
            X509v3 Authority Key Identifier:
                keyid:13:E5:DD:14:BD:E9:32:37:2D:C8:B5:93:2C:C5:4D:60:8D:BB:E9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-XdFL3pMjctyLWTLMVNYI276Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/918358-157d-4c6b-b7e5-aff61451e84e/1/E-XdFL3pMjctyLWTLMVNYI276Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f8:74:19:42:69:46:1d:92:dc:be:60:e6:41:6b:5b:08:86:
         6d:61:6a:cd:98:f7:43:5a:a6:6c:c5:57:1d:04:bf:15:62:2a:
         72:89:b4:23:07:e8:bc:fe:ea:cd:e0:15:dc:8f:3a:0e:0d:25:
         aa:78:25:1b:35:e0:92:26:3c:80:6e:3e:e2:bb:cd:60:11:e9:
         5f:70:ee:c5:32:09:66:0a:bf:3a:95:57:ab:52:dc:f8:6c:09:
         6e:cf:10:d2:dd:05:be:1d:e1:91:87:f3:79:87:f0:cc:0c:07:
         59:a6:04:f1:6d:cb:7a:ec:e3:be:80:db:26:08:b9:2c:fd:61:
         a6:af:14:ae:53:fc:3e:6e:40:be:51:7a:16:e4:b4:a8:64:06:
         ed:d8:ad:50:74:23:77:d0:33:b7:00:63:07:d6:ae:29:e5:47:
         3c:7d:66:18:dc:5d:3f:2c:d4:97:85:2a:3b:af:96:0e:a6:5b:
         40:48:d6:18:78:56:ea:25:a9:d2:09:c4:47:7d:bd:84:d8:2c:
         6d:2d:72:38:18:eb:7f:9e:e7:eb:14:6e:2e:72:0a:41:8e:d5:
         d1:b2:db:05:ac:4a:6a:87:53:87:db:79:f1:3d:57:47:51:c4:
         4c:1d:3f:d9:cc:7d:a1:8e:3c:0f:ab:bd:7b:45:8d:37:f8:41:
         10:87:fd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:52 2025 by rpki-client