Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File:                     5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier:          ykleR3oLuL4Y69+IHkpk3I0JxAXkvmPDCCQ+SvpeVlM=
Subject key identifier:   2B:62:81:BD:91:F6:58:55:2D:A8:1D:E5:0F:41:D2:0A:95:18:91:63
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer:       /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial:       019A006C5057554AA4B0C94A5B60EB05841B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number:          0FD3
Signing time:             Mon 20 Oct 2025 07:01:29 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:29 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:29 +0000
Files and hashes:         1: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: E65q8kdEF/Wu+oSlI0ZSvEXDRtm4QqtRlmREZ8I/LO8=)
                          2: 99MFFBjF3Dc4zTlDGHUkWaGScYw.roa (hash: WeTl8ArSSJSSsmY/ooHSrE+g99Jv4JYzfunEC3Fj5PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:50:57:55:4a:a4:b0:c9:4a:5b:60:eb:05:84:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
        Validity
            Not Before: Oct 20 07:01:29 2025 GMT
            Not After : Oct 21 07:01:29 2025 GMT
        Subject: CN=2b6281bd91f658552da81de50f41d20a95189163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:69:ca:39:4e:b5:5b:4e:b1:75:74:cc:1e:5a:
                    15:64:a9:6f:48:e2:05:7b:26:ca:f7:85:c7:ed:45:
                    48:d3:8b:65:d1:35:49:2a:ba:14:40:7a:ac:79:4c:
                    49:84:be:f5:84:ac:f5:34:4e:d6:81:c3:5b:48:a8:
                    c0:3f:22:76:f4:71:e3:3f:1f:be:10:e7:31:32:8f:
                    ee:a8:68:9d:a6:40:a2:11:b9:6e:fb:37:d8:72:6b:
                    51:87:c9:d3:6e:36:af:80:5f:1d:53:04:f9:9a:78:
                    24:42:7b:1a:28:be:bc:79:ee:70:5a:79:0a:b1:4a:
                    27:10:51:98:5a:15:44:94:4c:83:ac:22:57:7b:64:
                    6b:5e:18:9d:a4:3a:25:4e:43:0e:60:47:09:c6:e4:
                    d7:ff:5e:db:c1:8b:1b:33:d6:01:c5:01:12:84:83:
                    99:89:a1:c1:38:c9:2b:3a:8f:8d:4e:f2:9b:95:2b:
                    6d:8e:de:cf:ab:dd:3b:f9:af:66:57:b8:9c:e6:8a:
                    b3:a7:8b:a7:28:29:8e:57:be:ad:20:b2:e1:2f:bc:
                    4e:3d:55:21:27:4a:0e:be:80:0a:10:80:7e:ba:36:
                    d5:0b:81:97:fc:e8:16:f3:66:2a:19:09:0f:01:e2:
                    34:da:81:cc:01:5b:ac:f4:ae:c7:4f:42:8b:76:b4:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:81:BD:91:F6:58:55:2D:A8:1D:E5:0F:41:D2:0A:95:18:91:63
            X509v3 Authority Key Identifier:
                keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:46:59:30:1c:44:ef:99:ef:b1:97:0f:36:29:b3:bf:31:93:
         14:5d:0c:d2:eb:10:c2:40:24:e5:72:ff:6d:23:a7:29:ca:1b:
         03:94:2a:0a:c4:e0:d3:fd:c2:dc:cd:96:d2:dd:d2:cf:0f:56:
         1b:f1:7f:01:f5:51:2b:01:5b:10:98:ca:35:e4:b2:ad:93:02:
         5d:76:46:2b:91:c2:36:af:23:76:95:6e:da:23:57:0b:57:41:
         0a:71:fa:58:dc:76:79:2b:c5:4a:aa:d8:1e:98:12:fa:ce:d5:
         d6:d6:2b:6a:4c:b5:6e:bc:8b:83:25:d9:33:20:64:5e:6c:40:
         38:a4:1e:80:d9:15:b0:c9:bd:8c:11:36:14:e4:21:1f:05:6d:
         4f:13:e8:23:35:74:25:db:7f:41:29:34:0d:a7:e5:18:03:ba:
         f2:50:8c:41:79:77:44:da:d8:5d:23:07:9b:fc:81:f2:5f:7a:
         2d:a6:c6:92:73:f1:4a:c2:21:26:ba:6d:d8:a9:24:a1:4e:7e:
         1b:0c:a0:22:86:88:7d:27:5b:c9:d3:1c:76:4e:08:3c:3a:fb:
         1d:d8:0b:c1:4b:38:ba:a4:94:54:54:1f:c9:3b:6a:9f:9d:e4:
         b1:e2:4e:26:9a:10:d0:16:f0:bb:dc:c0:33:d1:d8:75:40:88:
         b1:fd:1d:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbFBXVUqksMlKW2DrBYQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NzNmZjEwZDdhNTU0ZmM1MWE3Zjk5YzFmNjFlMWNlZWY5
OTg1YmMwHhcNMjUxMDIwMDcwMTI5WhcNMjUxMDIxMDcwMTI5WjAzMTEwLwYDVQQD
EygyYjYyODFiZDkxZjY1ODU1MmRhODFkZTUwZjQxZDIwYTk1MTg5MTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mnKOU61W06xdXTMHloVZKlvSOIF
eybK94XH7UVI04tl0TVJKroUQHqseUxJhL71hKz1NE7WgcNbSKjAPyJ29HHjPx++
EOcxMo/uqGidpkCiEblu+zfYcmtRh8nTbjavgF8dUwT5mngkQnsaKL68ee5wWnkK
sUonEFGYWhVElEyDrCJXe2RrXhidpDolTkMOYEcJxuTX/17bwYsbM9YBxQEShIOZ
iaHBOMkrOo+NTvKblSttjt7Pq907+a9mV7ic5oqzp4unKCmOV76tILLhL7xOPVUh
J0oOvoAKEIB+ujbVC4GX/OgW82YqGQkPAeI02oHMAVus9K7HT0KLdrROZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtigb2R9lhVLagd5Q9B0gqVGJFjMB8GA1UdIwQY
MBaAFOZz/xDXpVT8Uaf5nB9h4c7vmYW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jYmU3ZTUtZGNjOC00MjY1LThkN2Qt
NDhjYTMzNjc1YTUwLzEvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jYmU3ZTUtZGNjOC00MjY1LThkN2QtNDhjYTMzNjc1YTUw
LzEvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEZZMBxE
75nvsZcPNimzvzGTFF0M0usQwkAk5XL/bSOnKcobA5QqCsTg0/3C3M2W0t3Szw9W
G/F/AfVRKwFbEJjKNeSyrZMCXXZGK5HCNq8jdpVu2iNXC1dBCnH6WNx2eSvFSqrY
HpgS+s7V1tYraky1bryLgyXZMyBkXmxAOKQegNkVsMm9jBE2FOQhHwVtTxPoIzV0
Jdt/QSk0DaflGAO68lCMQXl3RNrYXSMHm/yB8l96LabGknPxSsIhJrpt2KkkoU5+
GwygIoaIfSdbydMcdk4IPDr7HdgLwUs4uqSUVFQfyTtqn53kseJOJpoQ0Bbwu9zA
M9HYdUCIsf0dJA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:46 2025 by rpki-client