Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File:                     XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier:          l3SvT+tycARki8cWE74NFxRTRrkrS6a4YvGFsHqw/5I=
Subject key identifier:   3F:4A:AC:23:AF:27:49:80:F1:C4:F9:DF:0F:A0:DE:2F:79:A9:E7:E4
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer:       /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial:       0199FBEA88524C098D72E5E0C23A8AA98893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number:          1301
Signing time:             Sun 19 Oct 2025 10:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:15 +0000
Files and hashes:         1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: Ta2F1iXHyuIvi2WOXi631m58s6s2mlpDu+vi5O+tvKo=)
                          2: lvOtY--5ta_q9u7-uCq8vanMR-o.roa (hash: IsaauvQSGX/KNFnK0CxHU+He7cfzl6r9rUGogp/cJBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:88:52:4c:09:8d:72:e5:e0:c2:3a:8a:a9:88:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
        Validity
            Not Before: Oct 19 10:01:15 2025 GMT
            Not After : Oct 20 10:01:15 2025 GMT
        Subject: CN=3f4aac23af274980f1c4f9df0fa0de2f79a9e7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:2e:3d:9f:8e:9a:02:13:1c:2b:fd:18:74:
                    0c:7c:d0:2d:a4:71:7a:55:e8:40:1a:2e:48:20:7a:
                    65:06:32:9e:6a:82:a1:2d:47:07:d6:54:35:ce:52:
                    17:34:c7:a4:b4:04:b9:18:a1:98:b7:81:07:a9:83:
                    7a:a9:d4:ae:bb:2c:0f:fc:04:8a:64:57:4c:f6:0d:
                    01:7b:c9:c3:d6:80:8a:3c:c9:c1:ee:20:bf:1f:55:
                    b3:a9:3d:a0:4c:b5:c7:89:66:1f:66:89:31:0b:f5:
                    ad:99:39:a1:2c:96:3a:fd:98:48:5c:36:a4:f4:2d:
                    81:26:e0:4f:33:97:43:8e:a4:41:be:1b:d4:f9:f3:
                    e1:0b:fb:88:53:55:2c:a6:f5:86:47:ed:3c:15:28:
                    14:17:9c:20:65:f3:ae:34:25:7b:1e:d7:6c:5b:5e:
                    39:fe:b9:3b:c5:04:be:ff:73:2f:d5:fd:9b:10:ad:
                    df:0b:cf:90:60:7a:cc:cc:e8:5d:74:63:d0:2f:18:
                    9a:f6:2f:49:26:e9:22:9d:0e:92:e6:22:8d:e4:0f:
                    20:77:e6:14:20:aa:4a:ee:08:c0:c8:4b:28:5c:b3:
                    f7:92:9a:f7:75:af:96:fb:b9:7c:f9:66:9d:bf:82:
                    cc:ab:e6:4f:c9:7d:7b:70:01:75:50:d2:cd:81:a8:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4A:AC:23:AF:27:49:80:F1:C4:F9:DF:0F:A0:DE:2F:79:A9:E7:E4
            X509v3 Authority Key Identifier:
                keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a6:df:e2:f7:12:9f:5f:2b:06:a7:cd:de:8b:b9:20:80:0f:
         fd:5c:a3:fe:dd:bf:de:07:55:14:b5:e3:f2:67:28:c5:7f:22:
         28:6a:14:b9:a1:31:3c:48:ae:3f:cd:0b:ac:17:44:2d:e8:29:
         70:12:8e:a1:6a:24:45:e1:b7:8e:ca:33:72:e7:a2:d2:aa:36:
         85:eb:27:eb:d0:49:f0:a0:b0:07:57:13:27:6d:08:b2:ea:03:
         76:61:7e:de:b2:e0:18:c1:32:c7:7b:84:48:3b:33:b8:80:e8:
         98:0e:6e:53:22:fa:bc:eb:c5:11:9f:b2:de:21:4b:83:d4:56:
         58:7e:e0:28:24:0d:e8:4e:55:d0:bc:00:0a:14:c8:ce:76:6e:
         bf:9e:76:fa:4a:2e:42:7a:ce:0a:c6:2a:7e:de:c8:60:3c:c2:
         ac:4b:7c:f8:aa:08:34:66:bd:45:73:75:d8:10:9a:9b:20:35:
         9c:9a:93:4e:11:dd:60:11:e3:64:ce:40:9f:17:79:b2:05:5a:
         05:29:9f:f8:c8:24:14:38:e7:04:1b:a8:63:d9:0f:d8:d0:07:
         97:02:92:17:db:8c:e0:af:c0:6f:08:9d:2d:57:ca:52:ed:78:
         ba:39:35:c4:52:15:e9:32:e5:a5:35:b6:bf:53:cd:d9:68:4e:
         72:f7:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:04 2025 by rpki-client