Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
File:                     5qirioB4uztX5W_3wL1Npj7oLIs.mft (raw, json)
Hash identifier:          OceM3aQluYSG8JZ/Uigs1HXmOOrcwsmWrcEBeovGAac=
Subject key identifier:   49:A0:46:30:B2:E1:E7:5D:81:09:7C:50:53:2E:53:D6:E2:8B:73:2F
Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
Certificate issuer:       /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Certificate serial:       0199FD6B3503342580FEE595A9E82910D9DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
Manifest number:          11EF
Signing time:             Sun 19 Oct 2025 17:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:25 +0000
Files and hashes:         1: 5qirioB4uztX5W_3wL1Npj7oLIs.crl (hash: 0Gw9gqpDMaXhI0EU8ZOQMC3/gOs+jrd0HOHkBdxW6GI=)
                          2: j26ZaXDJ5u5_sXZ9DSYkPEGDdBg.roa (hash: N0zCU+Z5cgt4Feyzz51pQWAD1vkYoFo87UGHCmMmAQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:35:03:34:25:80:fe:e5:95:a9:e8:29:10:d9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
        Validity
            Not Before: Oct 19 17:01:25 2025 GMT
            Not After : Oct 20 17:01:25 2025 GMT
        Subject: CN=49a04630b2e1e75d81097c50532e53d6e28b732f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:6d:51:0c:ca:e5:28:a6:80:8d:80:fd:37:
                    e9:25:4f:68:e9:43:66:67:eb:12:23:63:e4:1f:a9:
                    89:ae:b4:39:c3:41:32:4e:55:90:59:c5:43:ec:99:
                    11:7c:f6:2c:24:50:a0:ed:64:1d:15:e0:01:af:82:
                    1f:bc:91:d2:be:23:e4:db:ea:95:e7:13:33:47:2b:
                    93:e7:94:fc:34:f7:78:92:99:60:07:9d:05:f4:94:
                    75:d1:44:f3:15:f2:b2:d4:dd:4f:f5:fd:1d:0b:fc:
                    a5:32:61:05:3b:53:d3:47:f9:1e:75:28:04:89:f5:
                    ad:92:2a:59:19:fb:f3:71:b1:a5:66:b0:cc:d3:7c:
                    e2:0f:c3:ba:ed:98:56:9c:25:94:e7:49:ba:b3:ec:
                    e5:d5:40:9c:34:84:11:a9:9c:bf:9b:aa:88:3b:93:
                    ef:9b:eb:45:f8:29:fe:15:d2:67:9a:cd:97:06:2c:
                    cf:da:75:f6:45:4c:ca:ea:c4:93:d4:87:41:7b:c0:
                    ac:1a:2f:9e:76:7d:ca:96:4a:c0:a4:ba:a7:5b:35:
                    3b:73:7a:2e:54:60:d6:1d:d6:59:66:40:ed:19:1b:
                    e0:a6:56:c7:44:f8:81:37:f7:37:26:68:b9:f4:a8:
                    30:f3:4f:8a:8b:15:d3:f4:4d:fd:1b:08:4c:c7:6e:
                    ce:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A0:46:30:B2:E1:E7:5D:81:09:7C:50:53:2E:53:D6:E2:8B:73:2F
            X509v3 Authority Key Identifier:
                keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:80:68:20:a0:2c:8d:21:1a:14:5e:e4:6d:93:aa:49:c1:93:
         33:44:14:1a:ef:39:f6:27:63:03:3f:45:c5:53:0c:91:10:67:
         e0:93:ef:a9:c5:47:d7:c0:95:57:84:ea:6c:6c:8e:4e:f6:cf:
         34:a7:22:b7:07:6c:cd:18:41:27:18:3f:59:c8:c9:04:e0:37:
         08:93:39:56:77:9a:4e:fa:2b:87:fe:29:bf:64:05:1c:f1:17:
         aa:ec:4a:ce:bc:4e:e3:e5:a3:f3:ed:66:6b:6d:7c:f8:c8:a3:
         1e:e8:7a:6f:0b:fb:3e:25:09:8c:b2:f1:a3:3b:08:36:1e:05:
         2c:da:e0:3c:26:34:ee:a9:6c:53:ba:4c:8f:4d:49:5e:a5:3f:
         84:77:6c:25:07:f5:46:f0:eb:62:a6:05:ae:26:66:63:66:99:
         ef:75:b3:b3:b4:31:8c:d3:74:b9:2b:8e:8a:3b:39:2c:d2:87:
         89:ab:5e:80:34:b7:93:48:ea:c4:d2:8e:3e:80:ad:18:95:50:
         84:b7:07:68:98:90:2b:4b:18:24:47:97:a7:e1:3c:8e:bc:03:
         a8:c3:04:21:29:e6:c7:52:ea:7f:fb:26:63:2c:da:45:2f:57:
         b0:94:d5:be:8b:6a:7d:ea:c3:53:5e:ea:62:ad:48:3b:8b:30:
         2e:b5:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:37 2025 by rpki-client