Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File:                     52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier:          2Ac9sDokzCN0pw9o30v90TOIIAF1sa9Xxx3lR0B/6ek=
Subject key identifier:   CE:04:E1:D5:62:64:88:A5:C8:9B:D3:26:42:02:5B:F7:DD:D0:B1:07
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer:       /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial:       0199FBEC67D7E5B4B79033567A848AB12A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number:          068A
Signing time:             Sun 19 Oct 2025 10:03:18 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:18 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:18 +0000
Files and hashes:         1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: ZCkssPptcNDlI9A0Pzkbk2tBUWl9qn1OTd4y7tS3czU=)
                          2: rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa (hash: GqgeMXx+9CHaMaMRbd16hQlhBApo1up4EaH0YwEA5E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:67:d7:e5:b4:b7:90:33:56:7a:84:8a:b1:2a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
        Validity
            Not Before: Oct 19 10:03:18 2025 GMT
            Not After : Oct 20 10:03:18 2025 GMT
        Subject: CN=ce04e1d5626488a5c89bd32642025bf7ddd0b107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:a6:78:44:af:1d:34:b6:06:7f:d1:5a:64:
                    6f:da:61:4d:36:d5:21:57:f1:de:06:6e:90:e8:b6:
                    21:53:77:71:3e:97:02:68:a2:c0:42:99:4d:7f:15:
                    16:23:91:93:bd:56:c4:eb:91:31:00:05:86:c6:a3:
                    c2:71:78:79:47:07:cc:b1:b5:be:dd:79:98:fe:ea:
                    24:9e:bc:89:bb:4d:b9:0d:5c:49:93:35:05:86:9e:
                    c0:ae:15:d4:30:e3:2b:a9:d7:96:4f:37:ff:be:ad:
                    40:4e:26:2d:1a:36:58:2c:f0:8f:44:32:99:5d:99:
                    9c:bc:32:91:1c:ba:7f:6f:6c:05:de:63:69:ed:11:
                    74:a6:25:ad:57:25:3d:4b:5d:ca:0d:59:a4:53:37:
                    f6:f7:7e:d1:fd:aa:1d:10:f8:1c:d3:45:3a:a8:d2:
                    47:d8:67:2b:d4:29:ec:2f:6a:5a:40:bb:40:18:0f:
                    53:5d:c4:0c:8a:e4:d9:26:b5:4b:13:76:45:a6:3c:
                    96:b3:5c:7d:84:44:a6:3a:98:1d:61:fa:4b:9e:09:
                    e4:92:8d:5b:ce:a7:32:bf:bb:fa:5a:64:b1:42:36:
                    02:e7:5a:51:43:c9:af:2c:da:9a:94:c5:27:f1:2d:
                    87:53:06:d1:6e:b0:aa:84:d7:56:e3:22:3e:85:96:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:04:E1:D5:62:64:88:A5:C8:9B:D3:26:42:02:5B:F7:DD:D0:B1:07
            X509v3 Authority Key Identifier:
                keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:70:76:0e:6b:f9:e6:52:be:27:d8:58:04:f5:80:de:ef:db:
         24:7e:45:47:eb:f1:06:d0:af:ef:82:42:28:e5:54:ed:07:f0:
         43:f1:de:ac:c5:40:26:b3:05:2e:0f:95:da:e7:37:d7:00:4b:
         89:91:de:7b:89:87:2a:f4:ed:13:de:af:58:9b:72:99:60:c6:
         61:03:4f:d4:37:ba:ef:0c:8d:7f:c1:86:35:17:e2:ca:e7:73:
         8f:56:dc:97:bb:b1:b2:fc:fd:81:e0:65:9a:22:43:52:4e:f2:
         f2:c8:10:8c:98:ad:ef:25:70:71:c5:5e:20:40:f3:29:46:1a:
         c3:b2:0d:fe:fd:a5:7b:2a:25:95:40:8d:e9:6a:5c:60:1c:ff:
         0c:d7:83:ee:05:9d:3e:71:04:c0:98:3f:41:59:70:20:86:c2:
         7e:e1:72:4d:ec:60:33:f5:7c:62:07:5a:61:fe:a3:c7:2c:43:
         be:38:68:67:41:eb:10:e6:07:8d:1f:01:85:7a:16:65:e8:91:
         c0:bb:09:e9:e7:30:a1:99:55:af:60:f2:50:b4:00:74:0e:23:
         fe:6d:ff:7a:e4:e6:80:4b:24:f4:f5:b3:10:3f:74:8b:16:c3:
         8e:f0:86:cd:26:2f:b4:da:aa:63:1a:37:4b:73:9e:0a:a6:46:
         06:cc:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:00 2025 by rpki-client