Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
File:                     5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json)
Hash identifier:          CpBlc2uzUHbQ+K7Zv1FqrTZBpA4j+RQvm1bCt5Ur97M=
Subject key identifier:   A7:D3:67:C9:2F:3A:DD:55:EF:1A:21:D0:B5:F0:37:CF:9A:9A:EC:FA
Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5
Certificate issuer:       /CN=e62ee82422b7849912296361404649a7ffec98e5
Certificate serial:       0199FBEB560CB430A10D08E21B0CE25744DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
Manifest number:          0DA2
Signing time:             Sun 19 Oct 2025 10:02:08 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:08 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:08 +0000
Files and hashes:         1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: Nuig1syhjRSUnlTlhVKpRUoDTMUhIF93gfthD5H8yOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:56:0c:b4:30:a1:0d:08:e2:1b:0c:e2:57:44:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5
        Validity
            Not Before: Oct 19 10:02:08 2025 GMT
            Not After : Oct 20 10:02:08 2025 GMT
        Subject: CN=a7d367c92f3add55ef1a21d0b5f037cf9a9aecfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d5:5f:1e:3c:d7:7f:50:04:9b:ce:a5:e5:21:
                    ed:a0:e9:27:8c:88:9f:e3:e9:31:e3:04:42:2d:04:
                    3c:3d:5f:b2:d5:7f:55:fc:6a:b3:a6:47:6e:bb:b9:
                    e8:38:ed:79:ed:f2:16:3e:d7:9b:5d:e4:d9:3b:5c:
                    9e:ba:a3:87:23:a1:20:c3:40:28:99:f9:22:2f:05:
                    f8:a7:b9:65:f1:45:39:53:16:83:2d:cb:2b:b0:46:
                    2b:4a:1a:d5:16:4e:46:f3:fe:c1:8a:85:86:96:a0:
                    62:d1:c8:51:79:b8:21:48:ba:e8:f9:95:e7:45:cb:
                    23:8b:5b:00:36:b4:ee:71:32:87:ff:e4:f1:d6:9b:
                    6b:cd:3a:ea:58:04:3b:18:ff:4b:e6:16:52:52:99:
                    4a:ad:19:f0:74:09:57:85:46:9a:89:05:6c:c3:87:
                    b5:27:a8:a9:a4:d5:9d:86:14:76:8b:5c:e8:ae:e1:
                    e5:f5:a3:28:9a:ec:b4:05:ec:2c:f5:d4:26:61:50:
                    6d:bf:4a:55:2f:5f:d2:3e:58:4d:27:72:6d:c6:4e:
                    00:71:38:51:a4:29:fc:d2:e3:ff:92:f7:ff:f2:ba:
                    50:da:0c:24:7a:7b:af:9a:50:cd:48:db:bc:f4:e0:
                    22:9a:27:a6:8e:2f:6c:d9:8d:3a:e1:c7:19:dc:10:
                    e0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D3:67:C9:2F:3A:DD:55:EF:1A:21:D0:B5:F0:37:CF:9A:9A:EC:FA
            X509v3 Authority Key Identifier:
                keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f5:c9:6f:c9:73:f8:7d:37:d3:60:b8:1c:45:c0:11:82:f7:
         9d:ae:2e:94:31:e1:ee:7d:8c:73:b2:e4:d8:ff:68:23:78:4b:
         7c:1d:41:62:aa:a6:d3:7b:43:fb:54:45:a8:96:18:df:a3:c2:
         4b:04:15:db:85:c5:f5:43:0c:e5:15:7d:97:77:f6:18:f4:d6:
         93:d4:87:fc:7b:a4:4c:ae:0b:22:68:be:cd:f0:38:0c:42:97:
         c6:74:bf:b0:a2:b4:05:99:29:c4:43:5c:b5:60:24:39:2c:4c:
         d4:8f:30:41:92:e1:44:8b:04:b8:a0:b2:a0:d8:be:f5:24:c4:
         fa:33:a3:79:ba:73:61:4b:df:24:71:be:55:25:b9:5f:68:72:
         0d:5d:0a:d7:5a:16:40:f0:d1:fc:6f:06:a9:88:17:2b:65:ee:
         30:81:41:60:31:cc:11:a1:65:43:15:ad:82:ff:e9:72:30:98:
         8f:34:df:a4:29:d4:d6:ff:d2:ab:91:5c:47:fc:44:87:d5:1b:
         d6:26:b4:cc:57:45:a6:15:2f:88:1f:8f:d7:d6:55:69:62:ce:
         f7:d3:f3:e4:da:04:8d:7a:f5:75:c5:fe:c3:af:b6:bc:c7:d7:
         d2:01:6d:7a:17:a7:5a:23:31:9c:61:e1:4d:f7:75:9b:51:8d:
         b6:01:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:00 2025 by rpki-client