Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
File:                     5r62dxRfZMr7zXE26B81onSujow.mft (raw, json)
Hash identifier:          skfuMLvWk8BSBAkam8o+cJjAoB142Iiorxw0PYcf8UY=
Subject key identifier:   9D:32:8C:45:5C:67:CB:F4:B0:17:5B:80:20:D0:3E:10:95:0F:2B:97
Authority key identifier: E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
Certificate issuer:       /CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Certificate serial:       0199FB0EC012FF2011A3441880FDE3832F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
Manifest number:          25
Signing time:             Sun 19 Oct 2025 06:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:11 +0000
Files and hashes:         1: 5r62dxRfZMr7zXE26B81onSujow.crl (hash: pIxXRCXppKlGfO3xKKOUi4R5ikHWeEsASG3hdMmzH7U=)
                          2: _4Y--84lEsBn20PgX6M05x1F5_A.roa (hash: q0rbhIJFPrPOpvAXOzX/aS9tNPbzDnyOozHI6yKGmWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:c0:12:ff:20:11:a3:44:18:80:fd:e3:83:2f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
        Validity
            Not Before: Oct 19 06:01:11 2025 GMT
            Not After : Oct 20 06:01:11 2025 GMT
        Subject: CN=9d328c455c67cbf4b0175b8020d03e10950f2b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:f8:17:4c:54:38:51:87:b9:50:b1:cd:d1:
                    b6:82:c7:5e:5b:37:73:6e:b4:b4:cb:0d:72:61:cd:
                    d1:91:fe:48:c0:06:66:90:ae:67:3e:35:72:d5:75:
                    00:fc:cf:a7:1d:68:31:7b:b1:56:2e:ba:ed:7c:dd:
                    d5:65:a6:a1:d1:92:d1:f1:19:87:b5:fe:63:c0:d6:
                    7a:19:28:f6:80:8b:d8:ad:a9:14:80:04:10:7f:21:
                    32:06:b4:c8:97:5a:5b:14:bb:13:50:3b:df:3c:45:
                    f8:21:dc:ea:af:1e:97:8b:a4:26:72:07:c4:e6:a7:
                    d4:6f:9f:f9:f2:62:79:c6:2e:ca:a8:51:6d:05:36:
                    74:96:ca:6a:fb:a5:c3:20:c5:e5:02:3a:c3:c2:71:
                    bb:c0:71:d1:2f:cb:6c:33:e7:b3:56:2a:03:b8:24:
                    f9:f9:56:a5:5e:5f:ef:34:ff:fe:52:1b:66:9a:e2:
                    44:54:d3:46:18:96:9d:82:09:ad:e3:9f:11:e3:c4:
                    cd:f3:4e:7b:d6:32:59:98:6f:2e:f7:fd:22:a6:81:
                    ce:48:41:5a:5b:6c:5a:b5:21:80:d5:c0:6b:f3:4a:
                    3d:40:67:a4:b4:74:b3:09:bb:de:aa:10:96:b9:99:
                    e9:84:3e:39:26:49:53:6e:ee:19:ca:be:90:56:7a:
                    4a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:32:8C:45:5C:67:CB:F4:B0:17:5B:80:20:D0:3E:10:95:0F:2B:97
            X509v3 Authority Key Identifier:
                keyid:E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:72:c9:47:36:87:a1:bc:69:83:54:cf:10:8f:12:d7:70:ae:
         7f:03:e0:d2:4e:6e:42:13:1a:b4:8e:5d:37:aa:91:7d:91:18:
         bb:1d:8d:3d:17:71:26:ac:d8:82:c8:48:df:10:9c:be:35:79:
         94:26:b4:56:35:1a:2c:08:c2:ca:de:13:26:97:76:46:2a:fa:
         66:5a:43:39:47:7d:7f:ec:78:e4:03:28:ed:46:62:bb:5c:bd:
         fa:a4:71:ad:83:60:8f:4c:17:b5:01:39:f3:74:04:58:14:bc:
         40:ad:00:94:ef:0a:ad:2d:3a:8c:13:2a:2b:88:be:03:a1:60:
         0b:96:24:35:7a:dc:3b:2c:d5:e8:be:14:a9:f2:0e:82:b3:00:
         51:dd:44:49:1a:20:fa:eb:ed:96:40:d2:50:44:0a:af:70:aa:
         56:0a:d2:da:5e:9f:53:94:12:10:03:e3:d3:cd:45:15:af:22:
         bd:62:04:42:43:0c:ad:b6:dc:56:ea:4d:63:cf:cb:ef:3a:a2:
         c5:e8:f8:c9:1c:cb:5d:ea:0e:ab:df:81:68:20:26:42:ea:41:
         b4:1f:04:ee:34:0f:7a:c4:7b:4d:df:db:0a:fe:ed:28:28:18:
         29:96:a4:9f:a2:f6:d8:42:49:a2:d3:2f:55:87:6c:d4:70:fc:
         a0:9a:29:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:03 2025 by rpki-client