Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
File:                     5e61yh0hW8msLLQNHum-53UPn1c.mft (raw, json)
Hash identifier:          SLW9f5qccbbw/31b5shVzoGPyTM55Va9YpHfJ1J38ok=
Subject key identifier:   FA:A9:17:4D:31:1B:1A:39:D5:EB:7A:26:EC:04:8E:F4:67:7D:7F:79
Authority key identifier: E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57
Certificate issuer:       /CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
Certificate serial:       0199FF59B1E6C791F1C6F904EEBF45F1A3A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
Manifest number:          063F
Signing time:             Mon 20 Oct 2025 02:01:32 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:32 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:32 +0000
Files and hashes:         1: 5e61yh0hW8msLLQNHum-53UPn1c.crl (hash: p3ucIYgdIt5/PVCfXNCuSFZXyc+Moak5j5/i4w9msVE=)
                          2: fv9GU78KTThVylwpUoVkrE_AXzQ.roa (hash: nnsqZgD7w8A2HHvf/0xUBOlqX3ZvvzafFDRwPNk7+QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:b1:e6:c7:91:f1:c6:f9:04:ee:bf:45:f1:a3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
        Validity
            Not Before: Oct 20 02:01:32 2025 GMT
            Not After : Oct 21 02:01:32 2025 GMT
        Subject: CN=faa9174d311b1a39d5eb7a26ec048ef4677d7f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:42:8f:24:28:99:aa:db:3c:09:2e:84:ff:
                    a9:45:6b:04:65:77:11:02:cd:89:e2:ef:65:1f:34:
                    da:b0:07:5c:eb:eb:0a:28:8e:84:19:9b:7a:eb:7e:
                    a5:a7:b1:74:43:27:b2:41:2d:c5:ad:59:41:67:07:
                    d3:16:e3:1c:f0:fa:df:b4:36:ed:82:ab:ef:38:4e:
                    27:45:91:90:84:4a:b1:17:44:3b:6c:f8:05:98:1a:
                    5f:02:fe:06:c2:c0:9f:f9:90:6f:71:45:60:5f:05:
                    d8:57:38:74:09:64:6b:48:46:e8:a9:a8:db:64:67:
                    c4:23:d4:71:da:79:80:51:6b:70:82:e2:3a:87:10:
                    c6:a5:bd:9c:0e:d1:e8:88:9b:a7:a0:f4:56:cb:ef:
                    35:ee:1e:04:a1:d0:c7:0b:24:3d:c6:12:0b:e5:46:
                    8d:b4:28:a5:3a:12:0e:1b:8d:4d:47:41:60:09:92:
                    22:3d:0d:60:62:4b:fe:3b:14:ee:9e:b5:02:0a:12:
                    bd:bb:00:6b:82:b5:d3:59:65:7e:1f:52:dd:94:10:
                    0e:58:be:69:c8:b5:2d:18:52:fc:4b:7f:d8:b5:66:
                    97:8c:f8:fa:52:66:5c:a9:4c:8e:af:37:20:75:d6:
                    93:7d:cb:6f:b5:02:77:f8:da:6f:f8:58:31:4b:e6:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A9:17:4D:31:1B:1A:39:D5:EB:7A:26:EC:04:8E:F4:67:7D:7F:79
            X509v3 Authority Key Identifier:
                keyid:E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:50:65:2c:d6:7b:32:16:ae:3e:45:e5:9a:62:63:1a:be:0a:
         66:dd:7c:60:a1:4e:03:73:37:b7:92:aa:f6:5e:4f:12:b4:eb:
         92:0e:0e:97:88:5e:90:b2:13:88:23:1a:d6:d4:36:34:02:3c:
         bc:05:9d:c9:7d:75:68:20:d7:ef:ef:c0:48:28:5a:ac:d7:cc:
         ae:42:53:94:f4:97:09:c3:4a:7e:47:0f:e2:5e:13:c9:8b:a4:
         71:85:c0:8d:81:a0:c4:e6:7d:ad:ff:15:67:cb:ce:f2:68:cb:
         6b:19:bc:74:24:2c:8c:f5:9e:9b:e9:1c:02:ca:61:13:73:be:
         a8:16:1c:4b:d6:96:d0:33:79:19:ef:54:64:56:1a:0f:b1:81:
         02:f6:c2:a2:c9:3e:7e:b1:e9:24:f1:84:27:fe:c3:87:a8:74:
         9e:07:74:d5:9d:08:54:e9:f7:c4:2c:b0:2b:80:1e:be:a1:0c:
         58:d2:10:bf:06:7c:b7:27:04:71:a3:f8:96:c5:a3:40:cf:41:
         a7:84:0a:09:3f:c6:38:ce:98:8f:91:c0:d6:ca:5d:ac:73:6d:
         2f:fb:8f:6c:0d:fe:ea:c6:b4:a4:d9:5c:f8:38:d8:11:a6:3f:
         62:4d:8e:6c:2b:95:4e:90:b0:fe:32:28:d2:ef:ad:75:01:30:
         57:13:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:59 2025 by rpki-client