Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft
File:                     E02_TBOroXoEwLLyRbb1iQyAUWM.mft (raw, json)
Hash identifier:          olkt6FuW6Uw5fApqGUhksZXruxnsbNjZPmP0eTGeUPU=
Subject key identifier:   D9:EE:BB:40:B2:14:DD:E0:63:65:AD:A9:36:D7:F1:D6:B7:A7:D0:6B
Authority key identifier: 13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63
Certificate issuer:       /CN=134dbf4c13aba17a04c0b2f245b6f5890c805163
Certificate serial:       0199FE475285EA36EA85510F85FEB4820E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft
Manifest number:          0664
Signing time:             Sun 19 Oct 2025 21:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:50 +0000
Files and hashes:         1: 5-Vfz-IQSTvzUAtK9wGd7zEsU_U.roa (hash: vXYBCiKDNQPitPz23Jn0ySE4Ex9vAmhZFSyQDy8eAqo=)
                          2: E02_TBOroXoEwLLyRbb1iQyAUWM.crl (hash: VZ8NfjQlyQKdJ1vPwmHhRd9KYgaCVQYH+cQBOZDusz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:52:85:ea:36:ea:85:51:0f:85:fe:b4:82:0e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134dbf4c13aba17a04c0b2f245b6f5890c805163
        Validity
            Not Before: Oct 19 21:01:50 2025 GMT
            Not After : Oct 20 21:01:50 2025 GMT
        Subject: CN=d9eebb40b214dde06365ada936d7f1d6b7a7d06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:ba:c5:76:88:19:10:22:55:42:c3:89:7d:
                    18:72:64:c6:29:8d:1f:f4:fd:4c:91:f7:e2:3b:50:
                    b1:f8:64:d0:63:b8:ad:a8:77:a6:8d:e0:64:a3:66:
                    f0:75:bb:bf:09:7d:45:5e:80:eb:f4:24:98:90:79:
                    95:82:6f:cb:8f:08:c8:9b:0e:8f:e7:3c:76:31:d0:
                    f8:c4:f7:2d:75:51:91:4f:5f:80:72:e1:41:0d:4b:
                    c2:cb:7c:ed:48:9a:5c:f5:18:a9:a3:aa:29:7d:7d:
                    41:c5:c7:0f:35:6e:d6:e2:41:5f:dd:0e:90:99:fd:
                    c3:55:fc:ad:b2:25:8c:ae:5f:09:d5:7f:c7:96:c2:
                    59:a5:9f:eb:ba:6b:d5:38:5f:7b:3b:bd:e1:e1:d2:
                    f5:c7:db:6a:8d:10:1d:73:64:75:c4:90:0f:f4:cc:
                    07:5e:75:09:47:a1:0e:40:95:21:47:46:4e:0e:a0:
                    91:e1:0f:1b:92:11:aa:84:a8:5a:8a:92:66:2f:56:
                    22:fb:f6:fb:01:30:7c:d6:ab:5e:52:84:99:ae:52:
                    68:d8:51:08:82:b8:c6:32:d9:ff:5f:07:cc:a1:28:
                    f6:ec:ec:45:53:61:aa:93:c8:00:25:c6:3c:d1:9a:
                    8f:2f:30:43:0a:ff:73:4f:38:1b:39:8f:2e:a0:f1:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EE:BB:40:B2:14:DD:E0:63:65:AD:A9:36:D7:F1:D6:B7:A7:D0:6B
            X509v3 Authority Key Identifier:
                keyid:13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:9a:72:77:15:0f:6f:77:f2:fe:cd:10:2b:0c:f6:05:8d:
         f5:61:50:52:46:d9:23:71:26:07:e9:f4:af:8b:66:fc:8a:3b:
         a0:7e:71:f7:da:b9:1a:5d:8a:dc:16:8f:83:8c:70:47:24:ab:
         93:e8:e1:a0:b3:5c:d2:2d:1d:36:2d:11:e7:69:2a:fd:df:6e:
         38:40:ba:d4:b4:3f:c0:25:a1:c1:e9:87:bd:d9:de:57:67:fd:
         08:95:5f:6d:91:58:19:13:b0:a7:e4:ff:ba:8e:63:94:ce:16:
         8f:bc:3d:7c:cb:3a:db:6f:93:97:14:91:2f:f1:38:7c:49:da:
         78:db:33:e3:cf:7e:48:88:20:58:a5:57:ba:56:68:db:e0:6a:
         f1:7c:1d:55:c1:ea:99:b2:b0:8f:6d:19:72:7c:d7:78:f0:41:
         87:64:d3:dc:ba:61:f1:fe:29:59:07:b9:08:06:5b:e7:ca:a8:
         c9:1f:f2:ec:3e:47:6c:25:4c:24:57:d3:27:9b:6d:6f:47:99:
         c4:39:26:7b:e3:f4:2b:a2:9f:55:17:86:de:52:cc:7a:f3:91:
         ad:cd:22:7d:01:9a:51:a4:8c:50:e8:bf:8f:02:c8:b5:06:ea:
         f0:90:be:cb:24:ed:82:f6:4a:6d:4c:bc:9e:59:05:51:d0:9b:
         f1:eb:2c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:00:16 2025 by rpki-client