Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
File:                     E5YC73YK3ApbekhYPPv5tg_LcTA.mft (raw, json)
Hash identifier:          7LYn9lGNbnaDNkAjdwiO1PYF4R/h/kvnYnuw1XkEUyI=
Subject key identifier:   1F:A8:DB:1F:87:E4:8C:20:9D:9A:CA:2E:8F:DD:31:99:10:9F:AF:03
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       0199FB7C9BA6E6188065A9B30F3D6646C1EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
Manifest number:          0F55
Signing time:             Sun 19 Oct 2025 08:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:11 +0000
Files and hashes:         1: E5YC73YK3ApbekhYPPv5tg_LcTA.crl (hash: Q2+m3fHqxHo+4pSWNsRufiQ0ikNYwbO2P8ipXoO42VE=)
                          2: p0QXsp4w5wGQ69G08TDsPy1mPRM.roa (hash: viuANp3uqgANQPYvajNcRDfYwh8Tr9E4g9FS/j0tP9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:9b:a6:e6:18:80:65:a9:b3:0f:3d:66:46:c1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Oct 19 08:01:11 2025 GMT
            Not After : Oct 20 08:01:11 2025 GMT
        Subject: CN=1fa8db1f87e48c209d9aca2e8fdd3199109faf03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:68:a0:ba:d9:18:90:3a:a4:d4:3c:b8:24:3e:
                    4f:c0:3b:9e:e4:ba:81:a9:98:de:3b:a8:6b:7e:6d:
                    a7:3b:7a:c2:a9:a8:3c:13:53:bd:0f:68:58:b3:ff:
                    4a:e8:26:f7:cb:5c:f7:00:5e:20:60:41:ae:74:bf:
                    82:c6:76:ce:0a:22:17:ce:03:3e:9e:a2:23:a6:16:
                    20:8b:7e:2c:15:e4:38:ac:b5:fb:74:e5:5a:8e:39:
                    94:d4:90:e8:a6:e6:ad:dc:15:24:53:21:f8:f7:18:
                    9d:e1:49:b5:0e:8d:69:20:0a:30:58:25:66:76:d7:
                    c7:d2:ca:a5:08:74:49:64:fe:bf:87:02:b7:5b:49:
                    c2:f7:62:47:3c:74:ef:07:a2:1b:e8:76:4d:ec:b6:
                    8b:69:3c:2e:46:b3:2e:9f:c7:28:46:b9:b6:7b:18:
                    5e:09:44:c2:b4:4c:11:7a:d5:c3:ba:53:50:ee:c4:
                    31:10:5a:de:68:e1:62:05:6e:bc:cd:c6:af:8d:db:
                    d4:c6:68:7e:c4:f6:58:b8:a3:b3:01:8d:23:6e:1f:
                    0f:eb:af:3d:13:ee:42:01:99:cc:63:70:d5:8a:37:
                    6d:b2:93:a6:74:f6:a5:ad:2e:4f:e1:33:3b:2b:a8:
                    e0:3b:d6:47:83:b6:86:d1:e7:1c:32:8b:52:13:a3:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:DB:1F:87:E4:8C:20:9D:9A:CA:2E:8F:DD:31:99:10:9F:AF:03
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:34:47:fd:77:3b:f4:a5:66:f0:63:38:99:87:26:3c:b8:6c:
         13:78:3b:ce:ad:4f:9f:7d:42:c3:76:8b:be:76:53:eb:94:ae:
         c8:33:f2:d6:da:a3:de:c7:59:9a:4f:72:56:ee:79:4d:58:b6:
         1c:9b:f8:21:9a:10:a4:c3:49:22:cf:a1:d6:a6:0a:ef:2c:cd:
         d6:c3:39:d3:87:2e:44:d2:e3:a7:57:0b:82:49:1e:8f:41:f4:
         0b:4d:2e:99:44:c6:64:57:15:18:7c:e6:df:bb:94:7b:ba:5e:
         0d:02:0e:d7:ce:e4:46:48:4e:d6:14:da:d9:7b:b9:31:7d:9b:
         8a:04:8e:0a:89:72:c3:97:a6:5a:75:52:42:da:d2:86:a0:db:
         5f:61:a6:b3:98:db:2e:e4:1f:05:5d:9f:72:66:6b:b4:df:87:
         de:05:b1:15:5e:00:c2:5a:ea:d2:3a:a9:82:37:ba:32:79:75:
         d1:4a:2b:92:8f:72:a3:85:ce:18:ce:92:2e:0c:5a:e7:d3:10:
         b1:75:6f:e6:49:16:44:3e:41:84:63:9e:3d:c7:28:4a:63:9a:
         3f:31:08:c0:e5:a1:6e:e5:10:dc:2a:b2:7f:5a:6b:05:fb:ba:
         bb:68:f7:73:a0:b0:db:c2:45:d8:95:0c:97:66:b8:55:a4:c7:
         bf:dd:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:39 2025 by rpki-client