Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File:                     5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier:          J7QHs23NQQ5FDlFRJ987uw1OL32WamkBIp2uqV8Futk=
Subject key identifier:   75:7B:76:5E:AC:D9:37:8B:9B:35:23:32:A8:1A:45:82:EB:53:42:EE
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer:       /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial:       0199FB7C73AFCDB54C5563B21BE09B2DFD24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number:          1224
Signing time:             Sun 19 Oct 2025 08:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:01 +0000
Files and hashes:         1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: XrtzyVlmUxvg4WGpkHPnAjrPsX5OtFqY91plnwAyicA=)
                          2: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=)
                          3: u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (hash: 9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=)
                          4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:73:af:cd:b5:4c:55:63:b2:1b:e0:9b:2d:fd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
        Validity
            Not Before: Oct 19 08:01:01 2025 GMT
            Not After : Oct 20 08:01:01 2025 GMT
        Subject: CN=757b765eacd9378b9b352332a81a4582eb5342ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c6:ff:17:14:98:5f:cf:b5:87:7b:56:c7:3f:
                    06:31:80:0f:3e:b2:e1:7c:f6:f0:9f:c4:87:88:f9:
                    6b:d8:bf:b3:6c:62:d1:c5:22:f5:51:ce:0b:89:83:
                    f9:58:c1:56:e5:d1:9a:bf:0a:9a:1d:ae:4e:ba:3e:
                    ef:bb:d5:ea:f4:f2:49:ee:80:68:49:09:8a:c0:55:
                    7e:1a:b4:33:da:1e:d0:9e:0f:2a:e0:7e:4d:10:64:
                    d8:de:44:3f:02:3d:44:e9:17:06:36:b2:2b:f5:4b:
                    07:16:62:ef:de:8f:30:55:45:37:31:ea:ef:40:95:
                    0a:0b:85:12:d0:55:fc:eb:ff:aa:aa:8c:ed:d1:c3:
                    90:0a:90:b4:59:47:13:27:ac:91:30:f5:f2:04:c7:
                    d8:30:f1:62:a0:d8:7f:5d:ff:fc:41:72:f8:ec:6b:
                    64:5a:20:90:c8:2d:5f:95:1d:90:39:78:4d:90:29:
                    e1:a0:90:2a:5e:37:5a:aa:91:65:60:b8:bc:b2:04:
                    19:3a:cd:16:c0:4c:42:68:46:fa:96:e5:e3:94:dd:
                    16:81:68:2f:8a:3a:8f:24:a7:9c:f6:f5:4b:3b:cd:
                    a8:4b:cf:9e:41:f8:01:a9:ad:7e:a7:05:73:4c:d0:
                    9b:e2:3f:b3:8b:98:5c:ff:72:37:ba:a8:79:0a:3f:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7B:76:5E:AC:D9:37:8B:9B:35:23:32:A8:1A:45:82:EB:53:42:EE
            X509v3 Authority Key Identifier:
                keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5b:bd:b1:4d:b9:ef:35:ca:7a:5d:be:b9:83:cb:0c:35:da:
         d1:27:77:7f:ed:ea:84:2d:5e:08:63:4b:08:6b:29:93:b2:12:
         01:fd:45:fd:de:35:94:58:03:a7:4f:87:b6:10:49:5a:82:aa:
         1e:06:b6:12:b5:dc:4f:68:1f:f8:3b:5b:df:48:1d:82:c9:8f:
         9a:d1:1a:e1:dc:18:80:2e:00:8b:57:1e:b3:c1:65:36:37:50:
         ac:e0:c3:46:c2:bf:26:05:ae:2e:48:3b:89:08:e4:31:03:15:
         99:af:bb:46:b9:cf:67:a3:3f:bf:fa:49:da:18:02:da:c6:5b:
         55:bc:9e:22:77:3d:ff:3a:e1:1d:13:38:a5:e0:87:b6:3f:ee:
         ad:65:ae:f4:49:93:1b:1b:8c:7a:30:d0:6c:4c:8b:c8:8f:69:
         7d:1a:2f:cf:d5:ea:21:f9:4a:f8:ab:f3:35:8d:6e:ae:5c:76:
         79:c7:b5:af:99:f5:46:bd:13:07:a8:29:0a:88:61:72:54:d9:
         67:9e:15:11:d6:0f:32:4a:21:8a:28:36:ba:06:1d:b9:df:75:
         6e:73:6a:87:14:c6:c8:4e:fc:ee:e3:f8:93:b0:51:2a:76:e4:
         33:f1:e5:1f:47:9b:d0:a1:fd:77:55:ef:0e:cd:1d:e2:d2:5b:
         dc:00:4d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:28 2025 by rpki-client