Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
File:                     E5WjqPyN003W88lQxmH0shJxdaU.mft (raw, json)
Hash identifier:          Ybux8TdCYO4s8hZzq6wnI2Lh2950YOEW+1hHDdTPznI=
Subject key identifier:   9B:06:BA:5B:13:E7:E6:2D:0C:11:BE:27:47:17:18:A7:41:C8:6E:05
Authority key identifier: 13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5
Certificate issuer:       /CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
Certificate serial:       0199FD341E2F63563D861F2A28C57B4BBEE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 16:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:15 +0000
Files and hashes:         1: 7WkSNMeKo3hgBONjdlWZ4xeGZtA.roa (hash: l6jtovWx9ge466onVKmeSTTNETL8X/SNcFUw3TEBnWE=)
                          2: E5WjqPyN003W88lQxmH0shJxdaU.crl (hash: 20u50MmJIXdjhpDVzjhnos4CgqwRX7bNeydTTrJaXBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:1e:2f:63:56:3d:86:1f:2a:28:c5:7b:4b:be:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1395a3a8fc8dd34dd6f3c950c661f4b2127175a5
        Validity
            Not Before: Oct 19 16:01:15 2025 GMT
            Not After : Oct 20 16:01:15 2025 GMT
        Subject: CN=9b06ba5b13e7e62d0c11be27471718a741c86e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7b:32:bb:d3:28:8e:b1:ab:ea:54:5b:21:2c:
                    df:b0:61:ae:2b:38:3b:81:93:97:b9:47:3e:50:d0:
                    61:27:dd:6b:27:0e:40:27:de:fd:f4:92:e7:d6:36:
                    a3:16:62:52:15:24:54:92:30:ed:38:e4:23:ba:ec:
                    56:d4:e3:96:1d:94:84:d2:6c:0f:1d:93:ba:e2:ee:
                    41:f6:86:1a:5d:e5:a8:55:92:82:0a:5d:95:01:61:
                    0b:00:8a:27:79:64:a9:bf:fe:f0:5a:6a:47:ad:a8:
                    57:01:3a:9b:79:c1:11:80:f7:78:e4:36:bf:53:db:
                    4f:85:3d:87:5c:c0:d3:bc:ef:cf:04:b4:49:ff:bb:
                    01:1a:8d:8d:c5:65:eb:e6:19:5a:6b:ee:23:79:10:
                    a3:c9:11:bf:4a:d9:02:18:75:ea:31:8d:d4:73:4d:
                    12:e0:f9:c0:b3:17:c2:da:c8:5a:45:51:84:06:f7:
                    f9:56:3a:7f:da:d7:c8:d6:2c:8f:76:78:9e:b1:7b:
                    fb:1d:c0:ba:d7:57:df:3b:d1:63:ba:9f:ae:36:0c:
                    ef:5f:eb:3b:11:22:91:8c:7d:4f:22:61:56:62:09:
                    a9:92:5b:5b:1c:db:84:f9:0b:fd:24:e3:e1:76:c0:
                    b8:d6:ab:7e:7c:16:f3:e3:fb:40:81:9c:df:ee:65:
                    34:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:06:BA:5B:13:E7:E6:2D:0C:11:BE:27:47:17:18:A7:41:C8:6E:05
            X509v3 Authority Key Identifier:
                keyid:13:95:A3:A8:FC:8D:D3:4D:D6:F3:C9:50:C6:61:F4:B2:12:71:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5WjqPyN003W88lQxmH0shJxdaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/52c448-1cb9-4beb-8fc2-f048a9266fcf/1/E5WjqPyN003W88lQxmH0shJxdaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f8:71:7d:14:78:ce:ef:d8:7c:fb:36:5f:08:9d:b7:7d:1d:
         cf:46:05:5d:76:64:d4:03:d1:6a:01:32:36:45:52:c6:73:bd:
         2a:e6:b4:41:1b:c2:fc:e0:1f:20:85:3e:80:28:9c:1d:8a:ab:
         eb:83:54:d4:82:eb:44:97:27:86:c5:66:85:d8:fd:df:9d:be:
         33:db:f6:f0:e2:96:8f:c7:db:26:1a:23:04:fd:75:02:5d:86:
         d1:03:4d:1e:94:ef:03:cd:fc:b1:42:f6:67:21:92:21:a2:66:
         40:05:cd:4d:19:ae:5c:ca:a7:ab:60:ef:b6:d6:2e:16:1e:ec:
         20:d8:a5:1e:1c:83:d8:bb:93:75:b8:3d:87:de:71:54:7d:29:
         31:df:a8:d5:30:75:7a:e8:2a:ef:64:13:b8:98:4d:5b:7f:e5:
         ca:85:ba:f1:70:5d:95:bd:4b:01:59:52:00:9f:3a:64:96:1b:
         70:2b:1a:ed:c4:36:00:8d:3b:d5:ca:6d:61:0b:a5:74:9d:73:
         76:09:68:99:5f:2f:07:bb:8c:ee:60:a7:e2:4d:80:4e:8a:47:
         f6:c9:88:73:85:64:77:d4:d0:ff:01:61:bb:01:f7:c6:df:69:
         79:de:60:e4:ec:b6:63:eb:dc:30:32:f4:cc:fd:c6:cc:17:24:
         f2:77:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:56 2025 by rpki-client