Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
File:                     xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft (raw, json)
Hash identifier:          SYZPhHwI3VGVXw3UXgLZszNwTISfufqPMxu7aCzXAP0=
Subject key identifier:   F5:E8:0E:2E:51:46:8D:62:38:9F:44:11:F6:78:8E:F7:0A:AE:29:2E
Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Certificate issuer:       /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Certificate serial:       0199FC21CFEB97453FB995EC7D5A1EFF9358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
Manifest number:          064E
Signing time:             Sun 19 Oct 2025 11:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:38 +0000
Files and hashes:         1: XtEdAEEop3HSdnOxibG98C_uMCU.roa (hash: +p4FtnANqp2tZpv3Dmdn2vhOEqjGwMWFA5juiZbc568=)
                          2: xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl (hash: EEs2LL0yir37XksgFsyENU5NcIJPq4u2N0cH9jymfgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:cf:eb:97:45:3f:b9:95:ec:7d:5a:1e:ff:93:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
        Validity
            Not Before: Oct 19 11:01:38 2025 GMT
            Not After : Oct 20 11:01:38 2025 GMT
        Subject: CN=f5e80e2e51468d62389f4411f6788ef70aae292e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:8c:ba:3e:d8:15:d9:7b:b0:3b:7c:a2:f8:
                    9c:a5:26:63:b2:92:fb:92:51:b4:fd:2d:3c:52:d1:
                    6e:73:9d:e2:8b:45:4b:f0:1d:fa:85:2a:b1:b8:81:
                    8e:05:96:ad:0b:50:af:62:ee:a5:81:22:51:03:13:
                    4a:ff:10:8f:e0:1b:9f:26:0f:d0:84:d1:8a:62:b3:
                    eb:f1:43:44:41:59:2d:12:d4:15:c7:3f:3e:7c:86:
                    31:58:16:e1:13:6b:9d:16:23:e9:5e:c7:29:2b:3c:
                    56:6f:57:ae:eb:fd:3d:ae:c1:03:90:ae:4b:b2:97:
                    39:63:eb:94:fa:57:e7:45:10:bf:02:3a:97:65:23:
                    82:66:ad:2c:23:35:f1:03:e3:31:84:40:e1:cd:7c:
                    e1:6d:30:2b:3b:54:59:b5:29:4a:37:25:a0:d3:cb:
                    a0:06:f5:ee:0f:6a:99:0e:1d:6b:62:18:fe:bc:5b:
                    b7:ea:22:6b:de:dd:aa:65:e1:9e:15:26:79:fd:dc:
                    5a:c9:0b:46:5e:f7:90:5f:80:59:fc:25:c9:cc:2f:
                    3d:15:c3:89:04:4d:b4:5e:e8:5c:c2:43:3c:d9:cf:
                    a5:07:bc:0a:0d:a3:50:df:4a:ff:9f:bc:24:8d:46:
                    3e:58:3a:7f:06:87:b2:63:59:df:74:f6:4d:eb:05:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E8:0E:2E:51:46:8D:62:38:9F:44:11:F6:78:8E:F7:0A:AE:29:2E
            X509v3 Authority Key Identifier:
                keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2c:cb:99:75:ae:70:f3:0f:97:a8:80:65:eb:2c:c1:b7:40:
         5e:4d:8b:fc:d2:e6:53:71:46:2f:aa:d5:b2:0a:b2:2b:1c:2b:
         fb:c4:52:cc:d2:bb:c3:e6:3e:ec:71:d7:d4:5c:cd:ff:1c:f2:
         fe:b7:f1:bd:69:ed:39:e0:65:92:48:87:a3:5b:2b:fb:51:5a:
         59:26:23:75:58:ed:dd:68:f3:1d:be:0e:62:c2:ac:87:7b:31:
         bf:aa:3f:87:75:ea:de:8f:87:81:65:8b:c7:cc:6f:e8:15:b6:
         50:f5:d0:0b:5b:8b:5f:3a:89:0f:e2:0b:7c:28:0a:5a:1a:0d:
         66:eb:60:ae:98:ed:9d:28:8d:a3:b0:a8:65:00:4e:67:e3:53:
         99:7e:09:8d:c1:a1:aa:d8:1e:c0:48:75:f8:0f:35:27:11:b8:
         de:c0:6b:7e:5d:f3:ea:3e:82:59:2a:2b:b7:db:1a:12:de:be:
         df:91:38:b7:19:46:a1:cd:20:99:08:17:54:c6:72:5a:86:68:
         7c:dd:35:df:b9:c8:27:0b:b8:b6:2d:a0:ac:ef:5a:14:9c:db:
         b7:3c:a1:66:e0:f2:a4:20:74:dd:1f:c0:ea:8c:95:8e:3a:2b:
         6e:d8:4d:93:46:c2:86:57:1f:a3:e1:ad:cf:08:1d:7c:24:9d:
         c3:74:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:33 2025 by rpki-client