Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
File:                     5fbO0n_GD5APrBt1HbHuS_eFqrM.mft (raw, json)
Hash identifier:          2CAK2gdJM4aqX4WrkvXvCo51YjysBbXUayJ++AgKLKw=
Subject key identifier:   F7:88:7B:0B:54:58:C3:38:78:92:57:30:ED:B4:AB:8E:58:50:99:0E
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Certificate issuer:       /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial:       0199FB45C8AE0A83E28A14436815E313CC93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 07:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:18 +0000
Files and hashes:         1: 5fbO0n_GD5APrBt1HbHuS_eFqrM.crl (hash: ijPFQhWU/7vVcR9isecNLA8LSEsgY7BCff/sUR1DzJM=)
                          2: nBqhUdLMvMF3um2Xd5cemRyaDIY.roa (hash: iNrSMpvfd0IaunQuUuNNAQ8NKO2bkt2NnRjfVSrKAzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:c8:ae:0a:83:e2:8a:14:43:68:15:e3:13:cc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
        Validity
            Not Before: Oct 19 07:01:18 2025 GMT
            Not After : Oct 20 07:01:18 2025 GMT
        Subject: CN=f7887b0b5458c33878925730edb4ab8e5850990e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:7c:f5:8b:cf:c9:d3:37:d1:a1:30:b1:c5:
                    62:8e:9d:33:d4:06:01:67:d1:c4:0e:d9:f6:fd:d7:
                    0f:ad:5d:e5:51:b3:ab:9e:03:d1:55:1b:2b:d8:aa:
                    90:1e:ad:33:78:b8:f5:20:5b:bd:07:b8:f8:96:9c:
                    76:85:2a:db:3c:6e:27:dd:97:1d:02:a5:16:a8:a2:
                    11:71:3f:9d:cd:6b:ae:40:ae:1f:fa:de:e9:20:34:
                    d7:ae:fd:6a:5a:20:84:f5:5e:3b:e8:05:9a:56:5e:
                    dc:1e:9c:64:89:4f:89:5e:31:13:25:f6:06:bd:58:
                    9b:a7:8f:7b:90:64:2b:52:33:b3:0b:f2:85:59:1c:
                    d4:01:df:dc:07:52:a6:8b:cd:8b:3b:41:04:ac:85:
                    83:d7:dd:3b:c8:e5:1b:d2:da:a8:eb:bb:50:9d:0d:
                    0f:5b:df:5f:a4:01:f7:51:ee:96:27:d2:80:51:a8:
                    33:fd:8e:ff:22:e4:fa:d2:4b:47:31:01:be:c1:24:
                    b0:b4:be:ed:f7:55:8e:5b:c1:aa:ae:90:75:bd:fc:
                    79:b9:d8:d5:30:74:5e:63:3a:7e:ed:11:98:12:99:
                    d1:de:46:55:ff:b6:e4:1b:56:4c:47:94:ea:72:d8:
                    72:a8:a9:27:56:31:88:68:2e:9a:b0:9b:16:5b:07:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:88:7B:0B:54:58:C3:38:78:92:57:30:ED:B4:AB:8E:58:50:99:0E
            X509v3 Authority Key Identifier:
                keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:62:7b:ec:a2:0c:99:8b:fd:9f:63:1e:06:36:01:bb:52:d9:
         b8:c1:2b:79:b7:4d:72:f3:db:0f:3a:70:b7:91:2d:6e:f9:fb:
         ff:ac:93:0d:48:10:96:c8:d4:58:09:09:a2:8a:5c:fd:89:84:
         85:7d:71:da:66:bf:7b:15:a1:64:48:10:95:45:fd:7f:84:06:
         1f:e0:09:f7:86:fd:28:ad:62:c8:91:80:91:3d:24:5c:29:2e:
         11:05:a4:45:f4:7a:32:87:c1:c6:c6:f1:24:66:3d:46:04:6b:
         c8:8c:fd:77:24:46:c3:1b:c8:73:55:8c:b1:75:47:b7:66:4a:
         7f:cb:a6:f8:4a:7a:68:67:03:dc:0b:a0:9a:b7:0d:af:bd:cc:
         fc:b3:d0:d6:ab:c5:c7:df:39:0e:33:6b:b0:07:20:5d:52:3b:
         d3:5f:46:a2:45:74:5f:f7:3f:0b:e9:76:34:6c:a0:40:e5:4e:
         07:94:27:e1:23:62:e8:29:36:f6:ef:e0:3c:e0:48:c8:31:22:
         c8:76:b9:f8:17:8d:61:8b:5f:ea:02:4a:02:cd:98:cf:e9:04:
         b0:15:bb:67:82:89:c2:4c:21:40:81:45:86:f7:24:c4:31:81:
         bd:48:60:51:95:f7:46:9e:8c:e8:13:04:98:f2:11:69:8a:78:
         d9:8f:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:53 2025 by rpki-client