Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
File:                     ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft (raw, json)
Hash identifier:          tTYp/m6AOhegs0RIUe1hKDrTQHDf6HYK5mrwknoKFtk=
Subject key identifier:   A7:A4:36:0A:75:DE:10:9C:8B:DD:DE:61:91:A7:91:75:54:56:C3:9C
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Certificate issuer:       /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial:       0199FB7CF73856393F6374E84525671C1F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 08:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:34 +0000
Files and hashes:         1: CNh_5j_R_gJpT50KvKASnm2ddQQ.roa (hash: sz6v/CsZnD6nQK+LURUo6p2F2VafhVQMBGjcdFGL5T4=)
                          2: ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl (hash: LbovrcTPWWHSxD9Luw9N2dH891JYAq4YwP9mL2+gPGw=)
                          3: O3HB8RSgMVOhYaf96zL0k6K3nZc.roa (hash: z2RBJsKCUdq19FmXpexk/4aBj6EiMtTI7PUDkCaEtvc=)
                          4: UmWol24Z1jCTfjEp_MvTPtb1tBk.roa (hash: COPfsyux35Sm2Dilg0uBivAQ4UwahKUGIAKYrH4YhiQ=)
                          5: ho7hCbw9Z3TdltQdvoKRemY2BZQ.roa (hash: 1oNnxxsmF38W2k7eLcfUs5CR/Cu2kC+IeFK+jVllmvU=)
                          6: n2YS8yp1tJWHJMlag5Z5onYqUSk.roa (hash: 9602pVv+wVFMR3fK8ulsFo7aN8W3oYT8p4SoPts899E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:f7:38:56:39:3f:63:74:e8:45:25:67:1c:1f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
        Validity
            Not Before: Oct 19 08:01:34 2025 GMT
            Not After : Oct 20 08:01:34 2025 GMT
        Subject: CN=a7a4360a75de109c8bddde6191a791755456c39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:fe:1b:6d:ab:61:42:16:e8:1a:a8:05:77:
                    f4:fd:47:30:e4:fc:ec:10:9a:0a:41:c0:30:8b:e6:
                    20:c1:dc:4d:ec:28:17:05:0f:1a:17:b9:1c:7d:40:
                    9e:47:1c:43:07:e9:17:a9:fc:97:8f:c1:1c:61:fc:
                    4f:80:80:5f:c8:8f:49:6d:eb:e5:82:20:7b:06:34:
                    3b:25:bf:71:a2:20:e2:dd:a8:c9:03:3c:da:f4:48:
                    b4:3a:27:e3:ae:d4:2c:c9:58:50:d3:5e:ba:ea:a7:
                    17:bc:d1:9c:5f:aa:d2:fa:f1:7b:76:d3:8c:db:c0:
                    01:32:93:8b:e3:b1:12:09:6b:f5:ba:d6:cb:11:f2:
                    f6:8b:8d:cf:37:64:9b:3b:f2:a3:6d:a5:80:c1:e4:
                    58:2d:59:8f:74:b2:95:a3:05:6c:2e:1a:0a:22:65:
                    d1:0f:ea:cd:49:e4:4d:bb:71:ad:59:b3:75:c4:fd:
                    0b:4d:8c:51:74:ac:d4:68:57:72:23:b9:0a:07:15:
                    8e:1e:58:a9:e6:43:2a:2c:18:4c:f3:92:5e:07:4b:
                    31:33:14:cd:50:e3:89:1f:58:7b:bc:bb:e7:87:d2:
                    28:9a:10:ae:ee:fa:e8:3d:f3:02:1e:14:7e:3e:d8:
                    44:2e:a4:ab:36:27:4c:74:f7:17:33:09:c5:cf:07:
                    50:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A4:36:0A:75:DE:10:9C:8B:DD:DE:61:91:A7:91:75:54:56:C3:9C
            X509v3 Authority Key Identifier:
                keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:08:22:bd:c5:86:37:51:c6:4b:48:c8:34:b9:86:e3:de:92:
         08:26:61:87:81:bb:3d:1d:1a:ba:14:5c:fd:5f:8d:fb:35:17:
         f7:bf:7e:78:2d:c9:ee:56:69:39:2f:32:7d:55:c5:4a:c8:bc:
         bd:e1:e3:61:31:a8:31:45:db:08:ef:45:e0:cc:9c:dd:72:91:
         85:1f:08:4b:d2:43:72:83:8f:36:65:73:0f:54:3e:be:ec:53:
         09:8a:f2:e1:cb:b0:04:53:85:bc:75:56:e8:c0:d2:ad:a2:82:
         18:9d:dc:01:81:d3:00:7a:d8:e8:96:9a:e1:f2:da:bc:37:4a:
         3d:8f:68:f1:29:fb:ba:14:9d:cb:e4:e7:30:21:02:f9:f4:93:
         1f:07:31:34:44:55:af:34:19:39:8a:79:19:5b:ed:89:99:41:
         5b:f9:29:01:2b:66:e4:34:76:c9:d4:4b:d3:db:5f:eb:43:e7:
         0e:4a:18:b9:52:b2:13:aa:ea:5a:88:21:10:a5:ff:c3:aa:ae:
         4e:77:4e:ca:a4:c1:5a:7e:1a:18:85:4d:76:88:28:df:d1:12:
         a3:67:c2:14:30:07:bc:8b:2e:c6:4c:4f:31:56:27:d7:7a:27:
         54:64:0f:64:b9:16:87:ed:c0:6a:84:2c:fe:8f:70:7c:61:4f:
         c0:b8:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:32 2025 by rpki-client