Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
File:                     E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json)
Hash identifier:          Z4VlKSFprLFKZEcpthLfLpR6PgISkSYgyg1OWFBKiio=
Subject key identifier:   34:45:B2:80:62:B4:01:CF:97:69:A9:DA:DD:5F:8F:05:63:1F:2B:1C
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Certificate issuer:       /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial:       0199FCC6421F368B3FE2C6E3D1F306A47ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
Manifest number:          061B
Signing time:             Sun 19 Oct 2025 14:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:15 +0000
Files and hashes:         1: 8FXx6e-u5uU4oX7I2qEVdoZijzg.roa (hash: wEhTzMM4+HaPiSo3UljIAbk1aEVV4QI7TvJR33027+I=)
                          2: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: OkJwhZI9FjDhYyWIW6pZ771LDOxUW1BVod+Ss+H76iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:42:1f:36:8b:3f:e2:c6:e3:d1:f3:06:a4:7a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
        Validity
            Not Before: Oct 19 14:01:15 2025 GMT
            Not After : Oct 20 14:01:15 2025 GMT
        Subject: CN=3445b28062b401cf9769a9dadd5f8f05631f2b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:80:d4:d4:f8:23:9f:7d:67:0e:ce:46:f1:
                    ec:53:ef:8f:db:a0:fe:2c:15:84:24:c7:3f:15:eb:
                    8e:f9:b4:07:9e:73:55:42:06:49:68:fb:5d:f0:48:
                    82:24:61:85:ff:3a:66:37:5c:03:ec:fe:56:08:c9:
                    3f:fe:f7:75:33:cf:50:f1:0f:a4:de:0d:c3:a2:ca:
                    30:83:54:3b:34:b2:35:d3:55:e7:09:60:0d:4a:35:
                    5b:c8:98:5b:cd:17:79:af:cd:51:c4:9e:37:5f:f7:
                    ef:a6:dc:ef:9d:c0:0c:7a:f4:5f:58:ea:3a:2f:9e:
                    60:99:66:fd:03:d3:fb:7a:8b:84:c2:5f:9d:32:76:
                    2b:3c:9d:88:56:63:cb:d7:c7:35:4c:c2:70:ef:e0:
                    f9:ec:7c:3b:ff:dc:10:00:2c:89:23:a8:d3:76:a2:
                    86:18:36:98:fa:4a:20:4c:30:31:0f:b0:6f:dd:2e:
                    34:cd:d8:fc:e8:dd:1e:8b:e5:b6:02:c6:9e:0a:34:
                    78:55:f4:66:ad:3b:34:cd:d8:1d:85:ec:8d:f9:5e:
                    56:e1:e8:9f:59:c1:b5:a2:64:7f:21:f2:9c:9c:b9:
                    6e:b3:bc:2c:bd:61:51:84:e6:10:0a:03:3b:a6:a7:
                    e5:03:c6:d1:23:5e:49:a3:da:c3:a5:a1:23:99:13:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:45:B2:80:62:B4:01:CF:97:69:A9:DA:DD:5F:8F:05:63:1F:2B:1C
            X509v3 Authority Key Identifier:
                keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:18:e0:16:a3:d3:50:32:85:da:9b:98:59:08:83:7c:7b:
         58:53:2e:75:7a:a2:28:e4:e1:db:d2:b2:33:d7:f5:cd:aa:c8:
         20:90:12:7a:91:86:23:13:b8:b6:56:2d:5b:69:bf:c1:45:e0:
         b3:68:1d:14:04:7c:9b:66:f7:47:2d:45:e6:62:43:aa:0d:46:
         32:f7:77:a4:6f:d0:df:f6:3e:0d:5e:00:5c:76:c4:4b:c9:da:
         9a:35:dd:4c:50:45:a4:41:8a:4f:08:f9:50:b5:d6:17:23:40:
         95:c3:3d:a1:2b:d6:0a:b2:99:7d:18:f9:77:ea:5b:a7:e7:7e:
         10:85:6e:f7:de:9b:55:d5:8e:d0:bc:2d:3c:ca:0c:c0:90:3a:
         5a:d0:34:c1:06:ff:6d:e0:21:60:05:d6:b5:cd:1a:40:0a:56:
         ef:e0:7c:54:f1:ac:23:38:61:f0:0d:17:e8:6b:f3:3d:00:c7:
         7e:d2:2c:a5:52:b3:9e:02:e8:6a:0d:5e:9c:34:2e:8a:a3:10:
         30:c1:58:40:2b:ec:e5:15:b8:d1:4e:6d:3b:df:9a:56:eb:44:
         c6:a5:d2:68:68:e2:fb:ca:f7:92:db:c1:86:56:f6:e9:cb:95:
         f5:c9:5c:e4:b6:81:6e:6d:96:28:e5:3d:f5:56:a1:08:3d:63:
         2b:0f:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:06:52 2025 by rpki-client