Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File:                     5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier:          tKFHT0uMLQQDmk1uM/fCDDcKe3kEJp/NzJtO8/IZ28E=
Subject key identifier:   E7:F2:C1:F7:BE:49:CE:55:EF:C2:57:9E:08:37:7F:AC:CB:30:35:DC
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer:       /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial:       0199FBEC380A37262471B5DD6DC86305FC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number:          10B5
Signing time:             Sun 19 Oct 2025 10:03:06 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:06 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:06 +0000
Files and hashes:         1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: udNWuUPo2q8V5L9VJp+pHl2cLv2c0R96i4i7vKFRekY=)
                          2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:38:0a:37:26:24:71:b5:dd:6d:c8:63:05:fc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
        Validity
            Not Before: Oct 19 10:03:06 2025 GMT
            Not After : Oct 20 10:03:06 2025 GMT
        Subject: CN=e7f2c1f7be49ce55efc2579e08377faccb3035dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:6d:3a:a3:c7:84:a7:6a:cc:ef:75:08:40:
                    9d:31:e7:fc:d2:f4:ea:9c:7f:b0:26:84:25:f6:19:
                    77:38:a5:5f:50:7a:08:69:aa:d1:1e:ff:06:f1:aa:
                    4f:6a:30:4a:03:df:db:d0:b2:cd:60:70:83:64:1a:
                    d9:4c:c9:df:fd:68:3b:02:de:8d:c0:e7:2f:d6:9a:
                    2f:9f:92:0f:2a:82:0b:7e:08:76:6a:3e:bc:30:fe:
                    1c:c3:74:77:18:2d:5d:7c:1b:4c:d0:7c:01:f7:d9:
                    80:aa:2e:51:55:88:5f:b6:33:1b:26:bc:05:03:1e:
                    99:e0:9d:da:d9:f6:05:d2:e7:d4:e2:bc:44:80:50:
                    5f:9b:84:d5:3c:86:75:fb:e0:91:70:9d:19:dc:a5:
                    fb:f5:c7:f3:82:54:02:20:c2:18:9b:cf:f2:5c:18:
                    63:a0:98:8c:1d:8c:a6:37:1f:dc:ed:64:25:42:e1:
                    c2:5c:e9:9d:e8:fd:9d:06:cd:3a:3c:b9:2b:67:b3:
                    30:04:bc:a7:6a:f5:10:42:ad:64:11:5a:88:88:06:
                    4a:c1:a2:2d:e4:ed:62:31:86:8b:ea:22:93:9a:ba:
                    52:1a:f0:d4:10:92:d1:ce:8f:f2:00:10:78:ff:90:
                    a7:c2:73:e9:e7:a0:e4:ef:28:3c:7c:a3:c8:8c:e0:
                    fe:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F2:C1:F7:BE:49:CE:55:EF:C2:57:9E:08:37:7F:AC:CB:30:35:DC
            X509v3 Authority Key Identifier:
                keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:dd:42:0e:fc:38:4f:20:36:12:8c:63:a9:64:55:f1:25:1a:
         35:34:48:69:91:7e:0e:f0:f3:d2:60:af:9b:55:7c:1c:92:10:
         a7:dc:4f:c0:7c:6c:22:13:0f:f0:ea:31:b3:39:cc:6e:93:79:
         bb:0d:ea:cc:4c:f4:de:85:81:76:9c:26:fc:77:39:33:4d:bb:
         d3:c1:da:35:0f:61:d5:89:25:13:12:c2:7a:93:2d:1a:a9:39:
         37:b2:97:71:57:b9:6d:17:15:ff:01:a5:ba:21:50:d1:9b:e0:
         6f:a3:4f:b6:45:30:41:90:df:a7:23:f1:6f:31:46:e0:03:7f:
         0e:98:46:fa:01:12:6c:75:06:22:72:96:10:06:6e:ba:aa:39:
         dc:e8:78:b8:0b:99:22:1e:96:a5:a2:0e:43:63:50:33:1e:e9:
         f8:8d:60:34:d9:eb:bb:b9:0c:71:ff:f5:e7:3f:d0:fc:29:1b:
         56:de:42:38:54:3a:d7:ce:43:cc:7c:dd:f9:3b:6e:7e:34:7c:
         0a:ef:2c:31:b3:04:93:2c:b7:19:99:64:32:ed:b8:47:4f:7d:
         94:5f:13:3d:16:6d:d6:b8:16:42:b5:42:fa:be:8c:56:d1:7b:
         9a:0f:c6:48:2f:fb:3c:ec:c6:ce:2b:9b:49:21:79:8a:8d:08:
         4b:74:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:07 2025 by rpki-client