Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
File:                     5KVOQra3iNjki0iEQt2RiySFrDU.mft (raw, json)
Hash identifier:          fbEIOrkAJ6RC+7YnI9ajPlBQolkQyAYGZluWq64fPac=
Subject key identifier:   E5:51:37:F1:2A:BE:84:42:AB:61:90:C5:D7:82:A7:FD:1A:9F:FB:22
Authority key identifier: E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35
Certificate issuer:       /CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
Certificate serial:       0199FE4738F96A468DF173E52C020060B135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
Manifest number:          0129
Signing time:             Sun 19 Oct 2025 21:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:44 +0000
Files and hashes:         1: 5KVOQra3iNjki0iEQt2RiySFrDU.crl (hash: p0eMeh4QxUXIzkuSPFOyhP9PcvbVftfJcF0oM2pCNeI=)
                          2: crXLrPic8k9vyE5SxEPR-_3DVks.roa (hash: isyyv0lSga2YsVBxt0riFZT/vQhsYIIC7MEzRQbYvEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:38:f9:6a:46:8d:f1:73:e5:2c:02:00:60:b1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
        Validity
            Not Before: Oct 19 21:01:44 2025 GMT
            Not After : Oct 20 21:01:44 2025 GMT
        Subject: CN=e55137f12abe8442ab6190c5d782a7fd1a9ffb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:2c:10:84:40:08:51:eb:75:bb:a9:39:56:
                    9c:c9:56:85:9c:55:19:ff:a4:9c:2c:27:6c:89:2a:
                    3b:be:d7:8f:99:38:a6:9a:9c:97:6a:4f:75:19:0f:
                    10:69:fb:30:87:75:6f:1d:60:33:1a:cd:42:3a:25:
                    aa:42:7f:4c:b0:09:8f:64:5b:60:c3:05:e8:f5:7e:
                    a8:5b:eb:ce:d8:ce:18:bc:7a:9e:d6:97:82:63:4f:
                    c5:33:37:ee:79:f0:da:37:19:5a:0b:f6:32:a2:46:
                    6c:ed:27:69:f7:6b:29:de:74:ee:c2:17:fc:09:3f:
                    52:02:a9:26:c1:83:f0:12:d9:16:fb:d1:e2:75:92:
                    e6:18:ac:41:dc:5f:dc:a8:06:b4:eb:17:48:6a:10:
                    3a:4b:70:4c:fe:ce:42:ac:9d:64:40:c2:e9:1d:57:
                    79:26:32:7e:e6:48:d5:83:11:c9:6b:d2:3c:4f:2c:
                    d9:02:a3:57:b9:43:86:2d:c1:fa:55:8c:c2:5f:49:
                    bf:1f:3f:4b:0f:01:1d:80:7e:21:0f:56:b3:86:73:
                    fb:b1:1d:fa:1a:9c:51:b4:08:28:8a:b3:d1:34:97:
                    45:5c:9d:1d:42:ca:5c:c8:7f:fd:40:63:52:d2:3d:
                    de:9c:23:de:d3:fd:51:ee:ce:50:8e:5f:8d:d8:58:
                    38:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:51:37:F1:2A:BE:84:42:AB:61:90:C5:D7:82:A7:FD:1A:9F:FB:22
            X509v3 Authority Key Identifier:
                keyid:E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:51:68:78:81:d5:bc:75:e0:61:1a:03:b4:5d:9c:23:cb:
         68:6c:c5:c9:a3:66:e6:00:b3:51:0a:13:69:2c:3f:eb:5b:e6:
         cb:d0:06:2a:5f:29:8f:b7:e5:3b:ff:01:51:40:cf:53:1f:5e:
         b3:06:ea:42:51:1b:8d:8f:3c:93:56:68:31:c7:93:b6:d0:c3:
         39:23:f7:a9:f7:3e:56:ad:be:46:2b:e4:10:fa:6c:23:82:48:
         f1:4a:15:7a:c6:5c:b0:f2:1a:98:d6:5d:41:af:33:ef:d9:d0:
         c9:cd:0e:c2:23:01:65:47:12:6d:2f:2a:70:44:2c:22:9f:5c:
         dc:98:d7:f5:88:47:2a:5f:ed:04:9c:38:4a:04:86:f0:b2:6e:
         bb:fe:23:27:0e:57:07:e1:2e:67:f6:d7:62:0d:82:a1:c9:bf:
         b0:c1:55:64:91:78:ac:86:e3:20:dc:27:30:bc:bb:42:18:5d:
         e0:23:d9:42:09:49:c2:c5:fa:c5:e7:f2:fd:44:43:20:1e:90:
         af:ce:d2:b3:65:04:6d:7f:00:22:b2:aa:73:61:39:5f:08:40:
         37:75:b3:a1:7b:d3:5c:76:4b:0f:60:86:4f:de:37:48:9a:0a:
         7f:c7:73:45:44:e1:a4:71:e4:29:64:87:49:7c:9a:9a:85:bd:
         7b:f4:af:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rzj5akaN8XPlLAIAYLE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTU0ZTQyYjZiNzg4ZDhlNDhiNDg4NDQyZGQ5MThiMjQ4
NWFjMzUwHhcNMjUxMDE5MjEwMTQ0WhcNMjUxMDIwMjEwMTQ0WjAzMTEwLwYDVQQD
EyhlNTUxMzdmMTJhYmU4NDQyYWI2MTkwYzVkNzgyYTdmZDFhOWZmYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNYsEIRACFHrdbupOVacyVaFnFUZ
/6ScLCdsiSo7vtePmTimmpyXak91GQ8Qafswh3VvHWAzGs1COiWqQn9MsAmPZFtg
wwXo9X6oW+vO2M4YvHqe1peCY0/FMzfuefDaNxlaC/YyokZs7Sdp92sp3nTuwhf8
CT9SAqkmwYPwEtkW+9HidZLmGKxB3F/cqAa06xdIahA6S3BM/s5CrJ1kQMLpHVd5
JjJ+5kjVgxHJa9I8TyzZAqNXuUOGLcH6VYzCX0m/Hz9LDwEdgH4hD1azhnP7sR36
GpxRtAgoirPRNJdFXJ0dQspcyH/9QGNS0j3enCPe0/1R7s5Qjl+N2Fg4EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVRN/EqvoRCq2GQxdeCp/0an/siMB8GA1UdIwQY
MBaAFOSlTkK2t4jY5ItIhELdkYskhaw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtWT1FyYTNpTmpraTBpRVF0MlJpeVNGckRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wYTU2N2MtYWY2Yi00NjFhLWE3YTAt
ZGNmYmMyOGY0NzMxLzEvNUtWT1FyYTNpTmpraTBpRVF0MlJpeVNGckRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wYTU2N2MtYWY2Yi00NjFhLWE3YTAtZGNmYmMyOGY0NzMx
LzEvNUtWT1FyYTNpTmpraTBpRVF0MlJpeVNGckRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdL1RaHiB
1bx14GEaA7RdnCPLaGzFyaNm5gCzUQoTaSw/61vmy9AGKl8pj7flO/8BUUDPUx9e
swbqQlEbjY88k1ZoMceTttDDOSP3qfc+Vq2+RivkEPpsI4JI8UoVesZcsPIamNZd
Qa8z79nQyc0OwiMBZUcSbS8qcEQsIp9c3JjX9YhHKl/tBJw4SgSG8LJuu/4jJw5X
B+EuZ/bXYg2Cocm/sMFVZJF4rIbjINwnMLy7Qhhd4CPZQglJwsX6xefy/URDIB6Q
r87Ss2UEbX8AIrKqc2E5XwhAN3WzoXvTXHZLD2CGT943SJoKf8dzRUThpHHkKWSH
SXyamoW9e/Svzg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:20 2025 by rpki-client