Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File:                     E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier:          srRo6vc84ciiRVc/nmWKQFOK8zRPCluxmNbPTqdOQRM=
Subject key identifier:   82:19:1E:9C:A5:1E:4E:F7:63:43:A9:86:23:DA:ED:00:E5:D1:B5:95
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer:       /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial:       0199FE1028375AAC21D7F013F6A03B448DEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number:          05B3
Signing time:             Sun 19 Oct 2025 20:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:35 +0000
Files and hashes:         1: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: v/DxetssonSa8iGadDBe2ntcHAPEYrrK9g8gb7NyEe8=)
                          2: JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa (hash: QG1yL1zcYsT8fBEaDP08SL61cVF4WfYEKH5BAPzFTBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:28:37:5a:ac:21:d7:f0:13:f6:a0:3b:44:8d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
        Validity
            Not Before: Oct 19 20:01:35 2025 GMT
            Not After : Oct 20 20:01:35 2025 GMT
        Subject: CN=82191e9ca51e4ef76343a98623daed00e5d1b595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:3c:c1:ce:7d:d8:fd:76:2e:f0:d6:32:55:
                    40:75:8c:fa:fd:27:e2:6e:b9:0e:79:76:e5:25:9f:
                    36:bd:ad:d5:93:c5:6f:50:3e:63:56:b0:8f:8c:37:
                    bc:4e:2b:cd:72:f4:07:69:02:96:41:7c:3a:8c:b9:
                    1d:b8:8c:d4:43:00:91:3f:a8:4e:5f:5e:d0:24:f2:
                    df:96:56:06:ed:3a:5f:42:f2:e8:74:66:b3:a6:9a:
                    24:d2:71:d9:4e:1c:23:23:5b:04:5b:3f:0c:b5:76:
                    51:e6:02:a9:cc:b7:e5:9e:fd:9c:0f:3a:a2:ff:7a:
                    3e:2b:8e:2a:94:79:e7:b6:e7:16:4d:93:9d:d4:dc:
                    39:74:2f:1c:2d:01:0b:a1:e6:da:78:c9:26:5d:9c:
                    a2:ea:8d:d6:de:e4:eb:7a:8d:96:8c:ef:34:f3:b8:
                    3a:00:b9:fd:d0:90:f8:10:a6:53:c8:42:d6:1c:1e:
                    a4:0e:b5:db:6c:84:d0:13:2d:0f:8a:bd:b0:1f:69:
                    18:00:1c:55:8c:a7:0d:16:ca:1f:a9:59:0c:ee:5f:
                    d4:a3:63:c4:f9:63:43:d2:0a:0a:1b:0f:62:1c:b2:
                    b1:c9:93:81:87:1e:2c:0d:53:ef:0c:b3:cd:70:d3:
                    5c:6e:f9:3a:29:bf:f9:5d:e3:2f:bb:d6:eb:36:15:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:19:1E:9C:A5:1E:4E:F7:63:43:A9:86:23:DA:ED:00:E5:D1:B5:95
            X509v3 Authority Key Identifier:
                keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4e:72:3c:44:02:04:72:42:7d:9a:50:53:e5:aa:75:2e:ec:
         4a:4a:cb:46:0e:db:88:d4:f8:9c:0e:af:5c:5d:93:1f:b5:41:
         72:e7:1d:54:03:11:58:1f:89:e6:8e:6e:cc:b9:c0:b8:71:c9:
         bf:d4:63:c8:83:8f:4d:fc:63:be:d5:3d:1d:da:6f:8a:11:05:
         47:af:e4:15:1f:67:de:6d:02:80:27:96:ce:e1:8b:09:f6:4f:
         da:b2:b8:c6:76:cf:0b:7e:5d:8a:76:44:60:5b:0b:29:d0:b9:
         44:4f:e3:3c:b2:ef:d8:f2:06:11:94:65:70:46:01:0b:76:16:
         3e:3e:9a:97:96:23:ee:61:fc:f6:16:b3:f8:91:3a:4f:50:bc:
         75:3b:09:20:2c:5e:65:fe:83:fb:06:4c:2b:77:78:e5:76:7c:
         33:d7:10:69:e3:e6:da:f7:b1:2e:40:ef:81:53:40:39:6a:a4:
         43:4d:4b:06:26:0d:11:d7:a1:26:fa:29:0a:6d:f3:35:2e:b4:
         1a:cf:65:08:94:e4:1a:29:6b:df:b7:7e:aa:c9:5f:68:94:a4:
         57:ae:88:d6:5f:71:50:09:74:28:d2:cc:72:90:45:14:4e:87:
         b6:89:bc:84:5b:6c:41:23:2d:29:a2:d8:0e:43:ba:44:18:2f:
         cb:5d:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:43:20 2025 by rpki-client