Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
File:                     5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft (raw, json)
Hash identifier:          s6+B28/adrpi3WbNmvUDi0qZTq2KaNq6/2FJ0K2bT+Y=
Subject key identifier:   FF:59:37:EE:08:35:AF:29:42:67:E2:BD:75:3B:BC:EE:7D:84:9C:60
Authority key identifier: E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75
Certificate issuer:       /CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
Certificate serial:       019A01B5DFEDFFEF105DF806119152C53C3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
Manifest number:          06E9
Signing time:             Mon 20 Oct 2025 13:01:27 +0000
Manifest this update:     Mon 20 Oct 2025 13:01:27 +0000
Manifest next update:     Tue 21 Oct 2025 13:01:27 +0000
Files and hashes:         1: 5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl (hash: HlMsUuA/iK8hft1PZgIcYiC+e9Fxebm7y8SkLgytzts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b5:df:ed:ff:ef:10:5d:f8:06:11:91:52:c5:3c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
        Validity
            Not Before: Oct 20 13:01:27 2025 GMT
            Not After : Oct 21 13:01:27 2025 GMT
        Subject: CN=ff5937ee0835af294267e2bd753bbcee7d849c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:04:92:8a:d6:df:91:72:05:17:30:09:16:
                    e0:31:4c:02:64:8a:24:62:4b:6d:cb:d9:54:42:56:
                    c2:c4:65:bd:c9:cf:ae:1a:bf:84:e9:f1:3d:f2:52:
                    30:a6:f7:70:97:54:96:2a:44:48:0a:d8:41:a1:49:
                    8f:00:cf:86:57:85:b2:a6:a0:64:5f:18:28:a0:ac:
                    cc:34:29:e9:23:d8:44:c8:fb:13:63:18:a9:c3:ab:
                    b2:f8:9f:0d:69:2f:05:db:41:87:7c:59:76:d0:53:
                    a3:12:7b:9a:ef:6a:c2:8f:c9:ff:9b:31:67:46:d7:
                    2c:2b:62:14:4c:fe:03:39:03:ed:fb:c5:52:7f:09:
                    6e:0b:4d:1a:de:71:e0:11:5e:70:99:7d:57:7c:45:
                    8f:4f:67:a6:db:f3:8e:9d:de:ab:a4:e8:fd:c4:97:
                    86:16:41:cc:a5:bb:e8:58:bd:0c:76:55:47:7c:02:
                    06:d3:1d:32:10:9a:f6:de:02:89:4f:7e:64:82:ca:
                    18:5d:ae:db:31:58:8b:74:4b:cd:89:5a:9a:98:bf:
                    38:ad:45:56:42:9f:35:a7:b4:c5:b0:16:09:b1:8f:
                    11:f2:d9:2a:2c:ea:cd:85:ec:f0:94:2d:03:d2:aa:
                    4d:47:71:f7:38:64:f4:e2:62:c0:10:8d:32:25:fe:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:59:37:EE:08:35:AF:29:42:67:E2:BD:75:3B:BC:EE:7D:84:9C:60
            X509v3 Authority Key Identifier:
                keyid:E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2e:8e:45:ff:d3:18:96:88:91:b5:08:d4:a9:90:96:7e:63:
         50:a3:77:1b:d3:17:5a:77:e8:71:df:f5:d7:34:47:e4:dd:a2:
         e2:12:83:39:08:56:18:bf:5b:22:e4:b3:e2:05:f3:2b:ff:4c:
         a9:5d:c1:92:f6:23:51:b0:61:1f:39:5c:36:e7:27:bf:c0:7e:
         72:75:91:de:dd:a7:47:a1:12:43:ea:5c:ea:e7:84:fa:0d:be:
         2f:73:b7:9e:e4:4a:56:f5:72:0a:e9:cf:dc:a5:00:6a:b4:10:
         7f:68:58:2a:d9:e3:c0:11:80:16:25:a9:56:8f:16:2d:56:f8:
         f0:03:37:d3:e1:08:2a:d4:50:57:9d:55:49:11:4b:31:18:71:
         05:55:fa:d5:16:34:3b:00:9a:2d:6e:25:0e:33:ce:c1:7f:c8:
         ff:03:2b:9e:3f:0b:06:71:8f:9f:c8:d9:fb:4c:52:f0:ed:d0:
         d3:30:ee:a1:26:ab:a0:bd:5e:da:22:33:55:d4:68:80:3b:d0:
         01:d2:e3:c7:ee:e5:45:63:ed:c9:d9:3c:9f:21:e4:dc:ae:d5:
         21:38:43:1d:ad:b4:2b:cb:e4:63:f7:79:0b:e2:d3:fd:7f:ce:
         7c:36:40:8f:07:6b:e3:5e:21:41:de:06:46:98:cd:51:7e:f3:
         65:6c:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:34:27 2025 by rpki-client