Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
File:                     aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json)
Hash identifier:          YQwt2c4VCD0SzsmjSHs9QGlHBSQzV4npvJrJlqBidIY=
Subject key identifier:   E2:40:CC:8C:3F:34:E1:4B:DA:71:06:0A:57:15:33:40:FC:5E:CC:96
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Certificate issuer:       /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial:       0199FBEB3774C7A423E5F617BCF09E14E987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
Manifest number:          15E0
Signing time:             Sun 19 Oct 2025 10:02:00 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:00 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:00 +0000
Files and hashes:         1: ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa (hash: 8snm/YmhdjNlAruJqhnmmmr90GFSb4amikZSdNm3KvA=)
                          2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: dy+25RPRRkLrl6xJR6yQTCHupuu3NZqi2cP/6BCuNkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:37:74:c7:a4:23:e5:f6:17:bc:f0:9e:14:e9:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
        Validity
            Not Before: Oct 19 10:02:00 2025 GMT
            Not After : Oct 20 10:02:00 2025 GMT
        Subject: CN=e240cc8c3f34e14bda71060a57153340fc5ecc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:ee:c2:52:50:7b:30:95:a7:a6:f8:1d:d8:
                    39:d7:cc:08:5c:01:df:1c:3f:8d:56:df:9c:9b:80:
                    85:7a:bb:4b:16:32:f1:21:ff:ed:44:e5:f1:16:b9:
                    74:a6:df:eb:0d:41:35:6a:e9:34:39:53:7f:7b:63:
                    2a:e6:c6:8a:24:84:33:ed:eb:ca:b8:23:2a:da:7a:
                    ca:49:61:08:ae:6f:47:3f:aa:a1:17:2c:83:7d:6d:
                    0c:3e:e9:c0:18:96:ed:2a:5d:65:d8:30:d6:24:b8:
                    86:92:2a:75:26:de:af:32:91:a7:8f:a4:06:ae:cd:
                    d9:6c:2e:5b:34:e2:d6:05:db:98:b7:a6:dd:19:65:
                    e0:a5:ff:2f:ce:07:d8:a0:8d:3c:8a:2c:57:57:b8:
                    9b:42:c0:21:e9:e8:a7:91:98:6a:a7:df:b7:b3:e8:
                    48:c9:24:a5:61:5a:e2:65:62:97:20:c5:52:cc:6f:
                    5c:0b:90:49:17:cf:ab:a5:05:62:0b:67:25:5e:24:
                    07:c3:cc:6c:73:7d:56:d9:d8:2e:21:b9:fa:99:70:
                    72:5b:a5:f6:ce:d1:cf:0e:23:4f:33:88:e9:3f:9a:
                    b7:8b:64:55:1b:77:26:a2:0b:58:3b:98:f8:09:83:
                    2a:af:58:66:0c:39:61:95:45:7b:3a:86:0d:b3:fe:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:40:CC:8C:3F:34:E1:4B:DA:71:06:0A:57:15:33:40:FC:5E:CC:96
            X509v3 Authority Key Identifier:
                keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:bf:67:68:50:e3:5a:48:6a:78:c2:1a:5c:c9:55:7c:3b:
         d4:8a:29:20:ac:03:a5:f6:74:ba:ee:60:fa:ed:82:e9:fa:d2:
         3d:7c:60:90:71:f6:95:d7:41:52:bb:e5:48:7b:d6:e1:19:a9:
         c8:e2:c1:10:b0:f4:ff:c9:c7:f4:ae:8f:93:88:46:2d:51:7a:
         db:a0:42:af:a5:40:ac:c8:2c:bb:f6:a1:c9:f4:90:2f:43:70:
         c9:a8:ba:09:0a:a7:9c:99:00:7b:c1:4e:cd:53:02:95:75:e0:
         fc:8e:ed:8b:78:c2:08:52:e7:ac:34:1e:52:06:d5:a7:3f:e9:
         13:68:ab:d7:b6:60:13:a2:df:3a:31:e0:0e:1e:a0:50:65:60:
         36:47:de:3e:29:c6:27:32:e7:d9:81:9f:94:1f:79:43:99:d5:
         e4:49:15:9c:36:ee:00:21:88:04:1b:83:de:7c:a8:d0:67:12:
         aa:c4:4b:d9:68:cb:37:9c:66:e3:af:bd:83:20:4a:8b:34:18:
         6b:f6:a1:3f:92:57:f8:ac:82:11:5f:c6:43:eb:c3:a9:a1:b1:
         40:67:9c:96:db:a6:85:80:d8:fc:2d:bb:19:2d:0c:51:04:0b:
         bd:f4:f0:bf:ba:60:4e:07:21:9e:97:3c:90:0f:ef:0e:40:59:
         53:bd:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:50 2025 by rpki-client