Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
File:                     2QeE_YHUnsRFoJstBvjlYM2qBqY.mft (raw, json)
Hash identifier:          LSivrihcb8dfD99pycGIy53sxl0M+sZTYwYKh9JEhqE=
Subject key identifier:   E5:3A:64:6F:B0:09:D5:B8:B5:34:7F:18:CE:DC:0E:7F:D0:07:87:B5
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Certificate issuer:       /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial:       0199FFFE6AFA755AA21E3001DD423E407749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
Manifest number:          0790
Signing time:             Mon 20 Oct 2025 05:01:27 +0000
Manifest this update:     Mon 20 Oct 2025 05:01:27 +0000
Manifest next update:     Tue 21 Oct 2025 05:01:27 +0000
Files and hashes:         1: 2QeE_YHUnsRFoJstBvjlYM2qBqY.crl (hash: R60GNxDrEztH4JpGz+s4PbDZHkqCIHOEAcd7r4V0wMI=)
                          2: 3dfo7BpSW_BmeECHIG8JDsYb8u8.roa (hash: Mc/2XZP0dbZZL2dPFjnm1ja/V9Hgm3wwQPBvcIgdoxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:fe:6a:fa:75:5a:a2:1e:30:01:dd:42:3e:40:77:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
        Validity
            Not Before: Oct 20 05:01:27 2025 GMT
            Not After : Oct 21 05:01:27 2025 GMT
        Subject: CN=e53a646fb009d5b8b5347f18cedc0e7fd00787b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1c:22:a3:4c:16:0a:03:de:a0:ad:18:18:21:
                    a4:00:4a:2b:df:f0:c1:ca:f4:6c:36:31:8d:1a:84:
                    d3:e4:2a:fb:81:38:7b:5b:0d:b0:1f:53:c5:f2:7b:
                    7d:20:41:a7:41:d0:ec:8e:67:b3:ce:7c:33:f9:f0:
                    23:27:8d:35:9a:a5:17:00:b4:6f:de:4f:f5:82:4e:
                    8f:5b:4e:68:b9:56:82:42:f5:43:e1:3d:a8:d5:6c:
                    1e:51:a0:0d:9a:9d:0e:a0:c2:49:ed:80:16:21:13:
                    79:f8:73:d0:e2:4c:80:46:67:eb:ec:b4:95:05:56:
                    ab:de:c8:fb:f9:c7:80:d1:b8:09:1a:db:74:52:9e:
                    d6:b0:e3:23:04:4c:ae:70:f5:49:fc:c5:2e:cb:2d:
                    fa:ac:d9:6e:70:12:67:9e:01:44:48:68:63:a3:22:
                    8e:71:77:59:43:31:bc:27:70:02:b5:7e:6d:94:b1:
                    23:87:7d:2f:09:b1:68:d6:0b:b1:36:2c:09:24:0c:
                    f3:bc:c3:f7:a1:b5:4d:75:85:d4:7b:01:fa:76:f7:
                    de:f7:30:14:78:e7:1f:71:98:cf:24:09:13:1b:10:
                    eb:ac:23:18:4e:d6:18:3e:37:d1:4c:35:fc:d3:d7:
                    4d:42:dd:80:76:9a:76:86:db:43:51:f7:7b:de:6f:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3A:64:6F:B0:09:D5:B8:B5:34:7F:18:CE:DC:0E:7F:D0:07:87:B5
            X509v3 Authority Key Identifier:
                keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:6b:b6:12:48:39:2d:74:72:bb:b5:74:f1:08:d8:d9:5b:84:
         d4:60:b4:6a:48:6e:f8:9b:2d:ce:3a:c8:3f:8b:41:5a:9f:67:
         42:93:79:4e:fa:64:82:f3:8a:62:b5:93:6d:64:1d:7b:59:c8:
         32:db:c3:3a:9a:04:32:61:51:23:9a:74:9b:84:d2:44:4e:13:
         a9:e5:46:a1:cd:e9:b8:6b:b6:d9:6e:2b:0c:1b:fd:03:67:a2:
         71:15:8a:81:3c:7b:06:25:08:9b:81:1c:91:19:8b:0e:bb:ac:
         14:6d:7e:f8:51:1f:f1:95:cd:22:44:5d:21:54:b1:d0:74:f8:
         f8:9b:b3:ba:d1:24:87:0e:40:e1:ba:cc:91:49:0e:4a:88:ec:
         af:ff:94:ee:72:9f:5f:70:cb:6b:5d:ac:25:dc:8f:ad:e3:3f:
         47:f2:71:a5:78:14:7c:6b:32:3b:77:5b:f2:11:76:94:ad:c7:
         cd:30:b3:bc:a1:16:d1:0b:8d:41:42:02:0b:ed:d8:f0:6d:e6:
         7d:4c:72:d2:c4:4a:75:60:c4:18:9b:06:f1:6a:63:9c:89:39:
         ba:7c:5d:73:63:ac:f6:1f:24:d1:74:0a:df:5b:a3:88:a0:39:
         d3:11:5a:44:87:e4:05:4d:97:c7:e9:12:3e:e8:47:a7:c0:26:
         67:74:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:14 2025 by rpki-client