Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File:                     r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier:          Gj57pVdcgi08pRZt4o27fUGj2AcyjkbO1qQFINckQqo=
Subject key identifier:   13:B7:8F:5C:75:65:E4:D5:C2:70:F2:85:B3:64:72:7D:B8:76:22:01
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer:       /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial:       0199FC5867AC15DCAC613E19336721820794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number:          0E44
Signing time:             Sun 19 Oct 2025 12:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:15 +0000
Files and hashes:         1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=)
                          2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: zVdQv1FGE4HFXnT3nfMO48YVy+03wq8SnVLeDeU9cFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:67:ac:15:dc:ac:61:3e:19:33:67:21:82:07:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
        Validity
            Not Before: Oct 19 12:01:15 2025 GMT
            Not After : Oct 20 12:01:15 2025 GMT
        Subject: CN=13b78f5c7565e4d5c270f285b364727db8762201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a7:7b:f5:3c:5a:86:3f:f3:51:ae:1d:8e:89:
                    fc:ac:9f:3d:7b:f1:64:b2:9f:c3:dc:ed:f9:64:32:
                    e7:b4:30:77:bd:9a:6d:42:0f:cf:6a:f0:2c:6f:32:
                    1e:d3:e6:2d:32:33:74:7d:1c:7e:4f:8a:66:1d:91:
                    61:9f:a4:8f:61:56:cb:08:7b:38:30:be:0d:c5:45:
                    22:58:75:65:21:bc:d3:8e:5b:b7:9a:a9:e5:15:80:
                    4a:ac:93:7f:bf:61:75:01:2f:d2:76:7c:35:18:0b:
                    bf:4c:85:14:af:3c:5f:be:5e:25:ef:80:ea:14:a9:
                    be:3a:a1:e0:3b:91:fa:5b:99:c1:46:f6:e3:87:d9:
                    5c:70:8c:f2:63:e1:aa:67:f0:7f:80:f5:9f:f8:bc:
                    05:b4:e7:73:ad:15:e4:1b:f6:82:90:c2:2f:a6:0a:
                    74:84:b0:f0:f2:12:67:24:4f:39:d1:21:9a:ff:e4:
                    cd:38:c0:74:1b:64:ea:b6:51:0d:a9:81:1e:77:dc:
                    f6:2e:ea:6e:b3:42:ca:34:5b:41:1e:61:17:a3:dd:
                    e0:22:61:78:c4:ff:a9:e3:c1:e6:f6:29:f0:41:b6:
                    03:09:9a:d6:25:8e:62:65:44:68:1d:fc:dd:b6:5a:
                    b6:b9:ac:5f:31:01:d6:f6:29:05:c7:fb:33:a0:13:
                    f6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B7:8F:5C:75:65:E4:D5:C2:70:F2:85:B3:64:72:7D:B8:76:22:01
            X509v3 Authority Key Identifier:
                keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:24:86:a0:7f:7c:ec:68:35:d7:bd:44:bc:9a:f0:49:15:bc:
         17:9f:10:bb:50:14:e4:b4:3f:42:90:28:1e:a8:0a:a7:ad:8f:
         cc:ef:48:1e:f8:9f:49:f5:33:10:27:ec:47:0b:e2:42:d5:e9:
         ba:ab:e6:0b:e6:56:64:7d:ad:2c:3c:18:2f:1f:90:a1:d0:2b:
         d2:c9:b0:07:b1:98:42:df:f9:7a:74:cf:81:6b:a1:d2:4f:a7:
         91:1c:9d:d4:5a:18:a5:23:45:25:81:35:79:70:eb:4d:33:c7:
         7a:fd:2a:e0:ea:bb:1b:15:e0:73:dc:7d:c7:c0:4d:65:4e:0f:
         56:fe:d2:27:8c:21:af:2a:e4:d2:75:95:a7:b4:6f:b6:f0:55:
         30:79:b1:0d:57:b0:71:78:41:08:c7:b1:9b:b7:d1:2d:71:77:
         05:97:df:36:e3:9e:c6:43:76:1a:6b:5a:79:ee:9c:7b:1d:4a:
         c4:45:8d:1d:3c:ff:ec:1c:2d:c1:66:40:67:08:35:c5:a4:23:
         09:34:1d:b4:22:dc:b7:7b:c5:9a:cd:a7:21:87:8b:82:09:d5:
         cf:4b:8a:c9:29:b1:94:f2:90:91:54:f6:69:4e:91:a5:d5:c1:
         28:e5:92:ee:8d:cd:29:e4:2b:15:41:2a:90:5b:0e:87:c9:73:
         e8:16:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:57 2025 by rpki-client