Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
File:                     E5Mngu53WJkEBPocz7CewjqGEj8.mft (raw, json)
Hash identifier:          sl4Thdz5G/SuDAnNRGSUvWniKkXtbF+Dqm1R4b6eDK8=
Subject key identifier:   28:61:36:0D:39:B5:6F:A6:55:E5:B4:A7:B4:69:11:C9:FA:80:F4:15
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Certificate issuer:       /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial:       019A50E3A91A94B08BC4F2F36FB64342F676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
Manifest number:          135B
Signing time:             Tue 04 Nov 2025 22:01:28 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:28 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:28 +0000
Files and hashes:         1: 2X1Aq3uwv_rdP11PERDf5xc38AI.roa (hash: B7sjMQo7xNloOK1hTmdNbqOOboiaTbdNnO+C5uW+j58=)
                          2: Ch_gbqDsAhbPbPVyCZuUD6Rt_tU.roa (hash: lJyyoSk6lh9Ke1PZ6fr+wMQ+yXg1/zlIl+iWHK5ln+U=)
                          3: E5Mngu53WJkEBPocz7CewjqGEj8.crl (hash: HGLgtLuv6l7oBL++ytn9zYPkL1iuMRIfNVEuYHQl7OY=)
                          4: H2cnGkpHBPqjHRGhcHPHqWhpLu8.roa (hash: oHqCaOHDy7adycxKsgn/iaFXF2yuhzvyHsMV1zyHAAw=)
                          5: ILIqRbOHVwxkFJKFfUD52n880mI.roa (hash: cti4+XaqWa64ZvOhVwfuqQKsUk/NB8Q0npKWhfOyakI=)
                          6: eKX38WRBWmtuTwpJydlyAOgABaU.roa (hash: wPEeV7+enD23Ox2TyJ2ri6ktyLrFVlAY5Y0TfZ75Xbs=)
                          7: n7VMq_z-rv4nBWsX2SX-C_orDwA.roa (hash: puDUtCW6BFuWoUT5Yl8pFYj9/gNu+EkYRw2ZisOVmfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:a9:1a:94:b0:8b:c4:f2:f3:6f:b6:43:42:f6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
        Validity
            Not Before: Nov  4 22:01:28 2025 GMT
            Not After : Nov  5 22:01:28 2025 GMT
        Subject: CN=2861360d39b56fa655e5b4a7b46911c9fa80f415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:aa:8e:89:24:3c:5b:e6:22:52:cb:7b:0d:6c:
                    ff:78:44:f1:8d:5b:ba:13:80:6b:2d:ad:fe:e2:fc:
                    d3:72:d9:e7:96:54:13:9e:a7:7e:a5:61:8c:8a:6c:
                    7b:85:a5:1d:42:06:f9:d8:d9:18:e7:62:bd:c3:29:
                    ce:19:89:52:33:b5:56:d2:e3:7a:1c:0d:15:b3:a7:
                    b1:b1:da:73:ee:92:43:19:d8:dd:c4:89:c7:b5:84:
                    ec:86:6e:6b:6b:1c:ac:f0:c0:c4:bc:f9:6a:7b:27:
                    36:35:4c:63:fd:00:83:89:f0:55:0a:0f:4f:d8:59:
                    c5:9e:19:a5:ea:f6:0e:cb:0c:ca:68:2d:ea:ec:c3:
                    27:03:af:e1:de:a8:7c:d5:92:33:8d:fa:e6:6c:bb:
                    f9:48:e5:4c:dc:61:f9:2b:07:bc:29:6e:4d:4c:4f:
                    8c:60:e6:02:e4:00:27:17:5f:d8:c6:9a:20:d4:da:
                    0e:89:21:02:fe:18:31:6d:92:e2:1c:53:ca:f2:a9:
                    fe:da:e6:21:63:b5:f7:dd:6e:c8:b0:fe:5d:ab:93:
                    51:ea:6a:7a:60:40:dc:77:4c:c4:e2:cc:39:58:9c:
                    8f:58:db:5c:ef:c2:a8:ae:02:2e:ea:06:bd:e5:99:
                    87:25:4d:db:01:2e:d1:ac:9a:c7:95:e3:c2:14:7e:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:61:36:0D:39:B5:6F:A6:55:E5:B4:A7:B4:69:11:C9:FA:80:F4:15
            X509v3 Authority Key Identifier:
                keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:60:9a:8b:7e:8c:de:d0:92:ed:0d:8a:34:e4:24:d5:20:0b:
         10:eb:42:a4:12:0e:3f:e0:fd:8c:53:ad:ea:69:d1:7e:38:df:
         e4:79:9e:a9:06:e7:a5:e5:26:f2:06:73:d2:ef:f3:91:9f:f5:
         f5:e6:b7:4b:9d:80:a9:6d:f4:52:8a:f3:00:0b:28:91:e8:fc:
         92:6e:89:23:9d:67:eb:f9:47:06:cb:89:67:c2:af:18:e9:fa:
         60:44:70:68:f4:af:de:be:81:17:84:ad:09:ba:ef:df:75:a7:
         0c:c8:25:5f:cf:6a:1b:03:1a:e5:a6:78:6a:47:2b:25:31:ab:
         e3:20:b3:de:e8:e9:de:cc:74:44:e0:ce:a2:ac:ed:12:3b:28:
         58:21:41:97:f3:8a:bd:ed:3b:8c:72:de:02:3e:b0:ff:63:05:
         e9:8a:c0:68:c8:69:df:89:87:b4:79:97:c6:62:9d:63:68:b5:
         8e:f5:72:6a:88:46:5f:57:cb:be:8e:22:99:42:c9:07:19:59:
         62:ad:54:f3:7c:1d:ac:38:6f:7b:4e:1d:54:d6:95:5d:e9:98:
         a0:9a:a4:6a:79:d8:a3:d6:d5:51:29:6f:84:76:50:da:69:4b:
         a8:da:7f:a0:71:86:b0:c1:80:c7:14:d8:f0:88:a2:26:26:06:
         97:a2:78:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:19 2025 by rpki-client