Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
File:                     E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft (raw, json)
Hash identifier:          d5Sm+Kwy/QJ7EFGGzkKsFU1IVeGW+bbp3reZjANYfME=
Subject key identifier:   9A:86:36:8C:80:1F:93:74:D3:FC:F3:A6:18:1D:4E:18:B1:7A:8E:A0
Authority key identifier: 13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
Certificate issuer:       /CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Certificate serial:       019A50E2CFD6E114F5FA9CEBB0C2F2906E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
Manifest number:          0B5E
Signing time:             Tue 04 Nov 2025 22:00:32 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:32 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:32 +0000
Files and hashes:         1: AkOZiNxVhUaQoLKipRlB_hZtuhU.roa (hash: OT/u98f/Om9ZIYFZJdTTw+++YqbpQpzo4KPrsjLuAbM=)
                          2: E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl (hash: oLCsTgzziNk6+3R15l22eTZ0BhvCxE0r+06qZMwkTuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:cf:d6:e1:14:f5:fa:9c:eb:b0:c2:f2:90:6e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134010e4398dfd6e19f45b513c22c1eca33311f8
        Validity
            Not Before: Nov  4 22:00:32 2025 GMT
            Not After : Nov  5 22:00:32 2025 GMT
        Subject: CN=9a86368c801f9374d3fcf3a6181d4e18b17a8ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:2b:07:6a:2f:5b:e4:f5:c0:1f:7b:a0:56:
                    2a:70:40:4a:91:ce:83:87:6d:66:53:cf:16:30:71:
                    1c:a5:e9:f0:d6:14:d9:51:f5:b8:91:85:2b:6f:6f:
                    07:3c:e1:ea:36:6b:5c:66:8d:e5:23:d0:fc:b6:7c:
                    73:df:26:4a:8c:ad:b5:a7:65:c9:03:27:2a:86:53:
                    a3:87:74:27:c4:a1:74:72:4a:d5:e4:46:39:de:4b:
                    82:3f:34:67:fd:78:30:7a:4a:19:f3:65:52:98:7b:
                    32:6a:4b:28:1e:9f:1e:c7:92:4f:cb:11:1a:73:67:
                    f0:5c:78:ab:c0:29:08:9d:49:7e:00:2d:69:8f:87:
                    84:ff:14:33:22:34:86:48:d9:34:8c:6a:51:f0:4e:
                    f6:92:7d:8f:db:d8:03:5b:aa:7c:ed:b8:54:9a:39:
                    9b:2e:7a:96:d4:1d:38:18:07:4d:36:67:bd:37:58:
                    a8:c0:6f:54:e9:7e:86:83:d2:f5:cf:6d:dc:20:ad:
                    02:a7:d3:68:4e:50:d0:96:36:e8:1c:51:26:d1:e9:
                    6c:14:73:b7:9f:a0:90:f1:da:aa:01:bc:75:f1:35:
                    cc:bc:e4:dd:86:97:cd:83:da:35:ca:49:92:f7:c6:
                    4d:4d:d2:52:fb:73:c2:af:97:f6:fe:3f:e4:e8:9a:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:86:36:8C:80:1F:93:74:D3:FC:F3:A6:18:1D:4E:18:B1:7A:8E:A0
            X509v3 Authority Key Identifier:
                keyid:13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d3:5b:90:d5:fd:2e:eb:1d:01:df:ad:db:f9:d6:55:de:19:
         e6:39:c2:0d:e7:f7:67:07:b8:bb:8a:bd:19:dd:e3:16:2b:db:
         6a:7e:26:ef:66:d3:17:c2:19:d3:9f:6f:66:f9:cf:35:24:df:
         21:14:37:d8:fd:50:91:fb:58:93:0c:30:82:2d:95:78:68:8e:
         b4:ca:5d:ac:69:58:6b:ef:d3:18:9f:57:a7:1e:4f:fa:28:1e:
         f9:34:07:b8:16:a5:c4:9b:cf:92:b6:f9:ac:47:e2:1e:f8:c2:
         bb:5c:6e:86:74:04:cf:b4:12:2e:a8:f0:0e:40:a3:40:d8:b4:
         1e:c0:3d:50:39:ab:a1:9e:87:08:ea:99:e4:3d:af:92:9f:6a:
         8d:36:5e:a1:64:2f:1b:a3:d9:86:0a:8d:9c:52:83:eb:b0:c1:
         b8:f9:b7:bd:f5:87:ae:54:d8:fd:c5:32:1b:e7:6f:99:95:6c:
         e4:fb:06:d8:30:cc:f5:d5:51:19:69:01:f3:32:86:b2:6d:4b:
         c2:90:5e:c0:ac:51:f4:ab:fd:6b:cc:4a:a9:7c:24:d7:f1:d8:
         b4:29:58:5b:42:a4:f2:f7:93:a6:c6:bb:c8:2d:cb:83:3b:46:
         d2:f8:1c:82:b4:09:52:a8:f5:ec:2b:8f:09:6a:ae:a7:85:09:
         15:8c:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:38 2025 by rpki-client