Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
File:                     5WB28n4T0YAOd9FuS2CyO29YyCA.mft (raw, json)
Hash identifier:          eQ+pb4mZPkXu5GZy+tb9CteQQPe2yUOCTS8VgO94cNg=
Subject key identifier:   F9:A3:0D:F8:0F:93:0F:FB:EC:47:CC:E4:01:E2:07:54:B6:6C:6A:5F
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       019A4D3CB6F5DC985EAAF91215A6CBBA13B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
Manifest number:          1063
Signing time:             Tue 04 Nov 2025 05:00:15 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:15 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:15 +0000
Files and hashes:         1: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (hash: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=)
                          2: 2ml5oRq-VyEb_mJG0C7Ahdjf8IY.roa (hash: ttehz4UlNMi9cbs/FPfy9Lw9uSsUlhxDo7xqWG0gtFA=)
                          3: 5WB28n4T0YAOd9FuS2CyO29YyCA.crl (hash: UWG6DIW2qiMBXNNhM/LexTj5d8UwwOtT1RgTxaFvUy8=)
                          4: 6SdikSl1jU5cpmKfnZzRmSDOHuU.roa (hash: ppHMqODDNYRhgCo6OadvbiBfTSlanNIKDu29ewQ4fxE=)
                          5: AgBjgI35YWeABs8oCUWHz3K2zWw.roa (hash: 4E8DBT5sfAcPhRkXfwuGn/b4aAai3g0fbeGZYZUWlss=)
                          6: DapHF4_ML4zHS1eSSpKXu6earDU.roa (hash: VRZxFZEzLMzQ017sges9Sj2H9YBysCUi/ugt8yTZW+k=)
                          7: SQWlc0rZJj-IH4BVVpWf4gkYzTE.roa (hash: pKU0nvpLv8g9iORRQCN0Yo6/Mr7aoPJ/lOVaNu8h5Gk=)
                          8: Y9YksH2bUiHljz8P5EhHyhB5y9g.roa (hash: T5FIsRO2g9NTZMOXMSlY2kZF7GuiHFYTJEt+zSOsPvQ=)
                          9: fX0xQGF-aX1OUm6loSYzR_yxa3s.roa (hash: WE6TQcdbZv7KpM5MoM+ZhGHXdH152fsJ6v0eYqFpKnw=)
                          10: yn6_FC3ZDlreYvdUbTREjMhfyxs.roa (hash: LlX6Tl5H1KTqy6O3g5CWu69Bs/CP9zvonCRnk8+j/fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3c:b6:f5:dc:98:5e:aa:f9:12:15:a6:cb:ba:13:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Nov  4 05:00:15 2025 GMT
            Not After : Nov  5 05:00:15 2025 GMT
        Subject: CN=f9a30df80f930ffbec47cce401e20754b66c6a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:99:98:be:04:c7:e9:6a:25:cc:4f:cd:1b:
                    02:cc:c8:16:0d:2a:d3:4d:f4:0f:e1:14:4a:30:a9:
                    2b:db:1d:9a:9b:2a:7f:dc:1c:12:96:d1:55:ed:84:
                    62:5d:d6:ce:e8:e6:67:3a:4a:85:3f:c7:d0:f2:52:
                    6c:2e:5d:33:48:25:d1:23:91:e6:6e:35:49:ac:fb:
                    f8:01:2d:0d:47:d7:de:06:f1:30:ed:df:3b:c8:07:
                    8b:e5:35:67:94:d7:4d:7b:d9:8c:8a:28:f7:0a:1e:
                    08:07:18:80:bb:f9:e6:d1:48:15:2b:11:9e:c3:db:
                    f1:bf:ca:68:4b:0e:86:60:a2:df:83:ab:0b:54:e1:
                    45:2e:8d:1b:62:35:ff:16:d1:ac:39:27:e7:aa:2a:
                    b5:67:21:c9:8d:6d:2f:fc:7d:76:d1:ac:bf:c8:96:
                    38:55:0f:d4:cd:07:b6:dd:39:44:c1:b7:02:c2:7e:
                    4a:32:01:61:38:d8:39:07:91:aa:a2:db:ad:ba:dd:
                    30:bd:ef:b8:22:79:19:7c:57:68:2a:82:ac:f0:f5:
                    ac:2b:1c:0c:0f:9d:e5:94:cd:29:b3:53:68:3e:c7:
                    5f:cc:b8:e1:02:a2:d3:a1:5f:cf:58:72:40:99:48:
                    45:78:ae:17:27:00:c6:55:32:39:36:f8:1d:7f:0b:
                    e8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A3:0D:F8:0F:93:0F:FB:EC:47:CC:E4:01:E2:07:54:B6:6C:6A:5F
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d1:df:07:de:ae:8a:4f:60:c5:45:50:05:cc:d5:de:67:1b:
         1a:c9:de:92:31:f0:c2:fc:82:9a:fe:1a:22:c9:12:9e:55:c9:
         e4:e4:25:68:ae:77:eb:83:9b:a5:4a:08:8c:79:6c:92:56:70:
         54:d6:ba:69:48:2b:03:c1:7e:11:52:39:46:c6:61:ee:95:ef:
         76:4e:8e:66:3c:ad:48:bf:5a:fd:9a:44:e7:59:e3:80:4f:2c:
         73:de:49:ce:c7:26:0b:e3:45:36:74:9e:26:1f:a8:2f:d0:06:
         12:57:3c:7e:51:bc:aa:76:ec:78:7b:6d:5b:86:1e:60:ff:d6:
         5e:37:83:f6:74:4f:f6:f7:66:aa:b7:6a:b9:02:c3:44:49:c0:
         e3:19:c0:93:02:31:8f:9b:03:3b:4b:74:a9:17:8e:59:5a:21:
         e2:93:e7:30:a5:99:04:91:aa:d4:4f:56:a9:e5:09:2a:74:27:
         17:cb:2d:38:5e:aa:26:07:57:a1:9b:4b:78:40:30:7d:1c:47:
         e3:e0:51:f0:17:ed:40:94:1a:39:e3:92:b8:bc:35:4f:22:75:
         10:af:d2:5c:c8:cb:68:50:28:e0:1b:28:a1:c3:e9:01:e0:bd:
         4a:18:79:1e:5f:95:93:19:7a:d3:4a:56:d2:de:2a:07:c9:6b:
         49:3d:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:08 2025 by rpki-client