Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File:                     5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier:          Bo44QDQAh3PvR/mbvIX4BKjjP6InHo9WuT6FBfEPVFc=
Subject key identifier:   25:3B:A8:98:95:75:B0:6C:A4:99:CE:B6:4E:05:75:37:F6:FC:37:F6
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       019A50E3E4680421BCBB82D41652867A0CB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number:          11E8
Signing time:             Tue 04 Nov 2025 22:01:43 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:43 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:43 +0000
Files and hashes:         1: 4Ri47V3WHq4tKoDHhOl1rwh2KAA.roa (hash: lLEUdxQQ/ffC7NhoECBTe0Cnix1csYMCuJzl8ssByXo=)
                          2: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: 195CYdE7SXzgVm1KOPlADiIc2oLkBZLpOmnYuN8PAG4=)
                          3: 7Bsb-M9H7d4Hc8VS4AnIjyLsXlE.roa (hash: g+wem5y6cG+2ZtV6aLNz5ga+egeri0j1bBqB9ifdstE=)
                          4: PhUkNZ598A5ia5-UrJ9vFGUcNjk.roa (hash: KeqPA4mGFwTxFNdg5BKKsJzJk98xcvG22Bir2BXm6sw=)
                          5: hAUqHHOa5zKCAiaylV12xSKmjRM.roa (hash: 8CceZwUGeB+adYsoYQk00qGlq4ULcVFDHiLxSegah5g=)
                          6: k6g8GHkytSOVhgkLjUclPzoVHy4.roa (hash: +6vq3uBdq/4E/WX/WUrN8nWRXc0eqZ/mejCwa+UQTvk=)
                          7: tgxx8eKKt9THon5yuqezJ7Gyv60.roa (hash: uNDSHqnE8JqGtw2yUrw4/9adIpOhVHGi34SjFmkEDYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:e4:68:04:21:bc:bb:82:d4:16:52:86:7a:0c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Nov  4 22:01:43 2025 GMT
            Not After : Nov  5 22:01:43 2025 GMT
        Subject: CN=253ba8989575b06ca499ceb64e057537f6fc37f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:e5:c5:9b:0b:16:a5:6c:0b:ae:98:dd:06:
                    93:c7:fb:a8:31:ea:d8:86:55:bf:fe:fd:bd:e7:93:
                    70:d4:f8:87:3b:55:14:8d:e3:09:f6:51:56:a2:58:
                    66:c6:5d:14:c1:30:16:fe:d6:5a:60:ec:b1:ce:c1:
                    67:29:28:7b:a1:2b:ea:0a:9f:11:55:4b:df:80:8f:
                    2f:c3:2c:09:af:85:01:b2:84:a5:3b:eb:9c:9a:14:
                    3f:f4:46:c4:7d:04:99:39:0a:db:ca:b4:3d:e5:d7:
                    5c:34:4b:58:b7:67:d6:30:58:54:bd:00:2a:36:81:
                    c6:a5:79:61:b5:25:c5:77:01:c5:9a:fb:41:3c:14:
                    f7:a9:eb:77:d8:64:bc:80:0c:cc:bf:c5:1f:ba:cf:
                    66:37:94:d5:4b:b2:f8:c3:00:9a:3c:09:37:1d:4a:
                    26:33:1a:51:45:53:a7:c4:ba:3c:7d:51:bc:23:35:
                    33:1a:10:ef:44:6c:a7:39:1b:fc:af:fd:25:cb:c1:
                    20:3e:94:7d:f2:94:8c:e3:28:b1:38:07:70:32:0d:
                    b2:6c:32:7d:a1:7e:2a:38:84:a7:07:9a:b5:99:bb:
                    71:d8:b6:30:4f:2a:31:3d:c7:4a:52:17:54:00:94:
                    1e:3a:78:0f:05:d2:be:39:2c:ed:06:be:a4:de:29:
                    d8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3B:A8:98:95:75:B0:6C:A4:99:CE:B6:4E:05:75:37:F6:FC:37:F6
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3e:20:16:d5:51:99:48:cb:6a:88:81:d7:80:bf:fd:74:88:
         fa:a7:8f:19:7a:88:f9:a6:10:85:3c:18:48:f8:ca:6d:17:46:
         38:3a:01:df:3e:af:dc:58:ca:e8:c2:42:9b:e8:13:20:3f:16:
         f5:4c:53:be:c7:b3:ca:57:51:32:33:1e:e6:97:9b:b9:5b:fc:
         98:cd:d1:b7:70:ca:44:36:df:7f:8f:c3:a5:a5:f3:5d:76:30:
         93:6a:71:0f:fd:f8:f0:55:e2:6e:e8:79:47:ca:57:52:14:f5:
         c0:fb:c2:2e:4b:06:3a:35:af:20:00:7c:74:b0:6c:a9:7d:08:
         68:f2:dc:17:e6:30:34:e9:c3:5e:6d:3b:39:39:58:e9:83:61:
         c7:ba:66:b9:e4:c7:00:c2:7c:1f:a8:af:49:69:a8:71:16:15:
         d4:d3:1a:39:92:cf:5e:3b:a4:b4:c8:57:ef:7e:8a:4f:73:b8:
         91:24:d8:5f:6f:df:9e:87:66:20:2a:a9:0b:c7:ff:01:ac:c7:
         9a:63:a4:bd:62:cc:f5:55:ec:fb:89:f6:ff:59:c7:9d:97:e6:
         ec:f8:f9:60:cf:77:e7:bc:53:79:48:b4:3f:45:4c:ea:01:60:
         72:b7:d3:47:1b:e0:62:a4:52:c6:76:d4:bb:62:f1:81:ea:8c:
         98:99:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:33:55 2025 by rpki-client