Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File:                     5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier:          2ob3A5PUGSOuJAt2pFQzPdgKVkFhooREzm7BveMSaE8=
Subject key identifier:   32:D7:13:CA:C7:E1:97:D1:E6:56:8A:BA:73:71:E4:2B:DE:FC:92:BB
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer:       /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial:       019A522CE1B7BE6B45B0F1D42505C0190919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number:          11F4
Signing time:             Wed 05 Nov 2025 04:01:04 +0000
Manifest this update:     Wed 05 Nov 2025 04:01:04 +0000
Manifest next update:     Thu 06 Nov 2025 04:01:04 +0000
Files and hashes:         1: 1n-VVl_FUGuc471oALycpRiqCLk.roa (hash: CyDn40gRMpRIy4CCIQiJsw5qJAYeVVUI59AY9O976Cg=)
                          2: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: fHb7XwVer+/lbJk3EFYWzu04cRfyp1Z6DDII+neM3pI=)
                          3: bvJaB1n4DlwgW-YHgMlWz2d0zE0.roa (hash: Aum897RCErwCFSWkB8MTk4Vue2u5uq3XMcwvd1bOMFQ=)
                          4: d-c3fV9q29dsWUsutXEO_XUxELA.roa (hash: odfjS8/wqJCuj1kyoe6nkIiHEr+jKawF6ritEznO31s=)
                          5: sXJREdbwAm9mG_ih-kGMSE4IF1g.roa (hash: Vz5vIbPRAiUHJvwDkitmXzn8yuqUilXU/W786A3ZvJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:e1:b7:be:6b:45:b0:f1:d4:25:05:c0:19:09:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
        Validity
            Not Before: Nov  5 04:01:04 2025 GMT
            Not After : Nov  6 04:01:04 2025 GMT
        Subject: CN=32d713cac7e197d1e6568aba7371e42bdefc92bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e8:ec:c6:54:d3:9e:2a:8b:f8:c6:d3:41:8a:
                    b6:e9:a5:05:48:20:16:68:98:00:80:47:6d:f3:dd:
                    06:83:4b:51:a6:b1:a7:bc:8b:7d:b1:89:d5:6a:f3:
                    c1:a7:a1:26:31:66:78:b2:89:ac:fe:88:b9:f8:93:
                    66:df:a2:92:ce:8b:dd:9b:c7:ac:1a:a6:66:ef:cb:
                    bd:61:40:91:b6:93:29:af:1b:32:c4:bc:fe:82:dd:
                    6c:82:19:ab:9e:50:54:4f:8d:d1:55:2d:c4:fa:77:
                    ae:cf:02:c6:21:5b:91:fa:82:48:f7:5e:b1:6c:52:
                    73:3c:6d:14:7f:c2:73:e4:86:eb:8e:be:0c:c0:c8:
                    c6:c3:e3:74:26:80:b9:16:e7:11:7b:0f:f8:36:0e:
                    a8:ee:94:89:a7:b0:08:dd:89:10:81:3c:78:7d:12:
                    e7:ef:a0:f8:75:1c:b6:f2:97:28:0c:42:00:d3:c6:
                    af:22:da:01:c5:11:12:3e:1b:57:ce:e5:fb:82:db:
                    e8:5d:c2:f4:c7:c1:c3:26:70:e4:3a:e5:26:86:86:
                    fa:30:46:6e:1f:af:0c:ba:59:24:a7:44:b5:0d:f0:
                    13:66:3d:57:32:4f:49:9a:8f:01:0b:b2:16:42:9d:
                    e3:1d:dc:ea:76:3d:3c:a5:72:50:f9:b7:dc:96:4d:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D7:13:CA:C7:E1:97:D1:E6:56:8A:BA:73:71:E4:2B:DE:FC:92:BB
            X509v3 Authority Key Identifier:
                keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d3:f5:4d:ce:78:4b:44:21:83:73:28:a5:9f:e4:d0:4b:e4:
         b3:c9:cd:0d:ab:26:0f:d9:14:77:f6:5a:ef:d0:6b:67:a4:18:
         b1:1e:85:14:74:ac:72:0a:f6:de:c7:bc:1f:57:cd:ab:dc:38:
         a9:6d:73:2d:6b:95:06:d3:b6:e0:f4:24:0a:07:90:3b:0d:7f:
         f5:e3:c4:7b:4f:89:e7:22:7b:bf:72:86:b2:33:58:b9:0b:06:
         88:b5:6e:ed:c9:67:a7:c7:96:ba:29:6f:ab:68:11:15:b9:4b:
         65:e5:bf:d4:df:50:6f:c4:80:02:13:b5:47:13:6b:b5:39:0c:
         d8:d0:c5:72:a1:1b:88:9b:06:f9:55:35:4d:24:1f:fa:da:a6:
         87:d4:76:f3:55:2a:75:3d:55:f8:e1:6b:1e:fc:4e:51:b8:97:
         13:9f:3b:84:d0:d4:76:c7:ef:13:86:82:e4:8d:88:65:f2:08:
         3e:56:c1:15:46:c8:bf:3e:ee:d2:de:b7:77:a4:6e:10:b8:90:
         01:00:0e:a5:b6:f5:e5:4d:b3:72:fa:e3:c0:d6:45:29:e3:5c:
         c5:8b:90:7d:65:23:82:cd:83:ea:cc:81:6e:24:81:83:a9:3f:
         57:49:fa:8f:bf:0f:ed:ea:59:aa:26:e5:0b:e2:d4:f5:1c:fa:
         3a:e6:e2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:27 2025 by rpki-client