Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
File:                     5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json)
Hash identifier:          9udQJg8PjOgkd+nxVEZJ/GPdKuWpUq9xfxdZW6OloGU=
Subject key identifier:   EB:44:32:74:B6:E3:15:56:9E:14:6D:E4:3E:C0:B5:76:5D:BB:FB:A4
Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
Certificate issuer:       /CN=e47e92bf41a5a774511fb723af94aff0d3512602
Certificate serial:       019A4E18A1FF5DB935EC8E0DC41D49022CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
Manifest number:          0544
Signing time:             Tue 04 Nov 2025 09:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:28 +0000
Files and hashes:         1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: Jf0OxqpdAQenD/VCTWk304Jq6OPe/Yvwn42hv7SXvZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:a1:ff:5d:b9:35:ec:8e:0d:c4:1d:49:02:2c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602
        Validity
            Not Before: Nov  4 09:00:28 2025 GMT
            Not After : Nov  5 09:00:28 2025 GMT
        Subject: CN=eb443274b6e315569e146de43ec0b5765dbbfba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:5a:41:5c:d5:92:9b:d4:b8:6b:b6:f9:57:
                    4c:80:ef:b3:a7:a1:32:fa:3e:15:a2:40:e8:bc:dc:
                    1c:3f:95:da:e0:51:cf:28:e7:45:8e:40:45:66:04:
                    e0:35:eb:c0:58:79:11:dc:0d:f3:27:bf:f4:2a:5b:
                    9a:0f:94:2e:54:51:58:ba:68:9a:4f:24:99:10:6e:
                    8e:ef:06:c6:ec:08:9b:ed:b0:f4:47:08:19:cd:ba:
                    10:72:93:3c:58:6c:4d:9f:81:e3:3a:4f:5d:9b:4c:
                    d7:90:8d:02:3b:f6:b8:5f:b9:5a:c7:7d:96:12:82:
                    6b:d6:09:50:36:86:b0:fa:0a:0b:e5:99:36:4f:15:
                    92:ab:b6:a5:e3:9b:27:e0:78:0d:bc:a6:8c:86:10:
                    d7:ac:22:8b:80:7c:21:d3:ba:e5:0d:51:7d:30:44:
                    92:a6:f3:d6:57:7a:0b:64:d9:58:a2:5c:be:8e:a7:
                    cb:4a:06:c3:c3:3f:0e:b4:70:eb:b4:c2:ce:91:9c:
                    4d:fb:52:2e:b0:c0:3c:54:9e:e6:90:55:0d:b0:08:
                    dd:de:30:60:1e:55:12:29:7a:58:fb:22:a8:61:d6:
                    b1:a9:c0:08:1c:19:68:3b:6e:38:cb:35:76:20:89:
                    a4:3e:bc:26:0d:5e:c8:a5:9e:e5:ac:ea:24:05:3e:
                    db:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:44:32:74:B6:E3:15:56:9E:14:6D:E4:3E:C0:B5:76:5D:BB:FB:A4
            X509v3 Authority Key Identifier:
                keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:8c:e5:e9:32:cf:d2:ac:48:a4:ee:33:ce:64:a2:20:73:
         e9:94:39:2b:e8:58:24:58:29:91:27:2d:e5:86:6c:8a:13:6a:
         a1:10:80:c6:df:41:76:46:cf:4a:b5:63:e5:da:30:4f:f6:73:
         64:d9:d1:bb:0e:04:69:9f:63:3e:09:ab:ef:c5:ee:c1:41:ce:
         10:5b:a5:de:6b:4b:85:b3:57:a8:b2:d2:12:fd:9d:45:a1:af:
         81:63:5f:77:50:37:9c:ec:95:73:c6:58:bb:ac:c6:91:2d:5f:
         8a:cd:cf:55:ef:04:df:51:2e:7a:00:c0:cd:1f:ed:d1:fc:4f:
         cc:7f:1a:94:39:e8:f5:e3:af:f8:42:a2:44:e4:5e:76:fe:d5:
         05:a7:6e:58:89:63:1c:3d:b2:b9:ab:98:5e:14:56:e6:04:0c:
         9d:c3:13:17:cf:3d:a9:a4:b8:07:a4:24:c5:4c:e5:76:97:4b:
         33:b4:63:5b:15:bd:f3:49:b7:01:d9:8e:bb:ab:9e:fb:62:91:
         e8:a7:31:ab:a0:13:4c:12:7e:5e:fd:44:dc:33:75:7a:99:f8:
         ac:a7:a0:bc:ee:39:f8:73:56:44:87:e9:af:06:f8:c4:0e:72:
         94:fb:36:c5:7d:a1:ab:c8:3d:58:45:e2:34:7f:9b:c1:55:97:
         1c:ba:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:09 2025 by rpki-client