Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
File:                     E5Mngu53WJkEBPocz7CewjqGEj8.mft (raw, json)
Hash identifier:          DnA975/httJemLOtZ+TUOLSNn9am8EOvKZpcYDA4FD8=
Subject key identifier:   E7:55:3F:5B:6C:AF:15:46:05:27:C4:5D:94:56:EE:2E:C3:BC:90:68
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Certificate issuer:       /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial:       019953E7B731FF33A31D7C33F08ABCC5607D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
Manifest number:          12D8
Signing time:             Tue 16 Sep 2025 19:01:58 +0000
Manifest this update:     Tue 16 Sep 2025 19:01:58 +0000
Manifest next update:     Wed 17 Sep 2025 19:01:58 +0000
Files and hashes:         1: 2X1Aq3uwv_rdP11PERDf5xc38AI.roa (hash: B7sjMQo7xNloOK1hTmdNbqOOboiaTbdNnO+C5uW+j58=)
                          2: Ch_gbqDsAhbPbPVyCZuUD6Rt_tU.roa (hash: lJyyoSk6lh9Ke1PZ6fr+wMQ+yXg1/zlIl+iWHK5ln+U=)
                          3: E5Mngu53WJkEBPocz7CewjqGEj8.crl (hash: nKEP3WW5P6ITi+TMVE7oypxHvdsUJJRj4MlT61jKqVk=)
                          4: H2cnGkpHBPqjHRGhcHPHqWhpLu8.roa (hash: oHqCaOHDy7adycxKsgn/iaFXF2yuhzvyHsMV1zyHAAw=)
                          5: ILIqRbOHVwxkFJKFfUD52n880mI.roa (hash: cti4+XaqWa64ZvOhVwfuqQKsUk/NB8Q0npKWhfOyakI=)
                          6: eKX38WRBWmtuTwpJydlyAOgABaU.roa (hash: wPEeV7+enD23Ox2TyJ2ri6ktyLrFVlAY5Y0TfZ75Xbs=)
                          7: n7VMq_z-rv4nBWsX2SX-C_orDwA.roa (hash: puDUtCW6BFuWoUT5Yl8pFYj9/gNu+EkYRw2ZisOVmfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 18:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:53:e7:b7:31:ff:33:a3:1d:7c:33:f0:8a:bc:c5:60:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
        Validity
            Not Before: Sep 16 19:01:58 2025 GMT
            Not After : Sep 17 19:01:58 2025 GMT
        Subject: CN=e7553f5b6caf15460527c45d9456ee2ec3bc9068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:ad:74:b9:31:ce:e4:3f:88:2a:54:05:12:
                    0d:18:c3:6e:e4:7f:78:88:1c:b7:d8:d9:49:f1:f9:
                    11:4e:a1:6c:70:e4:c5:35:b3:f6:81:ce:9e:6f:02:
                    ef:6a:bd:50:23:96:81:d1:4f:a3:75:fc:d8:6d:b3:
                    2b:55:b4:07:06:62:ee:b9:13:67:c7:0e:21:df:d0:
                    a4:d8:28:a5:6d:93:3d:26:73:67:9b:26:bf:f3:a2:
                    63:29:8b:49:5d:4d:d5:8a:59:3f:60:fd:ea:b9:f9:
                    25:2d:fa:84:a0:78:f3:83:4e:03:c7:b1:36:4d:0a:
                    d2:5e:a9:1c:35:b3:2a:85:25:f4:ed:e3:ff:b0:dd:
                    54:fb:36:b1:0f:98:6e:40:fd:2d:71:46:1e:f4:b0:
                    6f:b6:3a:20:6e:eb:15:8a:c5:a4:7b:f4:b6:e2:c8:
                    ac:27:d0:f3:b7:b7:85:3f:09:42:de:e2:cc:a2:38:
                    fa:24:ef:cf:3c:d1:80:d2:fa:4a:b5:99:00:54:e5:
                    3b:f1:5f:1c:6f:6d:b5:29:a8:8c:ae:c3:40:fd:85:
                    78:70:9a:0e:15:27:5f:a0:cd:f4:db:42:7a:29:b9:
                    33:ce:ee:55:b8:a0:69:43:3b:7b:18:31:95:a5:9e:
                    48:d1:a0:d2:6d:2f:02:7b:3a:31:0e:f8:36:aa:b4:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:55:3F:5B:6C:AF:15:46:05:27:C4:5D:94:56:EE:2E:C3:BC:90:68
            X509v3 Authority Key Identifier:
                keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:9d:f5:10:dc:a0:45:40:da:26:48:03:da:d3:60:ee:36:
         1f:52:ca:f0:d3:9b:c6:9e:d9:73:e7:b8:42:4c:17:a1:72:08:
         79:a5:3c:31:65:a2:12:3a:1f:10:05:9e:0a:c8:ae:53:be:92:
         22:0d:19:63:cf:0e:7d:87:4a:04:3a:47:f0:21:28:a9:97:c9:
         71:49:d7:5d:79:82:03:ca:de:47:40:e0:1b:68:06:09:e8:6f:
         03:77:3d:f0:56:39:64:80:cd:8f:62:e8:c9:dc:ac:06:c5:02:
         e4:38:01:bf:ff:33:ca:58:eb:41:d9:31:f5:38:31:10:a8:f6:
         b3:d7:37:1a:7c:82:68:20:87:8b:13:3f:85:88:8b:cd:9a:18:
         19:55:4a:78:7d:a8:52:7b:4d:3d:5d:cf:4c:2e:93:ad:2c:65:
         1e:ff:63:d0:58:5b:5e:a8:24:45:d6:11:bf:e4:e1:f5:e4:d3:
         e5:3e:61:80:7d:a8:ec:d0:8b:5a:b5:be:b8:80:dc:6a:76:6c:
         a6:09:23:a4:c5:2d:49:0a:2f:7e:a4:6f:6d:1b:c7:27:2b:14:
         e7:fb:ca:73:31:61:19:98:61:ef:03:98:8f:95:7e:de:59:cf:
         62:46:db:3b:1a:ca:2b:e7:1e:60:33:0b:3b:e2:a5:b6:12:4d:
         6d:f1:21:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 22:56:34 2025 by rpki-client