Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
File:                     Urm54lZYDENEuyQURbTVLlT91Qs.mft (raw, json)
Hash identifier:          2zw2FTM+q5IDUPMDPrShzmPy/m1UbvxQflpeq789l1Q=
Subject key identifier:   5B:48:5F:15:51:1A:D9:EE:E2:A6:FA:79:D0:16:35:72:7B:44:17:DB
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Certificate issuer:       /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial:       019A70A55E0D595615A53653B33E16A2BFD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
Manifest number:          13F5
Signing time:             Tue 11 Nov 2025 02:01:16 +0000
Manifest this update:     Tue 11 Nov 2025 02:01:16 +0000
Manifest next update:     Wed 12 Nov 2025 02:01:16 +0000
Files and hashes:         1: N2O3G_GjXXDuF5KsAQP8xo3uglY.roa (hash: LPPRO1GUfKnRSIYM+kHZ8F+xYKU/zo1v5q3jTNnb/Fg=)
                          2: Urm54lZYDENEuyQURbTVLlT91Qs.crl (hash: OfEbBCYEx+aIHOb9l4BZxRGjx3FXKGsEd5HDnLfnNpA=)
                          3: dl9xN4pkOUMATzBUDPbZSMUjsGM.roa (hash: 7kZi/ZdJrUDScoanJo0Ay5pdIQ9TOVPgtHVnLSi9b9I=)
                          4: elKWmf6BGTWMt5DvOkJSmfgI6Qc.roa (hash: XewDawQR0+tbCE/3KxBoInLYooxTPbPPCM6MSvyHwQE=)
                          5: foa891AnmG5IItmg1Wf-_lEJLDs.roa (hash: rxdmVGXyq1cHavmoPP06AY0vL55EfYeqB1P3hGrfV4Y=)
                          6: ro7x5tBi5pz3qKIPLgpN5cezxqA.roa (hash: 5qgWdLvv6h/u7ssCLQ9odiZwNdNNYlXCXXprQdKkz2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:a5:5e:0d:59:56:15:a5:36:53:b3:3e:16:a2:bf:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
        Validity
            Not Before: Nov 11 02:01:16 2025 GMT
            Not After : Nov 12 02:01:16 2025 GMT
        Subject: CN=5b485f15511ad9eee2a6fa79d01635727b4417db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:35:10:0d:49:a0:1a:f0:92:73:59:f3:13:
                    1c:37:6f:88:b3:43:2c:01:36:17:4b:54:17:91:29:
                    a4:57:38:f2:10:cb:fd:16:f4:56:a1:9b:d9:2b:f6:
                    81:bd:0e:40:69:20:69:a7:03:d1:65:ac:73:a4:3d:
                    63:75:8e:28:63:4a:85:58:20:f8:2b:bc:5c:74:2a:
                    75:9a:cf:c6:fb:e5:69:d3:3a:a7:a9:ea:a6:bf:a5:
                    c7:8e:71:d9:84:9a:d0:15:a6:96:61:f0:6e:4b:27:
                    ca:e0:9f:48:be:ae:4a:32:ba:36:be:d8:f9:c5:7c:
                    23:90:65:a6:70:e5:4c:fd:a8:a3:0b:15:23:7d:85:
                    c5:90:39:2b:5b:a1:2b:0c:49:53:61:3a:78:18:e0:
                    ca:8e:31:77:b7:ed:bc:cf:db:2b:cb:81:86:12:a9:
                    c2:77:79:15:51:61:39:17:2f:35:7c:c9:1e:62:b6:
                    13:dc:52:c6:da:dd:5f:42:7c:1a:b8:21:ba:18:58:
                    1c:1d:f2:ff:aa:be:af:33:8f:71:26:25:f7:20:8f:
                    1b:e2:f3:02:ad:e0:85:76:ba:a2:d0:44:9b:47:3e:
                    71:cc:b8:6c:23:3a:61:24:b7:73:0e:b4:44:2b:f6:
                    20:5b:ce:56:58:78:4f:16:dc:03:ac:39:02:ce:5e:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:48:5F:15:51:1A:D9:EE:E2:A6:FA:79:D0:16:35:72:7B:44:17:DB
            X509v3 Authority Key Identifier:
                keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:0a:85:35:6d:47:a3:bc:47:25:4b:b6:d2:c1:29:ab:a3:f6:
         c9:07:f2:47:71:67:cf:2f:cf:ae:ef:c9:c1:74:06:94:cf:9c:
         08:58:92:07:83:43:87:65:44:bd:c8:08:e3:70:eb:b6:50:1e:
         99:23:ab:cb:27:7a:02:68:5a:14:5c:20:5e:ea:37:a5:4c:f6:
         ab:d4:7a:1d:c6:c0:57:65:4d:bf:99:82:70:b6:bc:80:1b:f0:
         9a:45:08:58:4e:47:85:e7:30:12:1a:db:c4:4f:64:c0:1b:f3:
         94:1e:35:47:16:4e:fb:9d:08:db:6a:92:a4:98:b9:8f:f2:80:
         00:c0:78:92:e3:88:a3:7a:75:ec:34:76:e4:33:48:b1:fa:0e:
         71:7e:73:97:66:a0:8a:c6:95:e9:94:ae:0f:ef:06:bb:1e:1f:
         51:10:bb:0f:51:1c:77:16:25:6d:fd:ec:f4:f9:b7:5f:94:70:
         80:b0:f8:c5:08:f0:1d:df:3a:ac:ee:86:a0:e8:60:10:66:ee:
         63:f2:73:c6:ed:4a:eb:69:60:e4:be:26:4b:bd:f3:ee:1d:87:
         16:65:65:84:14:3e:44:7f:4b:32:d9:f1:67:05:94:2c:ab:dc:
         23:8c:f6:2b:af:07:38:55:3b:d5:67:43:d6:7b:66:64:bb:ff:
         f3:12:72:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:34 2025 by rpki-client