Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
File:                     FivG9rrBQqA6uxp62RaQaD8DpNw.mft (raw, json)
Hash identifier:          O7NOo56zz9dpPSMFgQ6IyLlzm3NiDZJY80IKewAE80M=
Subject key identifier:   ED:0E:AD:96:F3:87:8B:A6:13:77:32:32:08:05:AD:9C:8B:4E:F8:2E
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Certificate issuer:       /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial:       019A71B8023E78900E935F2C6C313F205D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
Manifest number:          114F
Signing time:             Tue 11 Nov 2025 07:01:15 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:15 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:15 +0000
Files and hashes:         1: FivG9rrBQqA6uxp62RaQaD8DpNw.crl (hash: sBAeGN6eDIBVykrCJgEw10BUpXClxEtlKYulmfVJ9H0=)
                          2: ZuMY1XotbixRHp-2hF8zeuwVNac.roa (hash: cWcV3AJ97upwcCtlMiiXPFQ1J792OYZqXfGtYafZgg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:02:3e:78:90:0e:93:5f:2c:6c:31:3f:20:5d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
        Validity
            Not Before: Nov 11 07:01:15 2025 GMT
            Not After : Nov 12 07:01:15 2025 GMT
        Subject: CN=ed0ead96f3878ba6137732320805ad9c8b4ef82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:40:e4:e3:06:c4:e4:01:67:54:6a:bc:b4:
                    de:54:b9:26:af:f5:bf:76:a8:0c:b2:87:06:02:bf:
                    05:f8:ec:a6:f5:ab:08:27:fe:73:61:62:e9:ad:49:
                    38:76:41:b0:1b:9b:2a:65:25:80:ac:fd:3b:a7:8a:
                    2f:b1:91:f4:dc:17:73:3f:d6:3f:fe:b0:7f:b8:2b:
                    59:93:7a:af:a3:93:7c:ba:a1:f4:43:c1:18:e8:5d:
                    f5:12:bd:44:a0:d6:4b:4f:09:4b:1b:22:ec:94:c1:
                    b0:1b:ab:9f:5d:c3:28:ea:db:bf:6b:e8:af:c1:b9:
                    44:fe:f6:7b:b8:b4:14:c3:b6:a5:bf:01:0e:4c:6f:
                    b0:54:88:70:95:22:a3:da:53:d9:62:99:1c:58:95:
                    1f:49:fc:1f:24:a1:83:78:c4:87:c7:95:90:43:0d:
                    4c:16:4a:eb:3c:07:e5:6b:d7:cc:d7:70:ec:48:87:
                    34:64:1f:45:fc:8e:32:dc:38:ef:17:a8:de:1a:e2:
                    0a:5f:06:a9:44:64:70:6e:86:26:9c:6e:b9:44:96:
                    dc:2f:b6:33:91:fe:07:ae:19:d1:d9:7b:7b:9c:0b:
                    45:ce:92:93:e7:3f:6d:12:ef:4b:5f:59:87:ef:c1:
                    ca:12:ad:8f:3b:48:d7:b0:48:bc:a0:e5:0a:b1:c4:
                    e5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0E:AD:96:F3:87:8B:A6:13:77:32:32:08:05:AD:9C:8B:4E:F8:2E
            X509v3 Authority Key Identifier:
                keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:1e:fb:7c:31:2b:df:1a:b9:d4:b7:fb:a9:7a:26:16:58:a6:
         20:61:8f:cb:6b:7b:40:58:bd:32:db:bc:86:b1:e5:23:c7:eb:
         a1:66:82:68:da:71:64:83:02:57:9e:83:2a:fa:33:3a:ef:3f:
         ce:97:92:96:81:40:66:a9:ff:3f:62:15:41:e8:ae:c7:d4:1d:
         b3:16:c8:57:8e:1b:82:7f:3e:67:16:45:2a:7c:d4:c4:c6:ef:
         e8:d0:12:b9:74:52:be:03:1d:70:55:64:ef:e6:70:51:a5:0e:
         9c:7e:2f:99:11:fc:27:e5:d3:94:90:e4:c4:ec:be:7d:ae:6d:
         ed:83:87:3a:4e:d8:43:e3:a2:03:18:74:fb:e4:ca:ec:3d:23:
         f6:a1:9a:8f:ea:bf:53:34:85:5e:5e:bc:38:2b:35:58:8d:ba:
         7b:0d:7e:d9:50:c8:d9:46:45:42:e2:cf:ba:95:d6:9b:58:77:
         8d:ae:0f:52:ba:07:d0:eb:d6:58:fd:e2:bd:e1:6e:76:48:34:
         04:8d:31:57:75:b4:dd:91:5d:7e:9b:45:1f:a0:38:b4:e7:22:
         e1:3c:47:30:53:f8:f8:67:ac:7a:80:c8:4e:7f:c4:2b:7e:a8:
         3f:81:f2:1e:c4:10:a0:7b:f5:e1:6a:d3:17:f8:75:5a:bf:cc:
         54:32:57:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:18 2025 by rpki-client