Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
File:                     5qirioB4uztX5W_3wL1Npj7oLIs.mft (raw, json)
Hash identifier:          EH1gcHWUzRRJPKL52FzSOKgWPdnHaOXhvoPku5Sy3VA=
Subject key identifier:   4F:62:0D:33:B1:DA:03:A1:6B:55:9A:84:95:F4:30:49:00:13:77:BE
Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
Certificate issuer:       /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Certificate serial:       019A7149D17468B2DA1F5D0B52418D1CC4CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
Manifest number:          122B
Signing time:             Tue 11 Nov 2025 05:00:54 +0000
Manifest this update:     Tue 11 Nov 2025 05:00:54 +0000
Manifest next update:     Wed 12 Nov 2025 05:00:54 +0000
Files and hashes:         1: 5qirioB4uztX5W_3wL1Npj7oLIs.crl (hash: QTUFNsw5fqbGzRgi1mm3bhcL6ro/psatACxD1atjTAo=)
                          2: j26ZaXDJ5u5_sXZ9DSYkPEGDdBg.roa (hash: N0zCU+Z5cgt4Feyzz51pQWAD1vkYoFo87UGHCmMmAQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:49:d1:74:68:b2:da:1f:5d:0b:52:41:8d:1c:c4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
        Validity
            Not Before: Nov 11 05:00:54 2025 GMT
            Not After : Nov 12 05:00:54 2025 GMT
        Subject: CN=4f620d33b1da03a16b559a8495f43049001377be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:8b:3b:f7:20:11:71:cd:ad:63:9f:2a:e4:
                    65:c4:d2:09:b9:02:5a:13:e6:99:c6:f1:ba:ad:cf:
                    07:0d:8c:b1:84:d1:24:9a:ac:c8:93:8b:d8:29:76:
                    37:db:60:df:66:f9:60:61:cb:12:1e:f8:78:74:7b:
                    8b:72:96:19:25:22:85:79:30:87:67:a5:06:08:0d:
                    17:6e:05:f5:cf:11:49:9f:4f:0e:cd:04:28:18:f8:
                    fc:ef:04:d0:e8:e9:46:ac:ef:57:ba:9f:9d:73:08:
                    9d:ab:d2:ef:21:47:1a:07:fd:ca:75:98:a3:f6:65:
                    62:a5:1d:ca:ef:4a:6d:59:82:bc:fd:55:58:14:9c:
                    05:3d:2e:d0:fb:87:52:ff:0b:ea:07:d4:10:3b:8d:
                    22:8a:1d:bf:32:b0:d5:e9:db:d8:7d:d6:f3:27:70:
                    a1:e7:02:27:bb:1a:b1:31:c1:d3:68:93:54:e8:9a:
                    13:96:6f:88:2c:bf:a0:55:a0:d4:46:d3:bd:56:f3:
                    c1:fa:6f:a1:74:9f:74:c9:2f:79:6b:4f:7e:fb:d4:
                    22:8a:e6:15:31:f2:dd:53:05:30:90:ae:2f:6d:3b:
                    90:18:10:b9:82:69:57:1f:6f:6e:35:f7:0b:4e:43:
                    a9:6e:6e:cd:ab:d1:7d:b8:31:5a:c8:87:1c:02:0e:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:62:0D:33:B1:DA:03:A1:6B:55:9A:84:95:F4:30:49:00:13:77:BE
            X509v3 Authority Key Identifier:
                keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5c:c8:12:1e:4a:e3:eb:f8:c2:ab:b1:85:16:23:b5:7b:56:
         8b:44:fa:24:b7:bd:64:45:24:98:32:ab:65:68:bf:19:43:72:
         16:ec:46:bb:eb:70:28:3e:80:a5:88:7c:0d:99:2d:ea:e7:d2:
         b4:07:f0:35:b1:37:e3:8c:56:95:d1:6b:df:4b:75:53:bc:33:
         50:46:23:d5:39:09:31:3c:be:af:df:eb:0d:a2:f6:ee:39:65:
         37:16:bd:4f:e6:f3:5e:ac:c7:8a:2a:6e:d8:8b:30:6b:14:78:
         81:38:65:0e:20:7f:22:28:0b:63:8d:c6:14:c6:8a:9f:ec:7f:
         2b:b2:21:08:f7:a8:f8:aa:ba:40:55:85:51:18:ee:0d:5c:a0:
         e5:40:ca:97:d9:49:d0:97:3e:e8:1f:c2:8a:64:0e:4b:49:99:
         4e:6c:b2:be:64:99:10:4c:3d:36:7a:7f:91:5e:6a:2c:99:5e:
         b7:26:43:e7:ff:67:a4:d6:13:33:48:d3:b0:cb:f7:c0:9b:22:
         83:ce:84:ba:af:26:93:02:9b:70:49:ba:de:46:b3:7c:f4:60:
         01:c3:17:c4:3c:77:0b:a8:4f:21:99:45:81:b8:e2:19:e9:32:
         44:31:ed:c7:66:49:45:d0:16:52:af:ac:71:fe:ac:7f:1c:77:
         f4:6d:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:15 2025 by rpki-client