Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
File:                     leBbGUrhvlKWmltBBFV_8ELBYCo.mft (raw, json)
Hash identifier:          5mIdZQwyCoZ82+q34fHg4+cK8Fw19nj5IwItQRbw/ds=
Subject key identifier:   CE:07:16:49:66:FC:9A:A8:F5:8E:13:45:06:E1:B9:F3:5D:F1:6E:01
Authority key identifier: 95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A
Certificate issuer:       /CN=95e05b194ae1be52969a5b4104557ff042c1602a
Certificate serial:       019A1E3ECB0E51C7073BE047B1108DE1D397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
Manifest number:          054B
Signing time:             Sun 26 Oct 2025 02:00:22 +0000
Manifest this update:     Sun 26 Oct 2025 02:00:22 +0000
Manifest next update:     Mon 27 Oct 2025 02:00:22 +0000
Files and hashes:         1: leBbGUrhvlKWmltBBFV_8ELBYCo.crl (hash: eEXa1OUTNG9gUqez3G5XpYujL161sBBjBGwCGvM0KKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:3e:cb:0e:51:c7:07:3b:e0:47:b1:10:8d:e1:d3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e05b194ae1be52969a5b4104557ff042c1602a
        Validity
            Not Before: Oct 26 02:00:22 2025 GMT
            Not After : Oct 27 02:00:22 2025 GMT
        Subject: CN=ce07164966fc9aa8f58e134506e1b9f35df16e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:51:45:e2:6a:8e:fc:71:5e:cb:48:27:19:c7:
                    a6:28:e7:ca:e9:ce:ad:69:48:c5:ab:67:1e:98:32:
                    a1:f4:d6:6d:7d:7b:a1:d8:44:ed:c6:64:f6:26:5c:
                    de:f8:6e:bd:b2:03:43:d3:84:23:63:1d:ca:24:73:
                    5a:84:0a:9f:04:93:55:f4:1e:20:e1:b2:fb:0a:18:
                    8a:78:f3:9c:34:18:a9:34:d5:46:96:ce:32:ed:4c:
                    91:9f:ee:d3:f7:24:90:b9:24:a2:6c:b7:6a:93:23:
                    61:c0:8b:fd:2f:20:37:41:cc:75:61:d2:4d:1a:e9:
                    e0:4f:8d:03:05:65:c2:16:8b:d9:90:09:20:db:c1:
                    7f:03:57:74:32:1b:aa:a5:ab:d6:b6:3b:fc:6a:d0:
                    62:0f:1e:6b:9f:b6:ef:97:1d:27:b5:04:dd:8d:f8:
                    01:9e:be:e1:c4:b7:d0:5c:37:02:16:74:08:25:dc:
                    15:e4:be:b1:0c:13:0d:00:a4:20:e9:0e:0a:a9:03:
                    e9:d6:54:f7:bc:f2:c0:c4:bd:ed:9e:7b:66:6c:9a:
                    4f:42:14:0e:dd:31:57:69:00:f8:70:55:ff:e9:3b:
                    8b:6a:2c:b1:ec:db:19:54:96:4c:e3:f7:84:51:80:
                    9d:cf:83:87:8e:6e:a7:f3:49:db:99:df:c8:d0:c6:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:07:16:49:66:FC:9A:A8:F5:8E:13:45:06:E1:B9:F3:5D:F1:6E:01
            X509v3 Authority Key Identifier:
                keyid:95:E0:5B:19:4A:E1:BE:52:96:9A:5B:41:04:55:7F:F0:42:C1:60:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leBbGUrhvlKWmltBBFV_8ELBYCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8efc0f-b968-46ed-9924-dd185c7355b8/1/leBbGUrhvlKWmltBBFV_8ELBYCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cb:04:f6:c7:84:6c:64:27:8a:77:81:53:25:90:bb:20:76:
         8d:01:ae:6f:1d:57:94:5e:14:ba:5a:d6:6b:b8:57:8e:cc:2a:
         20:81:4e:d6:5f:e9:13:7f:8f:d4:c4:41:2c:6e:23:cb:4f:ee:
         45:61:c0:4b:e7:5d:07:dd:5e:45:eb:9b:49:91:bb:d7:98:9a:
         be:84:0f:d2:fe:f0:b1:85:41:5a:73:99:14:bb:6a:9f:6f:08:
         80:2d:34:0f:fa:14:fa:e3:bc:fd:cf:55:9e:9b:fd:d6:8b:a8:
         ab:0c:82:9f:03:47:18:14:85:b9:18:a2:d4:06:3f:a0:63:9e:
         b4:2f:3a:ec:bb:ba:35:d4:6a:97:83:5f:56:5f:e1:27:62:ab:
         d3:64:75:0e:57:0c:c5:64:58:3a:8b:db:7f:4a:dc:47:ec:fc:
         61:f1:f8:69:9c:df:51:4f:24:ac:72:4b:1e:df:c5:a9:03:ad:
         f6:d9:74:34:39:0e:6d:d4:61:0b:4c:78:3b:aa:d3:c0:de:d3:
         c4:27:74:19:64:01:2b:2a:20:31:45:ac:88:80:11:1a:b0:28:
         f4:88:c1:e1:41:04:37:4c:d7:d2:d9:c4:7f:3d:89:14:99:78:
         8f:9c:93:f7:af:3a:d9:a6:a5:6c:61:99:48:ba:24:32:e4:4c:
         b4:1d:b1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:51:58 2025 by rpki-client