Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
File:                     5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft (raw, json)
Hash identifier:          /MKvqcvxl8FwMSf8MZmGSrFAguXD48PFlk+DtQmWOW4=
Subject key identifier:   A3:15:52:11:73:87:4A:6E:74:19:A2:09:8E:5A:0A:CB:8F:2B:CC:83
Authority key identifier: E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75
Certificate issuer:       /CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
Certificate serial:       019A71B85E53632560AC5847595C93B18ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
Manifest number:          0723
Signing time:             Tue 11 Nov 2025 07:01:39 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:39 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:39 +0000
Files and hashes:         1: 5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl (hash: VqgwApacwIGgPoyGgivskm2vsTGb8UiCnbW11uo8TEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:5e:53:63:25:60:ac:58:47:59:5c:93:b1:8a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
        Validity
            Not Before: Nov 11 07:01:39 2025 GMT
            Not After : Nov 12 07:01:39 2025 GMT
        Subject: CN=a315521173874a6e7419a2098e5a0acb8f2bcc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:1f:58:50:74:8b:ed:0d:a2:61:cd:25:87:
                    66:69:da:83:ed:d5:85:af:25:b9:06:8a:14:44:9c:
                    22:21:9d:e8:52:60:7a:54:b3:b8:f1:a1:5b:d2:af:
                    c5:33:41:e4:b3:74:7c:1a:38:b2:b7:13:f0:30:d6:
                    9d:2a:c9:4a:c9:e6:ae:70:ae:f2:f8:a8:7a:b4:ed:
                    96:66:5f:e2:c0:df:01:fa:b5:ab:db:2d:95:32:25:
                    51:48:13:9a:bc:81:b6:ef:13:2a:7f:e6:b0:77:aa:
                    fd:71:68:43:8f:3b:c4:be:4d:ab:e0:1e:22:40:7a:
                    ad:e7:55:af:87:72:f7:fc:e4:d4:ca:00:30:32:82:
                    94:d0:b7:d2:d6:eb:f1:21:be:75:af:47:09:25:56:
                    1c:f6:a4:86:14:43:ea:e9:98:a4:b8:fa:8c:9e:26:
                    94:c9:72:62:85:45:91:fb:b8:a0:d1:27:9b:a1:db:
                    7f:af:af:3c:99:98:79:b5:2f:9b:ae:07:5c:b8:23:
                    98:b5:c3:a6:1e:f5:67:1f:d5:df:20:11:bd:d9:db:
                    0a:df:2e:46:d4:cf:45:36:df:c4:14:1a:90:d3:86:
                    4e:84:a9:ea:b8:25:c9:78:62:6e:15:79:45:00:2f:
                    ca:77:07:64:df:a3:9e:54:df:76:5f:f1:f5:56:3d:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:15:52:11:73:87:4A:6E:74:19:A2:09:8E:5A:0A:CB:8F:2B:CC:83
            X509v3 Authority Key Identifier:
                keyid:E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:25:bd:3f:c5:b0:cc:55:29:24:b1:72:5a:29:2b:bb:90:3f:
         78:c2:e7:41:f6:0c:b8:f4:cc:cf:49:5d:79:0d:82:88:7e:d7:
         b4:ae:ca:7f:3d:62:8a:72:ab:75:83:94:79:09:67:87:4f:26:
         f0:a6:58:b5:8c:9c:64:ce:25:a7:68:15:5b:20:8b:f2:6d:fa:
         e7:4d:5c:4f:77:24:63:22:03:68:27:f2:ec:ee:e2:00:22:6d:
         db:67:00:a5:f3:2a:26:6e:e8:47:c7:6b:68:1b:04:4b:85:ec:
         b9:87:98:2c:62:4e:b4:45:56:c3:98:b2:a4:36:7b:b7:98:10:
         a2:aa:e7:c1:7a:e1:80:3b:fa:90:9c:00:76:33:be:cc:0a:ca:
         d9:b7:71:f2:b9:3a:57:ad:10:8a:8d:99:d7:61:f1:77:d5:e4:
         b8:5c:0e:e8:aa:6b:a4:13:95:53:04:b2:3f:ea:bd:22:48:16:
         eb:ba:63:b0:06:05:76:db:27:f2:a4:c4:03:b7:33:db:2e:79:
         92:f2:a1:18:3c:ee:ab:0e:fa:23:c8:c1:23:e7:47:af:ec:dc:
         1f:5f:f6:67:26:2a:27:4c:db:0e:0e:33:93:32:28:1f:c6:f9:
         3e:d9:c1:94:bb:58:0f:98:10:22:fa:c8:92:d3:b8:6e:57:66:
         a7:b3:31:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:58 2025 by rpki-client