Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File:                     v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier:          EmVqj/NfwF6Lnj8+s8qfnuvyAgXxPyc97084cGW/kBY=
Subject key identifier:   ED:98:BA:C2:5E:4C:81:F7:41:70:B1:05:CB:DB:CE:1D:8F:15:C8:B4
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer:       /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial:       019A72258E9C2A121FF20858581E4129454B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number:          07B6
Signing time:             Tue 11 Nov 2025 09:00:55 +0000
Manifest this update:     Tue 11 Nov 2025 09:00:55 +0000
Manifest next update:     Wed 12 Nov 2025 09:00:55 +0000
Files and hashes:         1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: Xircrz+Pspjg9m6BtZMNDLM6i2rx/0YLDFxao0uqO5Q=)
                          2: ybOueXNsSJri02mQKQibbKcroL4.roa (hash: rsUCG/CXGaoh8At3iU9kgYgz39f7x4KapImvavgysk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:25:8e:9c:2a:12:1f:f2:08:58:58:1e:41:29:45:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
        Validity
            Not Before: Nov 11 09:00:55 2025 GMT
            Not After : Nov 12 09:00:55 2025 GMT
        Subject: CN=ed98bac25e4c81f74170b105cbdbce1d8f15c8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:f0:61:04:d0:40:c0:3c:e4:9c:65:5f:e2:
                    f2:dd:82:a0:8e:88:ba:73:e7:f2:d1:ff:44:88:7c:
                    0e:6a:3e:34:6d:61:b0:31:18:30:5f:5d:23:6d:47:
                    ec:34:53:9a:8b:13:df:64:ab:e5:5a:90:c3:ea:52:
                    56:70:ab:51:b3:6d:e2:b4:bd:0f:5d:72:ae:07:cb:
                    93:0f:5f:93:fe:14:43:aa:79:a7:62:ed:85:37:96:
                    df:eb:0d:a6:63:cb:f0:69:d7:bf:54:f1:49:54:42:
                    d4:66:a1:31:b6:36:21:1c:af:de:84:8d:16:39:f3:
                    43:cf:c0:fd:b1:6e:b2:9b:94:61:df:e6:37:ef:9e:
                    12:1e:4f:e9:0b:25:7b:45:f2:00:8b:9f:5c:fd:a5:
                    f1:72:1b:28:f2:c6:c2:e9:a1:d1:26:74:f5:a9:64:
                    a9:ba:54:1a:f2:22:dc:48:8c:e0:40:a3:2b:b5:25:
                    8d:bd:9c:8c:a0:2f:14:b9:50:a7:94:d6:81:59:22:
                    5d:ba:74:5b:f1:66:97:3b:86:91:8d:71:c4:89:46:
                    cc:fa:60:15:02:20:11:1a:04:e2:e0:0b:52:e4:04:
                    a7:63:97:f0:dd:0b:1d:03:28:c3:56:d4:a2:4f:e7:
                    3e:73:83:c1:26:7d:eb:50:76:c8:81:40:a1:43:94:
                    5e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:98:BA:C2:5E:4C:81:F7:41:70:B1:05:CB:DB:CE:1D:8F:15:C8:B4
            X509v3 Authority Key Identifier:
                keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:dd:d1:65:41:75:c6:41:35:9d:bf:52:ec:f0:6b:e8:75:31:
         da:65:1c:d4:ef:e9:d8:0d:43:06:41:cf:92:69:1a:07:83:88:
         33:59:da:e0:6d:10:31:a7:91:6f:aa:c8:20:48:7c:2e:fe:3e:
         6d:b1:07:00:6e:48:af:48:22:fc:9c:32:77:29:ac:50:1b:11:
         79:c8:a2:ad:c5:ba:ca:b6:b6:72:99:68:03:27:be:6d:20:8a:
         dc:9d:47:4b:a9:37:72:0c:54:ff:f2:26:ed:a2:cc:07:1b:34:
         3e:e1:e1:cb:56:96:07:52:da:b4:b9:7f:39:af:96:8b:3d:ce:
         5f:91:20:f9:8d:5e:5f:71:1c:2e:78:af:49:65:ab:ce:b4:63:
         0e:bb:37:f6:b5:7a:8e:84:07:6a:73:e1:a0:4e:83:83:2b:21:
         7d:6a:84:fd:55:6e:28:6d:70:f7:94:39:d3:e8:7a:21:ee:17:
         d0:d3:fa:7f:36:38:cc:90:1d:7e:48:97:23:b9:0c:0c:f4:6e:
         ed:f4:ee:61:42:ea:c2:f6:8a:ab:41:e9:b0:51:86:7f:7d:86:
         14:fb:48:b6:61:35:14:11:fe:5c:d0:7b:73:11:24:8e:bd:28:
         d9:35:f9:e2:a2:c3:f2:da:ac:29:04:7a:34:87:58:08:af:57:
         fe:bb:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:14 2025 by rpki-client