Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File:                     E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier:          RB8vw++g2wbHax9CY1XFb9ROq3qg94FwGsc2tOH+Rt4=
Subject key identifier:   15:59:CA:6D:5C:4B:56:F3:7B:D6:8E:C0:47:07:75:BE:7A:0D:F8:8D
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer:       /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial:       01995FB3F46E035DBBACFFD7DF6841C9D2A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number:          1690
Signing time:             Fri 19 Sep 2025 02:00:52 +0000
Manifest this update:     Fri 19 Sep 2025 02:00:52 +0000
Manifest next update:     Sat 20 Sep 2025 02:00:52 +0000
Files and hashes:         1: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: QhPcqI1mc/IN5dHYZrxZ/qeeG9o0HbLtrxIkmtT9UQU=)
                          2: QCvbSuskCQwLxFQrUoOouHi3diY.roa (hash: sXGvHwha1X8v4xaWgUMHB+2ZrDbhHWTJfZknYl2gSe0=)
                          3: dWbs3GSCk40VoHUjYwOcmy7b-Zk.roa (hash: B1PLAXt5mt+DEIRs6h0vcjXyP629Yb4hYyTjCDjQz0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5f:b3:f4:6e:03:5d:bb:ac:ff:d7:df:68:41:c9:d2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
        Validity
            Not Before: Sep 19 02:00:52 2025 GMT
            Not After : Sep 20 02:00:52 2025 GMT
        Subject: CN=1559ca6d5c4b56f37bd68ec0470775be7a0df88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:a9:3b:c9:e0:e5:d1:a2:bf:30:f9:f9:9c:
                    ce:61:c4:d2:70:d9:65:1f:20:18:d4:6c:b9:b9:1f:
                    0a:af:36:4d:3e:51:2b:4b:ee:8f:6d:bd:27:63:55:
                    22:2e:97:ea:bd:ca:60:db:04:df:5e:79:70:27:35:
                    5e:88:2d:e8:92:05:c8:59:7d:b8:89:6f:51:05:ac:
                    3b:1d:b0:22:9d:26:40:18:33:3c:3c:5e:22:22:70:
                    0b:2b:45:2b:53:16:aa:cd:79:1d:ae:d5:8a:4c:11:
                    74:9f:5c:09:cf:d4:45:75:36:19:fd:e7:32:a6:f8:
                    bb:49:12:ed:be:53:8e:ca:32:c4:9a:2f:4d:43:40:
                    98:5e:25:d6:92:6d:3c:cf:25:5c:b2:e7:eb:15:c3:
                    e7:44:49:fc:92:b5:61:68:c1:fa:18:94:66:8a:e4:
                    3a:eb:1d:89:fe:e9:9e:3a:f7:eb:fe:a0:8a:24:ad:
                    19:6b:10:c8:a0:82:a7:d1:d0:b2:fe:3b:12:e5:88:
                    f0:04:6b:cb:68:07:0d:74:dc:14:bc:73:54:2d:64:
                    df:e1:35:78:91:dd:34:a8:3f:5c:a6:de:01:c5:51:
                    97:60:9d:c4:75:9d:35:be:8b:61:64:24:7a:f6:14:
                    8e:53:66:1d:cd:83:33:26:29:04:11:92:e7:10:c2:
                    e8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:59:CA:6D:5C:4B:56:F3:7B:D6:8E:C0:47:07:75:BE:7A:0D:F8:8D
            X509v3 Authority Key Identifier:
                keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b9:6d:13:4b:f9:aa:1c:c6:a9:3b:9d:4e:43:85:db:6d:f0:
         e6:9a:6f:09:47:de:81:cf:f1:66:ef:a3:c9:2c:d1:c8:e7:0d:
         8d:45:69:2b:79:83:e9:14:78:09:e9:48:65:9e:16:8b:6f:f5:
         a0:7e:ad:21:74:de:96:d4:c1:78:46:8c:49:3f:15:6e:ac:4a:
         7f:25:37:23:bd:43:a1:21:5d:bd:0f:49:d6:c1:ed:90:bd:1e:
         4a:cf:0b:eb:26:b4:90:eb:18:ce:6b:c4:97:e0:87:4c:ca:1c:
         bc:0e:12:9b:27:3b:3d:00:9e:01:14:0b:c0:da:7c:d2:01:06:
         1b:b1:6d:d0:43:3d:78:1c:13:73:22:ca:15:b9:a4:c3:68:87:
         af:ae:1d:ca:c7:27:75:ab:6d:f8:9d:19:60:71:d7:de:2f:11:
         59:85:90:ae:33:87:e2:a4:6f:60:5e:0c:e0:99:ac:a7:9d:55:
         cd:0d:d7:41:a8:51:72:10:33:80:95:7a:ae:29:17:67:66:1e:
         fe:16:14:79:4e:72:97:eb:94:5f:39:73:c0:6b:21:5f:af:36:
         9c:51:d4:0b:71:02:70:fd:5c:82:28:4e:43:c9:13:e8:fd:c3:
         bd:94:50:7c:5c:17:cf:3c:91:95:30:94:ba:23:06:5b:4e:ca:
         e1:2b:c7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:45:57 2025 by rpki-client