Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File:                     5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier:          vZfE87kEn5L+oW8T7/A/GvX12dpOdKwqL76gLPEJuJk=
Subject key identifier:   65:19:B7:F2:F7:91:84:6A:9D:55:B3:54:48:74:F1:8C:88:4A:02:AB
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer:       /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial:       019873740611DF0A7573B66E429E392A55B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number:          0B69
Signing time:             Mon 04 Aug 2025 05:00:40 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:40 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:40 +0000
Files and hashes:         1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: vRMXoqriQLSS5EY7Sl9Ec1Ub2ydco4BU2a/fABF/aYE=)
                          2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:06:11:df:0a:75:73:b6:6e:42:9e:39:2a:55:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
        Validity
            Not Before: Aug  4 05:00:40 2025 GMT
            Not After : Aug  5 05:00:40 2025 GMT
        Subject: CN=6519b7f2f791846a9d55b3544874f18c884a02ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:14:0a:45:ee:c0:d9:28:f6:36:4e:09:78:
                    07:67:45:80:cf:06:fb:48:ff:6a:30:7d:8d:79:88:
                    3b:cf:3d:2c:75:44:37:41:4b:52:00:fc:73:c3:39:
                    85:1f:9b:8a:3b:c5:bf:b0:08:e5:bd:b2:0a:a0:50:
                    ae:d9:a9:28:97:16:4d:4d:17:d7:0b:bc:0e:5e:18:
                    e4:70:b1:77:2c:36:35:47:90:36:b1:52:79:6f:c4:
                    a3:7f:7e:f6:94:46:43:6e:da:ef:c0:29:b3:62:f9:
                    73:17:ec:9f:92:f3:14:df:97:b0:3f:07:b4:ce:bb:
                    9a:66:ad:91:aa:76:f4:48:5b:33:64:7a:a5:fa:5b:
                    38:0d:a1:2d:af:58:8c:3b:a2:06:7a:24:55:58:f2:
                    28:1b:ab:41:30:0a:a2:a7:8e:c1:de:8d:c8:c8:37:
                    a8:4a:03:07:74:95:64:3c:f4:ce:1d:c9:e9:9a:71:
                    a0:72:61:bd:20:6f:b7:ce:60:17:6d:cf:2a:76:6a:
                    85:b5:5e:b2:df:70:3a:c6:bc:fc:dc:90:97:84:c0:
                    ff:6a:42:8f:6b:2b:c9:83:6e:3f:45:c1:95:47:38:
                    f8:61:92:63:5e:98:1f:49:8a:9d:b1:3c:25:ad:bd:
                    ff:96:26:d9:b1:2f:ef:7c:31:4e:41:c7:e7:74:6c:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:19:B7:F2:F7:91:84:6A:9D:55:B3:54:48:74:F1:8C:88:4A:02:AB
            X509v3 Authority Key Identifier:
                keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a2:fa:c7:2f:72:f5:bd:f5:7c:92:6b:62:5f:e1:4b:76:b6:
         08:df:91:50:78:60:34:78:1b:45:43:79:27:cb:94:be:b2:60:
         6b:10:48:03:6a:27:07:26:38:e7:b7:af:ff:e6:19:86:8c:37:
         2b:6b:2a:e5:f4:1d:85:84:22:ff:ae:36:89:91:6b:c9:06:79:
         a2:b6:76:32:71:58:36:9c:c2:e1:f6:1a:4f:73:da:66:e0:e4:
         02:7b:59:58:18:16:99:fc:36:ff:4c:4b:b6:8d:21:af:c5:37:
         44:85:f6:54:69:77:92:15:a1:ae:7d:4c:ba:de:1e:1a:b9:96:
         8a:9e:f9:59:fe:4d:19:64:e1:eb:e3:70:a4:9c:97:91:f3:ab:
         91:7c:79:ef:0c:da:20:9b:0c:a3:5a:e0:a5:47:e0:95:b4:cc:
         cf:f8:5a:50:66:62:d9:1f:4e:b7:2e:93:68:a3:ee:76:e1:76:
         c4:ce:55:b5:6d:e8:60:d6:03:ec:76:fe:74:ec:b9:ac:3f:4a:
         46:e4:f6:f6:7e:d3:6c:59:44:06:61:94:ea:56:21:92:c2:16:
         e0:18:f3:ad:3c:c9:ba:58:8e:5b:a2:be:13:a9:c9:3d:26:52:
         e9:f9:72:7c:98:f9:4a:06:09:44:56:22:3a:d8:4a:05:74:77:
         d0:0b:5d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:35 2025 by rpki-client