Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
File:                     R-ph18wsJ4p8S8-8ITezlKImVK0.mft (raw, json)
Hash identifier:          opE01FK6qvOhRbvg8e2p0qsq/B4Q1D/2efVGMpXx62M=
Subject key identifier:   4E:6D:93:8B:B4:C6:02:07:CB:47:BE:6C:1A:D8:73:1B:A4:B8:9F:77
Authority key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Certificate issuer:       /CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Certificate serial:       019A4DE21ED75D55F5FB8F5205157E5CF714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
Manifest number:          05D8
Signing time:             Tue 04 Nov 2025 08:00:55 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:55 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:55 +0000
Files and hashes:         1: 2E-i-XVwWZd-hZzL5RDcxHIUK_w.roa (hash: kmE7612P7PDRz8jZU91zzdg87lpJGT1okogHYfmxmWk=)
                          2: R-ph18wsJ4p8S8-8ITezlKImVK0.crl (hash: 4DE77SpPeX/fSg3kNuN2hhC/Gu53VeMfTgdGdDuvbe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:1e:d7:5d:55:f5:fb:8f:52:05:15:7e:5c:f7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
        Validity
            Not Before: Nov  4 08:00:55 2025 GMT
            Not After : Nov  5 08:00:55 2025 GMT
        Subject: CN=4e6d938bb4c60207cb47be6c1ad8731ba4b89f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:d0:4a:82:dc:c0:1d:3b:27:81:5c:0d:bf:
                    66:a6:33:a5:3e:09:e9:0d:e6:a5:1e:ff:f2:7a:74:
                    a6:60:9a:1d:ca:20:6d:22:cc:4c:84:26:61:a2:7a:
                    5b:fb:16:67:f0:f3:76:c9:8f:9f:b3:80:10:e9:c8:
                    49:d5:1e:c7:91:ab:a9:05:e6:14:f3:aa:8b:07:c4:
                    73:05:19:88:91:b8:1e:b1:6a:8b:7d:45:fa:5b:fd:
                    db:65:b1:c5:cb:e2:cc:01:dc:72:9d:28:70:ef:7b:
                    21:32:12:aa:4c:aa:3d:35:ea:16:92:62:ea:1f:c0:
                    c1:2b:17:fe:94:46:17:5b:14:21:e2:18:d3:f4:57:
                    a5:c7:b4:46:d2:2b:b5:6b:1c:11:0e:93:11:ac:e8:
                    05:d7:1b:03:ee:9d:2b:49:8c:de:c2:30:c8:2a:90:
                    17:67:eb:a3:fb:45:14:57:36:5a:7c:55:f8:70:2f:
                    7e:b2:0e:75:d5:08:d1:08:bf:60:d4:e8:79:44:3e:
                    df:be:45:2e:bf:4d:28:b6:87:31:e8:fc:c7:3c:67:
                    9a:e8:92:b1:27:b8:bb:0d:2d:fd:b3:03:28:cc:70:
                    75:02:01:61:88:0a:7f:8e:66:0a:95:56:62:38:1c:
                    a7:95:9a:ce:bf:a7:d3:3d:e8:4a:03:ff:4b:0d:65:
                    26:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6D:93:8B:B4:C6:02:07:CB:47:BE:6C:1A:D8:73:1B:A4:B8:9F:77
            X509v3 Authority Key Identifier:
                keyid:47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a7:d2:fd:07:4f:0e:88:bc:ba:d5:85:fd:09:15:fb:97:fc:
         b4:76:20:82:62:3f:bc:32:c3:bf:f4:4f:db:7c:12:1a:d3:a0:
         dc:3a:1b:8f:dd:ef:30:f4:0c:24:21:0b:7c:88:66:d0:5d:bb:
         56:f0:ab:da:5d:56:12:66:cf:a3:d2:4a:9f:18:f4:a5:2e:40:
         5e:12:17:0e:4c:d0:60:e2:24:0a:4f:01:b1:7f:b5:82:ad:cc:
         3b:08:50:5c:20:de:c8:95:d2:f0:88:ea:0f:30:63:20:b6:c6:
         29:2a:c7:41:fe:4a:23:cd:97:72:fb:04:dd:7b:5d:ca:26:2a:
         0b:45:82:4e:53:23:1b:fa:53:9a:a5:bd:00:1a:a3:94:9f:e5:
         d4:30:24:ca:50:50:91:cf:07:f0:58:2a:76:1b:b9:41:77:18:
         ff:af:42:81:53:4b:96:bc:99:e4:f6:54:c4:a3:3e:d0:a8:4f:
         07:e1:60:8d:eb:e3:1e:15:a0:f3:84:ec:2c:b8:20:61:95:fc:
         70:40:e7:f5:d3:4d:5a:60:06:b0:d7:d9:16:e5:d7:e2:15:3e:
         68:73:03:fd:d7:6b:18:51:29:ce:24:3d:0c:78:bd:7b:51:c2:
         12:7a:cb:b0:25:b9:3b:1b:8e:bf:f9:24:3d:87:d6:78:12:c9:
         91:49:c0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:25 2025 by rpki-client