Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
File:                     Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft (raw, json)
Hash identifier:          4iXIeiEyX2URMA5XsRG4jh5OpxeQIYeyYBx1dRVGvM8=
Subject key identifier:   FF:28:E5:13:E6:19:F5:CE:B2:07:57:9F:D3:84:F6:DB:CC:DE:46:1D
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Certificate issuer:       /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial:       019872CFF79D8034D084D081A4DF359866E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
Manifest number:          06C5
Signing time:             Mon 04 Aug 2025 02:01:28 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:28 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:28 +0000
Files and hashes:         1: Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl (hash: q1Vx+ScwYX/wky9RhLa0yLRZDDCqWWj5q7sBiFBA1tE=)
                          2: UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (hash: DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:f7:9d:80:34:d0:84:d0:81:a4:df:35:98:66:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
        Validity
            Not Before: Aug  4 02:01:28 2025 GMT
            Not After : Aug  5 02:01:28 2025 GMT
        Subject: CN=ff28e513e619f5ceb207579fd384f6dbccde461d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f4:92:64:d4:4c:1d:7a:9b:8e:29:47:41:58:
                    ef:2b:95:6a:2f:f4:1c:53:ef:15:0e:8b:c5:45:10:
                    0c:ed:da:b1:98:35:40:3c:45:6f:79:02:ae:4a:7f:
                    ed:78:c6:93:77:07:62:2b:dc:99:aa:00:6a:bd:61:
                    53:be:6c:50:98:34:e5:a9:b2:ad:6d:78:4f:ee:c3:
                    80:2b:d8:34:b4:2e:b6:e6:21:20:fc:7f:ca:89:3d:
                    a9:ce:0d:a7:6c:7d:93:79:f8:dd:47:3c:05:8d:67:
                    47:b5:4c:f9:4c:a9:63:6e:0b:8e:cd:af:60:ad:52:
                    9d:b4:2c:35:a1:6e:b8:b6:e2:ff:0f:04:4d:f9:8c:
                    0e:ff:93:ba:a4:c0:be:55:e2:fe:4a:85:af:53:b3:
                    8f:f0:88:8e:51:05:07:04:a8:02:50:90:c9:d8:56:
                    f1:1e:8d:9b:3f:5d:bd:3c:e6:b9:4d:8f:e3:d5:3f:
                    5d:90:f3:73:ca:09:77:15:e7:ed:c2:5b:ad:91:19:
                    72:7b:d8:02:ca:e7:f7:87:c9:e8:e3:0a:57:3f:0c:
                    d5:79:41:9e:3f:58:6d:49:49:38:5d:d5:f4:c0:e8:
                    73:24:16:84:b4:8b:71:ed:03:6c:d3:8a:05:27:10:
                    ad:2f:ae:98:8b:37:86:58:c9:cc:6a:b7:7b:61:46:
                    4c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:28:E5:13:E6:19:F5:CE:B2:07:57:9F:D3:84:F6:DB:CC:DE:46:1D
            X509v3 Authority Key Identifier:
                keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0d:b8:8d:a8:15:06:3f:47:6a:98:f0:4f:bc:3b:da:d0:17:
         85:00:03:97:80:97:ce:2d:0a:6e:df:27:ce:99:27:29:a7:bd:
         16:f2:73:5c:9a:ff:bd:56:3e:4d:b9:ca:fd:ed:09:87:5b:fd:
         99:52:0c:61:ec:19:5e:60:3a:8f:63:e2:0c:91:42:d6:04:e3:
         9c:73:53:7d:2c:d4:6d:38:a3:f8:0b:be:5b:45:31:0f:cd:a8:
         3b:18:10:f2:f4:04:62:1b:78:ea:66:73:71:11:ea:bc:bd:12:
         d5:52:2a:81:dd:a8:f7:09:45:d1:cb:e5:e3:c7:2b:56:9a:08:
         54:9c:1f:4b:9e:96:ee:e0:9f:e8:26:ec:88:d1:d5:d8:b3:e4:
         f3:d9:98:5d:0c:04:ff:63:72:6f:a9:e0:9e:0f:18:1b:75:05:
         47:ac:f9:6b:a3:67:c0:ce:b8:c6:82:fa:5e:7c:2d:ff:28:22:
         d3:33:ed:65:33:e0:a4:41:29:9f:fe:45:97:4f:41:d6:2e:3c:
         9e:be:d6:32:c8:3b:c0:72:c8:42:02:19:2e:3b:19:52:ba:7b:
         59:56:a4:95:b0:60:39:a1:40:0c:cf:15:3c:f2:b9:e3:0c:c9:
         0e:1c:6e:98:11:0c:68:72:9d:f9:1b:a9:09:a6:6b:12:af:e8:
         3c:2a:4c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:24 2025 by rpki-client