Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
File:                     5ARKnRChnmsaztrJ_3eNT0CQaMs.mft (raw, json)
Hash identifier:          mLkO2UwZ2gv89RenW1PYZpi5VCM4LxAR44MuZFQWxh4=
Subject key identifier:   F9:BE:C3:3F:22:C8:95:42:32:43:15:09:C8:19:40:8B:2C:5D:09:0D
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Certificate issuer:       /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial:       0197B632E2393D679E1DB7021F3C08ACA824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
Manifest number:          0B07
Signing time:             Sat 28 Jun 2025 11:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:17 +0000
Files and hashes:         1: 5ARKnRChnmsaztrJ_3eNT0CQaMs.crl (hash: RQCdh1/GoBEMwGOf/+6YeU8gkt3n1uZuq8o7Z31j+hY=)
                          2: ZEltVn27Wr_tDWWUDsnoIPSexys.roa (hash: nTpT1tYnBssg4bHieTQOF2MWxJ4AkBKr1Y7xxrvK7kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:e2:39:3d:67:9e:1d:b7:02:1f:3c:08:ac:a8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
        Validity
            Not Before: Jun 28 11:01:17 2025 GMT
            Not After : Jun 29 11:01:17 2025 GMT
        Subject: CN=f9bec33f22c8954232431509c819408b2c5d090d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:ab:51:89:f2:0f:de:b6:77:03:09:b2:2c:
                    ad:fe:21:13:ba:8c:9f:ad:38:24:76:0c:f1:c2:01:
                    5b:d1:8a:7a:de:ec:26:e3:57:95:50:23:b7:f8:eb:
                    05:ec:5b:6e:db:85:f1:65:99:3c:ba:36:f3:e2:95:
                    c8:3c:58:48:ae:87:cb:2d:c6:88:5c:81:ef:60:61:
                    70:20:e2:5c:0c:ae:f7:8e:90:cf:c7:7d:bc:8b:91:
                    db:2b:cd:b6:3c:34:52:3a:3b:7f:dc:c0:d3:bd:ed:
                    0a:49:37:45:9e:91:22:ec:3a:36:50:e8:22:1a:2f:
                    7c:ce:0a:72:ec:3d:0e:f3:3d:c3:96:10:59:7a:13:
                    b1:88:52:87:c6:56:88:bc:64:b4:d4:ac:61:ab:7d:
                    22:0b:5e:e5:9f:d1:aa:dd:d4:9f:58:b0:da:bb:45:
                    e6:ee:19:16:a3:7a:ca:d9:c1:e0:13:75:a7:0d:85:
                    2e:83:cb:ce:79:01:74:f7:00:90:43:37:61:9d:16:
                    82:ec:2e:c3:4e:6e:7b:7d:d0:cf:41:4f:3f:9f:30:
                    1a:6b:8a:ae:97:db:83:c3:76:63:b6:71:cc:75:fe:
                    b3:b9:96:b2:1e:e5:87:1b:80:73:b4:81:4a:27:43:
                    05:da:58:6e:1f:74:1b:35:36:f9:e1:25:6e:db:36:
                    55:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BE:C3:3F:22:C8:95:42:32:43:15:09:C8:19:40:8B:2C:5D:09:0D
            X509v3 Authority Key Identifier:
                keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:79:12:d3:04:a3:6d:2f:61:c0:47:93:54:4a:19:e1:a6:6f:
         02:95:1e:10:3e:0f:6e:67:98:89:e0:1f:cf:24:bd:67:9c:ec:
         f6:30:50:9d:d9:35:ba:0c:dd:f2:ec:a9:92:03:cc:ab:cf:5e:
         3d:31:b7:11:57:07:58:e0:b7:79:e9:2b:95:e3:ec:5a:70:ba:
         85:71:bd:a7:c3:0b:e9:a1:ed:41:cc:4e:3a:5b:d0:ee:a4:fb:
         6a:8b:27:0b:34:e0:ed:de:a8:31:49:8b:53:c1:c3:18:0e:c8:
         f4:15:86:0c:f6:51:e2:ad:f4:5d:1f:1c:fb:7a:31:60:d1:10:
         2e:2f:00:c2:ee:6b:f4:80:8d:bc:96:70:e4:37:b5:c4:60:65:
         12:bb:c2:18:f6:3d:bb:ab:a6:4d:a5:d0:29:46:06:ec:93:e8:
         9e:1b:75:92:f2:fd:d9:b2:f7:a6:13:ef:0b:78:ae:de:b5:3b:
         45:d5:e0:64:7a:f3:76:a9:b9:1c:d0:5b:20:cc:48:e6:ee:97:
         f6:50:a7:86:bb:31:a8:3a:00:c7:02:5d:61:9d:f5:e7:88:96:
         87:39:0c:4d:51:f2:56:c0:d3:b6:11:74:86:67:74:39:7e:87:
         1b:0b:a8:4f:10:da:fa:c5:d5:51:bf:fb:7c:0b:74:b5:89:bf:
         38:b1:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:08 2025 by rpki-client