Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
File:                     5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft (raw, json)
Hash identifier:          pMe035b0QpXRes35bkajPXBCnkxFrBG6vwXaqoEm3OM=
Subject key identifier:   61:9A:B5:3B:7F:96:B3:B2:67:4A:61:CD:D6:E4:B9:A7:4D:E4:A3:CD
Authority key identifier: E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9
Certificate issuer:       /CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
Certificate serial:       0198D5BBC2CB734223F5CBBD97EA539E69FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
Manifest number:          0ADF
Signing time:             Sat 23 Aug 2025 07:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:48 +0000
Files and hashes:         1: 5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl (hash: zkGggDhsXNUdqXx7D6Z3KPE0JcnGqqW4Zr36VJD31FQ=)
                          2: ks3E9rgJDrYHSn1zKv3DRKZ2JZY.roa (hash: 6sUjW8COGptDdK0ohMchALwRnOd24SfrIMK9uss1g4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:c2:cb:73:42:23:f5:cb:bd:97:ea:53:9e:69:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
        Validity
            Not Before: Aug 23 07:01:48 2025 GMT
            Not After : Aug 24 07:01:48 2025 GMT
        Subject: CN=619ab53b7f96b3b2674a61cdd6e4b9a74de4a3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:32:ef:b8:d0:55:83:5c:df:78:c5:6a:59:
                    ee:bd:f3:a2:cf:9c:f2:40:91:d4:fb:b2:1b:69:72:
                    05:cc:92:b9:99:49:76:6e:ce:1d:08:52:25:33:56:
                    0d:ff:5b:77:80:27:3c:29:5d:fd:ea:61:bd:bc:b9:
                    7d:31:de:d2:44:14:a9:fb:bd:50:d8:73:43:02:c8:
                    66:33:12:05:5d:b6:ea:52:98:fb:54:a7:7a:eb:0f:
                    3b:20:e9:24:d7:27:ca:aa:67:54:1e:49:90:e9:30:
                    a1:53:af:f2:bd:38:fa:12:64:a2:3d:f2:b9:0c:af:
                    dc:fb:9d:ae:d6:36:ae:c3:a4:9d:24:c9:45:ca:b5:
                    30:46:b5:94:3b:33:eb:a4:d3:81:f1:87:4f:70:c9:
                    78:8a:2b:08:84:51:4b:bb:82:b5:7b:18:46:da:21:
                    b1:e6:3d:2e:a4:9d:c7:98:16:56:0d:03:b9:d9:bf:
                    56:af:aa:a7:74:5a:b2:ff:22:54:d9:36:da:43:f1:
                    1f:f6:94:0f:04:47:6a:b1:ea:0a:c7:e7:7e:95:f7:
                    8d:50:47:a6:22:59:e9:96:b0:40:a0:fe:a7:44:04:
                    aa:b3:b9:15:de:8d:c1:a1:cf:96:65:14:de:15:40:
                    77:50:85:19:44:f0:1d:51:5b:84:31:64:ae:b9:19:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9A:B5:3B:7F:96:B3:B2:67:4A:61:CD:D6:E4:B9:A7:4D:E4:A3:CD
            X509v3 Authority Key Identifier:
                keyid:E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9d:7e:81:37:92:9d:b9:26:47:01:cc:2a:6d:dd:ff:58:3d:
         bc:bb:35:dd:a5:1a:0c:7f:2f:55:58:33:0d:8b:ed:0c:ef:e9:
         43:bb:58:78:12:4c:9d:5c:7e:67:2f:3b:25:e9:f7:2d:0c:25:
         2e:c3:41:37:d7:bf:15:aa:56:0e:45:10:01:14:cf:65:ed:8e:
         85:d5:7c:47:b0:e1:46:04:a7:c3:53:41:58:f5:5d:2b:ba:aa:
         9f:1d:a7:e6:90:51:7a:e9:0f:48:0b:02:91:80:bf:7b:dd:0c:
         df:02:0a:3b:8e:cb:50:6e:2a:da:3d:82:f3:87:3b:ea:24:09:
         2b:8f:78:87:cc:6a:63:1c:36:d7:0d:c9:7f:ae:9d:0e:8a:bb:
         7a:20:aa:e6:e8:af:dc:98:15:5e:ee:92:bb:99:10:6c:ce:b2:
         57:7c:21:09:58:cb:5f:a3:f8:3d:6a:da:a2:00:be:77:af:f7:
         fc:40:5d:d0:02:8a:e6:95:3f:1f:b1:a8:4a:fd:6b:70:1b:75:
         52:6e:1b:e9:1b:99:ed:ed:99:75:f8:e5:96:5f:4c:ef:d8:73:
         e7:47:47:84:09:9d:0e:8d:eb:7b:e9:ae:06:f8:19:18:ff:9f:
         e6:d4:68:e2:28:00:73:b9:ee:d3:60:e9:25:a2:7e:48:e2:04:
         44:64:7f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:40 2025 by rpki-client