Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
File:                     afURWpSbKIPEzDxJX_uJk97Z2F0.mft (raw, json)
Hash identifier:          VOUM+z/5fpI9M9wzslrKFbRBlot8wMAIkTqdKW+rlKU=
Subject key identifier:   58:60:3F:96:26:B2:C7:33:B1:71:62:E8:F6:63:6B:A7:10:45:89:0A
Authority key identifier: 69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D
Certificate issuer:       /CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
Certificate serial:       0198D6CDF8BD2FC6E206F2FEBA756F215CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
Manifest number:          68
Signing time:             Sat 23 Aug 2025 12:01:19 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:19 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:19 +0000
Files and hashes:         1: 4BZY4KShEUmhrY8s7jFk_wJEp5k.roa (hash: UlyxYtAIHY75kSHD+hMXhTJxJxd+/SUaiDAFT6/piUg=)
                          2: afURWpSbKIPEzDxJX_uJk97Z2F0.crl (hash: n41HnAwyLoQ0ggFw4wdDGKwWiTVWzNBUNsW5f/iYV7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:f8:bd:2f:c6:e2:06:f2:fe:ba:75:6f:21:5c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f5115a949b2883c4cc3c495ffb8993ded9d85d
        Validity
            Not Before: Aug 23 12:01:19 2025 GMT
            Not After : Aug 24 12:01:19 2025 GMT
        Subject: CN=58603f9626b2c733b17162e8f6636ba71045890a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7b:60:6c:e1:1c:41:a7:4e:89:e1:16:1e:7e:
                    37:7d:a0:b8:8b:82:04:86:c1:ac:4b:9b:95:b1:4e:
                    d9:6e:6d:6e:dd:87:b8:83:87:a5:4d:04:e4:d6:ab:
                    40:00:bd:bb:65:2c:22:2c:47:a8:62:cd:9c:e5:f6:
                    fe:29:4c:fd:73:23:d2:f0:1f:e3:1a:69:6e:5a:1f:
                    ca:0c:8e:b0:5b:00:07:7f:e6:73:3a:5e:38:f7:a0:
                    6d:f0:ec:ce:9a:dc:78:40:67:bf:9b:f1:e8:6f:ca:
                    dd:72:39:a5:32:3d:d6:c2:f3:88:f7:5d:ee:db:a1:
                    87:7c:df:27:71:94:d2:f4:bd:3a:be:f0:3d:2c:30:
                    ca:ae:bf:27:70:a3:8a:98:e4:86:11:fd:52:dd:a0:
                    71:06:7b:e4:60:16:f7:11:e6:36:52:f5:c4:c0:be:
                    49:4c:0d:96:23:62:6a:a6:1d:0b:76:48:a6:88:34:
                    36:50:db:b5:02:85:20:bc:06:ca:e8:e3:3f:0d:04:
                    f2:5e:0d:48:24:7a:c5:03:bd:fd:17:b6:62:f3:f2:
                    65:42:83:4e:40:43:c3:64:d7:e8:88:9b:75:6a:f6:
                    6c:b7:ab:f3:0b:c9:56:c2:8a:7a:47:4f:80:ce:00:
                    fe:7b:2a:5c:a7:35:fc:29:d2:47:ba:83:ce:11:ac:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:60:3F:96:26:B2:C7:33:B1:71:62:E8:F6:63:6B:A7:10:45:89:0A
            X509v3 Authority Key Identifier:
                keyid:69:F5:11:5A:94:9B:28:83:C4:CC:3C:49:5F:FB:89:93:DE:D9:D8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afURWpSbKIPEzDxJX_uJk97Z2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c06536-01aa-4e39-89b6-b58704f28591/1/afURWpSbKIPEzDxJX_uJk97Z2F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:41:c6:29:69:fe:f7:f5:0c:1c:58:48:02:ac:ea:0f:83:fc:
         78:1b:bc:5c:33:3d:d4:fc:c0:7a:8c:11:e5:ce:0c:37:c9:cc:
         a8:25:b3:45:0d:0a:26:3a:ca:4a:3a:4c:56:37:78:5d:e4:a6:
         41:cd:9b:a4:65:47:8a:fa:f3:e2:ce:99:44:84:83:5a:12:d4:
         30:a4:9b:5f:36:db:78:44:b0:b0:de:d5:17:19:f3:6f:45:a7:
         f7:77:bf:64:58:07:9a:9f:c5:80:5b:9d:26:03:47:dd:62:0a:
         48:e7:06:eb:d9:64:18:a0:fe:30:d1:66:3d:69:1d:ec:62:a1:
         b1:90:30:a7:5b:7a:80:27:fd:4c:c5:a6:b4:9b:ff:0f:5e:90:
         b4:3a:8e:88:e7:6d:5b:9c:c9:1a:69:15:58:7f:51:2d:ff:96:
         9e:7d:90:c0:81:a8:6d:57:bf:36:87:2e:0d:ae:9d:3c:1a:27:
         34:94:ca:5f:bc:e8:56:e3:33:27:b0:4f:3f:e6:30:bd:3c:fb:
         20:14:dc:53:3a:ca:a9:73:6a:0c:76:c3:46:6d:b6:80:13:ea:
         c6:7b:43:0c:14:df:3c:e9:95:42:67:53:03:1a:18:3c:26:ec:
         3c:8c:d3:87:4e:2b:8a:48:43:79:fe:97:50:df:ca:96:d1:b5:
         13:db:93:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:48:41 2025 by rpki-client