Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
File:                     5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft (raw, json)
Hash identifier:          6+IDE3fN/k9cWIrwaieo4N2gcrdDUwfNLYthZ9sSQJs=
Subject key identifier:   09:A3:F7:75:BB:C7:65:E0:54:02:B2:E8:4B:28:EA:B4:13:6A:BB:0C
Authority key identifier: E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9
Certificate issuer:       /CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
Certificate serial:       019922FA5C64D704DE4FDB1BEB18EE611C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
Manifest number:          0B07
Signing time:             Sun 07 Sep 2025 07:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:56 +0000
Files and hashes:         1: 5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl (hash: Irl75/rVk3jJbPmpMpGu882rD2Cxx+EgozqNHIF4IwQ=)
                          2: ks3E9rgJDrYHSn1zKv3DRKZ2JZY.roa (hash: 6sUjW8COGptDdK0ohMchALwRnOd24SfrIMK9uss1g4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:5c:64:d7:04:de:4f:db:1b:eb:18:ee:61:1c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9
        Validity
            Not Before: Sep  7 07:00:56 2025 GMT
            Not After : Sep  8 07:00:56 2025 GMT
        Subject: CN=09a3f775bbc765e05402b2e84b28eab4136abb0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:f7:96:5a:0f:d4:48:8d:d7:49:62:f4:ae:
                    17:13:56:c3:e1:3e:17:fd:0d:98:74:d3:f2:af:9d:
                    b9:9f:a1:32:ce:a1:db:11:b7:63:c9:6f:72:32:bf:
                    06:f4:3d:46:5b:e1:91:2c:c3:9f:a3:c0:f5:3d:7e:
                    52:98:7c:11:0b:b2:99:c7:25:95:0b:b1:41:1f:8f:
                    55:35:b3:a1:5b:a4:f3:1c:d4:d4:40:6d:dc:76:3e:
                    c6:83:03:d8:82:ef:68:d4:ba:15:75:7b:e9:4e:23:
                    06:98:5c:bf:06:bc:c5:5f:7a:2d:d5:17:3d:5f:e4:
                    80:92:9a:a9:61:8d:ca:fb:b9:cb:e2:ba:b6:7c:c8:
                    2b:1e:5b:8c:01:a6:69:7e:28:52:d7:59:de:75:2d:
                    ae:a4:0c:b3:2a:27:db:f2:03:f5:ff:88:80:16:9d:
                    96:25:79:34:a7:73:b3:f5:7e:e5:95:95:ab:23:c5:
                    84:a6:67:ce:e2:d8:66:c4:09:78:6c:b7:53:d9:92:
                    d5:f4:bd:5d:2b:91:d9:e2:61:bb:cf:20:75:85:01:
                    7e:29:63:19:6b:9e:ed:94:b4:04:94:68:cb:f3:5b:
                    80:b1:b1:ad:c8:88:2b:c3:da:47:57:10:cb:2f:a4:
                    5d:3b:bb:67:c0:11:56:c1:1d:46:2a:f6:ad:17:7e:
                    71:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A3:F7:75:BB:C7:65:E0:54:02:B2:E8:4B:28:EA:B4:13:6A:BB:0C
            X509v3 Authority Key Identifier:
                keyid:E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a6:85:dd:eb:de:39:fd:73:5e:fd:e4:f9:0a:ec:3f:e0:cb:
         74:62:4e:40:3d:c7:53:3e:58:ef:ee:fa:9b:2e:75:45:eb:36:
         42:85:05:85:23:b9:a1:59:6a:ba:1d:e4:17:99:4e:27:f8:c0:
         d5:93:83:8b:10:8f:7b:f5:1b:5e:d0:a7:be:89:cb:2b:5f:71:
         2d:b1:93:86:fb:eb:23:14:b9:db:39:84:12:50:b6:69:9b:94:
         7c:01:f5:8f:68:28:13:00:79:78:f5:69:e1:44:27:8e:18:1b:
         59:59:4a:64:04:82:9e:25:45:15:4a:a8:20:ab:a7:92:82:55:
         0f:d2:a3:54:7a:5b:76:a5:2d:8d:20:ea:f5:a8:03:26:19:c5:
         24:23:e0:a4:0f:91:1b:5f:94:eb:78:f1:5f:31:9d:33:3d:a3:
         cf:8e:9b:d1:08:40:02:21:44:f1:59:7f:f0:bf:1c:c8:c8:ae:
         76:37:4b:57:eb:5f:d0:81:d3:0c:b3:6b:c0:16:01:7a:6c:34:
         59:ec:4c:dd:fa:c6:61:d6:4d:9d:0b:e2:ed:98:a1:2a:3d:04:
         2c:2e:98:e6:42:85:16:ef:48:a4:4f:c4:02:fb:f3:bf:d7:0e:
         68:03:ab:e6:d3:ac:ad:66:0f:a2:40:00:5c:af:ab:9e:c9:2d:
         ed:4b:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:10 2025 by rpki-client