Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File:                     oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier:          AJplt+hTdecR7Nl1TgWHQzqRIfRyaFEPZqyOCiuFsXo=
Subject key identifier:   E2:A3:72:25:C5:26:15:B2:E2:61:E3:B9:65:B7:E7:F5:B6:AE:F8:8F
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer:       /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial:       01993915544A45871184E396F5A7892B754E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number:          051F
Signing time:             Thu 11 Sep 2025 14:02:03 +0000
Manifest this update:     Thu 11 Sep 2025 14:02:03 +0000
Manifest next update:     Fri 12 Sep 2025 14:02:03 +0000
Files and hashes:         1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
                          2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
                          3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
                          4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: ouvY9o592//Ys5oL8lo5EqSf1B8mScWk0uMJKXa5Rg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 14:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:39:15:54:4a:45:87:11:84:e3:96:f5:a7:89:2b:75:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
        Validity
            Not Before: Sep 11 14:02:03 2025 GMT
            Not After : Sep 12 14:02:03 2025 GMT
        Subject: CN=e2a37225c52615b2e261e3b965b7e7f5b6aef88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:0b:5b:de:93:2f:74:88:ab:f7:d2:d3:7b:
                    cf:84:d7:df:7d:32:30:6b:32:fd:32:38:7c:af:39:
                    22:8e:eb:5c:49:9c:8a:2a:e7:59:08:92:df:44:b2:
                    33:b2:d2:1c:23:f4:b9:b7:d0:72:d1:5c:61:a5:e1:
                    53:2a:6f:fb:57:2c:8f:30:2c:fc:a5:10:ef:d6:33:
                    af:c0:cc:6b:cf:7b:40:87:2b:6e:ef:c1:48:84:9e:
                    45:ee:94:9f:bb:a5:bb:31:bd:94:26:32:84:f8:83:
                    ae:52:12:cc:98:1b:9c:bf:ff:8b:bf:64:97:b8:44:
                    88:d8:66:8f:b6:83:a3:47:8a:d2:bf:b2:f8:9c:e1:
                    27:db:39:5c:fa:e1:3c:14:c9:f3:a6:e3:67:ed:d9:
                    42:a8:4b:70:22:54:13:0b:eb:c1:ee:89:17:32:5f:
                    3f:ac:7e:46:c7:d8:41:7a:cc:9e:1c:ce:2a:f5:2d:
                    49:8e:6c:b2:fa:af:4f:a4:37:99:3a:a0:92:91:b9:
                    27:27:fe:55:1f:4a:82:1f:3d:0a:5c:ad:eb:44:6a:
                    39:82:a4:10:fb:06:82:1d:a9:ed:c1:eb:da:4e:3c:
                    6c:18:20:6c:f8:c7:d7:1c:84:b0:3b:7e:40:7c:10:
                    19:67:ef:ca:fb:6f:4a:07:e0:67:e0:b1:a9:2e:35:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A3:72:25:C5:26:15:B2:E2:61:E3:B9:65:B7:E7:F5:B6:AE:F8:8F
            X509v3 Authority Key Identifier:
                keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:05:db:9f:8c:89:f5:68:31:fd:20:81:3f:8b:67:06:35:52:
         a5:ab:62:4d:d5:02:2a:4d:c5:a6:b5:fd:9f:c4:89:0b:16:92:
         a1:ac:de:da:31:db:5d:94:02:d8:f7:e4:25:6f:a6:09:34:a0:
         a4:72:4e:90:43:2a:ae:e6:76:5f:68:9c:02:77:17:44:60:ef:
         8f:70:3d:9a:67:6b:59:cc:47:60:5b:8b:a1:2d:00:bb:8c:96:
         88:78:82:86:63:6c:0d:58:13:82:6e:93:e9:85:d8:ee:e8:03:
         7e:d8:d9:88:58:c8:27:13:c0:2b:0a:17:eb:55:93:46:ec:05:
         94:32:30:59:df:c4:14:3d:8f:5a:31:8a:a0:e7:ff:68:3b:90:
         73:00:38:24:2f:6f:30:d1:5b:13:c0:9a:98:9d:2d:d0:33:5e:
         85:d9:65:2e:87:fb:a3:aa:7e:ac:39:a0:4a:4f:71:b1:3b:84:
         b7:1c:11:4f:4e:df:8c:40:bc:be:58:6c:3b:10:5e:25:7f:f4:
         af:65:35:15:a6:ae:d0:93:99:9b:a2:f4:98:1b:66:7f:98:05:
         f4:9d:a0:3d:f2:83:b0:57:32:84:65:b1:c4:57:ed:4a:b2:6b:
         b5:ad:47:90:75:3c:b0:30:4b:b7:87:c2:eb:61:1b:36:91:00:
         67:70:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 20:27:34 2025 by rpki-client