Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
File:                     A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft (raw, json)
Hash identifier:          Iw0TfBzoGRhgF4KoZ5m+t4fXuQF7WHwHlsjBK4GkoVQ=
Subject key identifier:   E5:2B:3B:74:DC:79:52:01:85:DF:30:69:90:10:90:1E:35:A5:BA:63
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Certificate issuer:       /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial:       019A7149A527B8B06688377C5631975539B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
Manifest number:          0C93
Signing time:             Tue 11 Nov 2025 05:00:43 +0000
Manifest this update:     Tue 11 Nov 2025 05:00:43 +0000
Manifest next update:     Wed 12 Nov 2025 05:00:43 +0000
Files and hashes:         1: A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl (hash: 4oYm2xms0OurryoMi8lXY1l0sDpmplnas1zqyeH/uYQ=)
                          2: PMNnc8UiTx_1PdJEiYIJsVqvM18.roa (hash: glo0oQZnzXQ/WEXl4o++QXVkyGkwmaHI6OvTjJhSMHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:49:a5:27:b8:b0:66:88:37:7c:56:31:97:55:39:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
        Validity
            Not Before: Nov 11 05:00:43 2025 GMT
            Not After : Nov 12 05:00:43 2025 GMT
        Subject: CN=e52b3b74dc79520185df30699010901e35a5ba63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:4b:29:f8:03:1a:ce:ca:83:be:a5:ea:c8:
                    88:01:f6:84:b5:d4:7b:eb:24:74:5f:b4:1c:e6:23:
                    e4:6a:32:c8:c7:2a:d7:9e:b9:9d:19:42:0e:a4:e9:
                    c6:01:52:35:e5:e7:fe:16:27:98:dd:92:44:f4:6d:
                    2a:34:76:6b:c7:7b:b0:23:ee:63:1e:98:5f:b8:36:
                    29:8a:ba:32:f7:90:31:e9:cb:5f:f8:f2:0c:f4:48:
                    45:c7:fa:40:68:b4:4a:6c:8c:6f:ed:c5:dd:9a:2d:
                    3e:5c:58:0a:6d:4d:6e:62:87:1a:46:72:57:1d:09:
                    8e:84:79:66:7c:da:56:66:ef:e5:a4:89:93:18:49:
                    a4:ec:c8:d7:f9:d1:02:cb:52:53:6c:47:ab:71:29:
                    95:19:6b:bd:0e:57:ff:9a:f2:0c:73:77:09:ce:ad:
                    72:9c:97:d6:f7:33:9a:13:6e:58:8e:7b:db:54:5c:
                    22:f4:c6:ea:05:4e:c1:5f:b3:b7:74:1f:03:58:34:
                    60:27:ab:c5:91:53:56:4f:1d:90:b5:15:6f:a5:ec:
                    52:e3:32:19:af:f1:c5:51:d4:0c:5e:cb:2b:de:8e:
                    e6:c6:2e:81:70:af:d5:80:ba:49:b0:c3:2a:d4:39:
                    64:5c:02:f5:56:a4:93:3d:cd:15:23:b3:5e:18:2f:
                    39:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2B:3B:74:DC:79:52:01:85:DF:30:69:90:10:90:1E:35:A5:BA:63
            X509v3 Authority Key Identifier:
                keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:e5:24:2b:32:4e:59:2d:07:4f:de:93:33:07:66:11:d4:
         a7:f0:9b:78:1f:f6:d8:c9:12:47:04:80:83:7d:c7:e0:98:40:
         cc:56:d5:cb:b7:19:eb:aa:fa:5a:70:42:dc:74:e1:60:f3:eb:
         2d:a4:6c:13:92:06:90:f9:a7:74:51:ac:96:49:4b:a2:61:e9:
         38:3a:80:bf:5e:d7:04:93:e6:6f:17:77:17:97:ac:25:cb:94:
         f7:5d:3e:dd:23:d4:cf:d5:6d:0b:b1:63:f6:b0:13:22:8f:32:
         de:1d:f2:07:8a:9f:96:46:fe:09:d8:24:01:d8:e9:a5:ae:42:
         68:b3:18:82:78:c3:d4:a2:06:20:4a:19:1a:01:ce:b2:a6:ce:
         a3:13:05:1d:10:5e:6c:fb:ce:48:fc:3a:01:26:e1:1a:f7:59:
         74:20:b8:79:86:b1:d8:cd:e6:23:ce:92:05:5b:26:45:cf:7f:
         99:61:93:2c:80:6b:64:3d:a5:c6:75:94:5b:9a:4b:14:5e:4a:
         4a:b7:1b:c1:30:5a:20:3a:26:ce:96:c2:1d:09:58:4d:1d:c0:
         97:66:2b:42:90:16:b5:93:a7:46:5f:ea:41:53:1f:fb:12:61:
         29:90:1d:16:e3:12:32:4e:07:e1:36:d1:d2:ba:c5:e5:5c:0e:
         f6:38:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:59 2025 by rpki-client