Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
File:                     5KVOQra3iNjki0iEQt2RiySFrDU.mft (raw, json)
Hash identifier:          7gTgWuU2ML1rVZO3EW+iwHDKuHkVoXWVpkzkUdz2TJw=
Subject key identifier:   82:24:8F:9F:0D:76:84:FD:A5:19:AA:A1:78:2E:E5:9E:A2:88:F5:E7
Authority key identifier: E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35
Certificate issuer:       /CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
Certificate serial:       01991877339347EC11264AD5FC73617746F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
Manifest number:          B2
Signing time:             Fri 05 Sep 2025 06:01:29 +0000
Manifest this update:     Fri 05 Sep 2025 06:01:29 +0000
Manifest next update:     Sat 06 Sep 2025 06:01:29 +0000
Files and hashes:         1: 5KVOQra3iNjki0iEQt2RiySFrDU.crl (hash: jklB11uYpZIbpG2XZtapQnGThU0yeVtkaKCmVK40d5U=)
                          2: crXLrPic8k9vyE5SxEPR-_3DVks.roa (hash: isyyv0lSga2YsVBxt0riFZT/vQhsYIIC7MEzRQbYvEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 06:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:77:33:93:47:ec:11:26:4a:d5:fc:73:61:77:46:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
        Validity
            Not Before: Sep  5 06:01:29 2025 GMT
            Not After : Sep  6 06:01:29 2025 GMT
        Subject: CN=82248f9f0d7684fda519aaa1782ee59ea288f5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:90:cb:03:a4:08:f8:fe:7f:e4:84:a1:d7:ac:
                    a9:32:73:05:38:c1:bb:73:ae:a5:92:01:8e:f5:9c:
                    01:8d:9f:6a:ac:b1:d7:a7:0a:68:8e:f4:87:b7:ae:
                    64:46:ab:66:84:f2:61:2c:19:df:df:18:4f:9d:cd:
                    52:d5:7c:f5:28:1f:f6:11:d6:df:28:93:17:a2:5b:
                    06:20:26:fe:c9:25:8e:d2:1e:be:04:f7:30:7a:3e:
                    d9:e9:9c:a5:37:55:42:81:d9:fe:23:03:23:38:84:
                    0e:f8:6a:3b:d7:7e:d3:2f:2b:a5:a8:32:ba:83:ef:
                    28:ef:24:63:6a:0e:e4:b7:27:60:cc:3c:55:41:65:
                    83:4c:b2:e5:4c:31:f7:dc:fc:03:51:8f:5f:da:26:
                    1f:a4:90:98:f2:fb:84:57:6a:75:11:85:df:6a:5d:
                    4d:de:4d:d4:a1:b5:b6:da:ea:9d:79:d9:9b:4c:9c:
                    02:f9:15:36:a4:6d:59:ff:36:ae:20:12:2c:b4:02:
                    a6:00:99:61:74:c5:36:ad:ab:de:d9:db:80:ea:fc:
                    7b:c0:79:a3:82:b5:cd:ce:9d:18:0e:3d:cf:60:4a:
                    90:66:92:ec:99:da:11:82:97:77:48:89:c1:21:5d:
                    35:66:2a:5f:d2:0b:09:d3:c0:83:ab:8c:cc:f2:39:
                    5a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:24:8F:9F:0D:76:84:FD:A5:19:AA:A1:78:2E:E5:9E:A2:88:F5:E7
            X509v3 Authority Key Identifier:
                keyid:E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:45:6b:1e:2c:d4:0e:98:c7:75:32:52:d2:21:51:d5:80:bd:
         62:fa:67:0a:4d:48:ef:dc:90:6d:c0:97:c2:13:81:52:6e:f8:
         02:cb:1d:c0:5e:c8:fc:04:96:62:e8:ec:8e:dd:f3:74:9d:f8:
         5a:94:bb:d9:6c:c3:c5:41:81:77:5b:14:e3:a3:01:ba:c8:ee:
         35:91:a0:25:bf:fd:e3:45:ad:5d:31:e0:c3:6c:d7:bc:4d:29:
         c0:69:4a:60:25:a7:75:d6:26:b0:d3:90:81:4d:5e:93:7e:5f:
         20:ae:7e:55:5a:99:15:0f:03:ef:88:ff:a8:50:e3:9e:8f:c5:
         6d:46:e3:16:ce:47:19:40:be:35:b3:95:cb:ac:45:bc:4d:48:
         d5:53:a6:57:62:ff:16:32:39:d7:b9:ff:b1:ad:9c:18:29:a8:
         0f:97:46:72:23:0c:33:1c:06:a6:8e:f4:b2:39:cf:a5:fd:0c:
         bf:8d:c6:e5:d1:be:ef:87:02:ba:87:76:b4:78:30:ec:9a:ef:
         b3:5b:70:68:5b:4e:9a:25:82:d6:c6:1a:b2:6c:45:16:f8:15:
         be:3a:29:1f:31:32:74:34:d0:a4:d7:98:e0:f6:f4:23:fb:15:
         fa:b9:fd:99:fa:ef:cf:ac:86:68:28:d8:53:9f:07:56:07:35:
         95:24:ef:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYdzOTR+wRJkrV/HNhd0bwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTU0ZTQyYjZiNzg4ZDhlNDhiNDg4NDQyZGQ5MThiMjQ4
NWFjMzUwHhcNMjUwOTA1MDYwMTI5WhcNMjUwOTA2MDYwMTI5WjAzMTEwLwYDVQQD
Eyg4MjI0OGY5ZjBkNzY4NGZkYTUxOWFhYTE3ODJlZTU5ZWEyODhmNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5DLA6QI+P5/5ISh16ypMnMFOMG7
c66lkgGO9ZwBjZ9qrLHXpwpojvSHt65kRqtmhPJhLBnf3xhPnc1S1Xz1KB/2Edbf
KJMXolsGICb+ySWO0h6+BPcwej7Z6ZylN1VCgdn+IwMjOIQO+Go7137TLyulqDK6
g+8o7yRjag7ktydgzDxVQWWDTLLlTDH33PwDUY9f2iYfpJCY8vuEV2p1EYXfal1N
3k3UobW22uqdedmbTJwC+RU2pG1Z/zauIBIstAKmAJlhdMU2rave2duA6vx7wHmj
grXNzp0YDj3PYEqQZpLsmdoRgpd3SInBIV01Zipf0gsJ08CDq4zM8jlamQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIkj58NdoT9pRmqoXgu5Z6iiPXnMB8GA1UdIwQY
MBaAFOSlTkK2t4jY5ItIhELdkYskhaw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtWT1FyYTNpTmpraTBpRVF0MlJpeVNGckRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wYTU2N2MtYWY2Yi00NjFhLWE3YTAt
ZGNmYmMyOGY0NzMxLzEvNUtWT1FyYTNpTmpraTBpRVF0MlJpeVNGckRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wYTU2N2MtYWY2Yi00NjFhLWE3YTAtZGNmYmMyOGY0NzMx
LzEvNUtWT1FyYTNpTmpraTBpRVF0MlJpeVNGckRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEVrHizU
DpjHdTJS0iFR1YC9YvpnCk1I79yQbcCXwhOBUm74AssdwF7I/ASWYujsjt3zdJ34
WpS72WzDxUGBd1sU46MBusjuNZGgJb/940WtXTHgw2zXvE0pwGlKYCWnddYmsNOQ
gU1ek35fIK5+VVqZFQ8D74j/qFDjno/FbUbjFs5HGUC+NbOVy6xFvE1I1VOmV2L/
FjI517n/sa2cGCmoD5dGciMMMxwGpo70sjnPpf0Mv43G5dG+74cCuod2tHgw7Jrv
s1twaFtOmiWC1sYasmxFFvgVvjopHzEydDTQpNeY4Pb0I/sV+rn9mfrvz6yGaCjY
U58HVgc1lSTvlg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 11:08:40 2025 by rpki-client