Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
File:                     5QGBXG-Y86K2GEr-vxjqNBvoguo.mft (raw, json)
Hash identifier:          8PQtDcUqacpC2oKD+CDqlxam9WFAaubBSBfRp6drK7o=
Subject key identifier:   E6:4C:7F:F2:F8:9A:7E:AC:8B:CF:44:A5:8C:9E:2F:FF:D8:49:AE:00
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       01983539BFA727B3EF820A404B245F30B9F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
Manifest number:          1636
Signing time:             Wed 23 Jul 2025 03:00:33 +0000
Manifest this update:     Wed 23 Jul 2025 03:00:33 +0000
Manifest next update:     Thu 24 Jul 2025 03:00:33 +0000
Files and hashes:         1: 43y7EOGBptoEQuKUeXgk6SpCiKM.roa (hash: JqRad2v+qIhbHewbO6BDiGvY7klaYPQyg0QWPHcgDXg=)
                          2: 5QGBXG-Y86K2GEr-vxjqNBvoguo.crl (hash: zrjXQRSAA9qK0hgVqLsTDcdiB15jX6LjVFTqyCuin1g=)
                          3: H0nzbISenXARQ7LjMm13gCpgBwU.roa (hash: lx2NoDAlntNGOTqfrVMLC+nLmzh32KKsGBcKq8aFDes=)
                          4: f8kI2b59PBZRb_sckjtBe463HL0.roa (hash: f8FR8GkiNDWi6iflclZKzM3152IDL3F7lGZsDidin1k=)
                          5: hijMYiQr6vyULb-mnkn1xi1JvNs.roa (hash: dK5CEEe3WQ4TKnmD3J/bUooowbDXJp8gMo/+1WCMR7Q=)
                          6: xqyjrBAsPt6VFzztGhRFGsUeKVs.roa (hash: nSJGx8Mnaocq9nqKOOejGII6taJSf7vvPw4XmH1Q6Ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:39:bf:a7:27:b3:ef:82:0a:40:4b:24:5f:30:b9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Jul 23 03:00:33 2025 GMT
            Not After : Jul 24 03:00:33 2025 GMT
        Subject: CN=e64c7ff2f89a7eac8bcf44a58c9e2fffd849ae00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:14:20:d8:0b:c3:dd:97:1e:e9:b9:a3:b1:
                    04:c6:1d:d3:da:48:62:97:42:11:a3:d1:74:f7:13:
                    e9:f9:98:8d:09:a7:00:16:0d:a9:a1:76:85:b9:14:
                    30:8c:22:c6:2d:58:e5:71:35:8a:18:2b:15:26:a9:
                    fc:f7:cf:3e:77:72:85:c2:de:84:bd:fb:61:3f:8d:
                    ae:7d:d8:72:b6:4e:27:21:79:10:d9:75:3d:56:e4:
                    dc:10:2c:2c:50:9f:20:b4:cb:3b:67:83:20:ca:ef:
                    ff:15:6c:50:f0:c7:4a:5a:d3:ca:c3:fc:d2:90:1c:
                    d6:29:5f:46:ac:e0:ae:ea:59:1d:31:b6:90:18:7e:
                    39:44:3a:4e:73:d3:b6:b8:87:67:27:30:5d:23:4d:
                    aa:04:9d:cc:b8:c1:c4:79:13:79:1a:1f:23:5c:ee:
                    86:4c:05:1e:31:5a:0f:a1:05:1f:6a:88:88:79:a7:
                    f6:15:57:ae:ff:d2:a9:ca:b3:17:51:1d:87:06:45:
                    02:2c:0f:6a:c0:de:ea:5e:c0:8a:df:ec:50:85:9f:
                    54:1a:e5:f3:60:83:f0:56:82:73:ed:74:3b:14:1a:
                    a1:56:8f:53:6e:96:0a:e0:5a:2a:fc:98:44:d7:15:
                    df:4d:52:4e:e6:e5:98:5b:a0:52:67:a6:b0:25:f6:
                    85:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4C:7F:F2:F8:9A:7E:AC:8B:CF:44:A5:8C:9E:2F:FF:D8:49:AE:00
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:97:ba:32:01:1e:58:d1:0a:2e:e4:dd:52:be:27:02:0a:3f:
         3b:b6:60:d2:f3:b5:02:76:19:1e:1c:d3:7c:d2:bb:9d:f0:65:
         76:b0:53:59:4d:48:34:71:9b:07:4d:0e:14:6b:1e:c4:3e:fd:
         de:b3:e9:29:10:06:ef:a1:dd:a9:22:72:e6:55:1c:2d:f3:9e:
         10:59:d0:72:a2:f1:dc:45:5a:1b:c7:26:50:d1:74:42:81:e6:
         d6:ec:b8:f1:77:43:7b:50:7c:25:c8:98:e1:09:ea:92:55:b6:
         51:4a:89:f0:d1:20:96:59:79:a3:20:99:db:f2:b1:d0:9c:f8:
         8f:8e:5f:d7:c5:dc:88:0f:4b:34:cd:ef:2f:0c:f6:c7:c7:63:
         fc:f0:dd:72:3a:99:c0:c4:e9:0b:90:8e:cf:42:f6:f6:0e:c7:
         66:98:6b:cb:37:64:36:ad:39:7a:54:85:dc:b2:a9:64:6e:a6:
         50:3f:ba:81:c8:b4:05:e4:c5:7c:07:3c:df:dc:84:bb:dc:ce:
         98:21:3b:08:7d:03:92:2d:c5:9a:42:69:9e:3e:d5:f0:0c:e7:
         2b:7c:28:3d:5b:e6:05:fe:20:26:87:32:6c:5c:d7:c0:85:64:
         2f:18:17:69:45:bb:31:75:65:71:3a:04:06:5d:d5:5e:19:8e:
         17:ef:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:26:28 2025 by rpki-client