Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
File:                     5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json)
Hash identifier:          CMRDeHrJ8ufYC3n84ubKPWwAMfthsNBj/rQU00Wp8cE=
Subject key identifier:   F8:5B:E0:4E:EB:FE:02:19:07:1B:2E:0E:7C:30:1B:A9:28:7E:E9:3A
Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
Certificate issuer:       /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Certificate serial:       019847770050F6C8BF81BD7B7A1F7575F510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 16:00:37 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:37 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:37 +0000
Files and hashes:         1: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: HFmcM5nvM6zJwh2//mW/89RWRiW6pFScbYK4hMNX0uU=)
                          2: N5B5WcceOX8-5008CdVB5Z2Yf_U.roa (hash: N6x2VI2LM0pBE2WvbvROlXs2jZlgeDuNmVuOamFJP3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:00:50:f6:c8:bf:81:bd:7b:7a:1f:75:75:f5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
        Validity
            Not Before: Jul 26 16:00:37 2025 GMT
            Not After : Jul 27 16:00:37 2025 GMT
        Subject: CN=f85be04eebfe0219071b2e0e7c301ba9287ee93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:80:2f:e0:91:ed:6c:93:d4:f3:92:9e:3b:3d:
                    bb:b6:23:d3:f6:12:80:3c:e1:9d:65:a7:a8:fc:86:
                    62:b3:ec:a8:f2:93:dc:72:58:c5:a4:91:3c:86:9e:
                    37:d2:f3:65:b0:2b:ca:3e:3b:99:b1:1a:fb:fd:90:
                    63:2c:47:ab:51:0a:dc:88:4c:0f:64:bb:12:2a:82:
                    5a:90:00:03:59:26:39:1c:ae:95:41:83:88:38:79:
                    6b:30:01:fe:62:b1:7c:8b:39:d7:9b:37:5f:56:e8:
                    5c:e2:f2:d1:21:38:67:5b:e1:0d:82:b8:e4:3f:49:
                    96:76:cb:79:17:7f:1c:80:5e:b0:00:24:19:90:76:
                    b0:62:19:37:a8:25:e0:92:d3:e8:06:a4:dc:01:1b:
                    bb:e5:66:81:7f:38:41:05:cd:9a:3b:b8:1c:b9:02:
                    0e:98:58:d7:1c:e9:2b:3a:56:70:c4:06:22:84:4e:
                    15:3a:41:da:7e:1a:8e:94:5a:b7:4c:ed:36:b7:27:
                    c2:dd:5d:80:bb:5b:aa:1d:d8:5f:60:1c:1c:fd:3f:
                    9b:db:9a:18:be:c2:d5:35:da:92:30:37:8e:69:9e:
                    d7:14:dc:23:b0:de:80:3c:72:0c:07:9d:a5:4d:01:
                    d3:35:04:ac:9d:82:fa:a1:d7:8f:a7:ab:cd:ad:d8:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5B:E0:4E:EB:FE:02:19:07:1B:2E:0E:7C:30:1B:A9:28:7E:E9:3A
            X509v3 Authority Key Identifier:
                keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a4:b8:27:b2:89:5c:1a:b6:6b:06:a1:c2:05:6e:3d:80:2d:
         ab:d3:c4:74:85:8d:17:66:0f:c4:69:b6:40:94:54:69:7c:6c:
         2b:b3:b0:54:3a:88:3d:43:39:14:33:16:7a:83:95:a7:9a:84:
         56:c5:67:9a:2e:16:14:c6:04:a7:1e:2d:0d:a2:69:8d:76:aa:
         8f:38:59:1c:20:b3:9d:c0:38:50:7a:45:b0:0a:a0:bd:92:28:
         b3:f6:dd:b5:81:02:01:48:21:9f:96:94:ce:b0:f2:9c:8b:69:
         57:c6:6b:96:02:a1:fb:c6:12:a2:84:52:f5:32:58:ef:22:de:
         f3:f4:b9:f5:61:00:5e:44:71:bc:33:02:2b:0b:ee:0a:13:4e:
         77:de:a4:21:68:ac:2c:f2:e1:43:8f:75:9a:3c:fc:95:72:53:
         f9:66:36:2c:78:4e:db:98:73:86:90:b9:aa:37:e1:ba:0e:d5:
         41:44:70:f3:13:2d:37:36:d7:39:69:1c:69:45:1b:f7:f5:41:
         1b:ba:87:cb:4a:bb:4d:99:4c:7b:92:a4:41:c8:c8:d3:de:a8:
         4a:60:23:23:b0:bc:b2:a7:76:fb:da:44:e4:bc:1c:f8:0c:c5:
         df:89:0c:f0:87:c4:5a:fa:5d:2e:f3:75:8a:39:e2:83:a5:27:
         d8:32:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:22:32 2025 by rpki-client