Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
File:                     W5Mah05ojyfJWsrY29Md9pjyEX0.mft (raw, json)
Hash identifier:          w5r07fCRrqcqL0Mhs6jz3w2C1FFXQdvrsCZ2TRMffzg=
Subject key identifier:   69:8B:25:B5:A9:6E:35:01:81:03:11:9A:3D:B6:C4:20:71:98:5C:CC
Authority key identifier: 5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D
Certificate issuer:       /CN=5b931a874e688f27c95acad8dbd31df698f2117d
Certificate serial:       01984852BBB83A031137F4A6E32A5B39BB6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
Manifest number:          10
Signing time:             Sat 26 Jul 2025 20:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:38 +0000
Files and hashes:         1: T_aE1VBzRFBW86cu7jRpCvqMP_0.roa (hash: Br23NBG7MwrWwFTa8s2oq/DVFkGOhwRXNYpcFdJ00mE=)
                          2: W5Mah05ojyfJWsrY29Md9pjyEX0.crl (hash: NrvapwjwJhqiQE+opIcWfxexNyYK/CaPxcM/QpwAG9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:bb:b8:3a:03:11:37:f4:a6:e3:2a:5b:39:bb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b931a874e688f27c95acad8dbd31df698f2117d
        Validity
            Not Before: Jul 26 20:00:38 2025 GMT
            Not After : Jul 27 20:00:38 2025 GMT
        Subject: CN=698b25b5a96e35018103119a3db6c42071985ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:b4:a8:6b:58:39:4d:5f:29:af:73:a7:7c:
                    96:95:a8:39:d1:df:15:99:cc:37:c0:55:05:eb:70:
                    6d:15:48:83:0b:5d:e4:74:de:98:67:b5:aa:83:62:
                    54:fd:ce:8f:6e:84:f3:f3:f1:e1:b8:e4:9d:3e:18:
                    1a:cd:81:79:fe:a2:04:bc:05:ef:4e:63:43:c9:ba:
                    a0:bc:e1:35:23:b5:9b:bd:1f:87:64:d2:a1:9b:95:
                    93:02:8d:58:39:10:45:7b:91:cc:81:86:88:2f:db:
                    66:fd:24:9f:0d:50:a2:4d:f1:b4:97:a8:68:47:f8:
                    a6:46:dc:26:22:ce:8a:d5:fe:df:2f:c4:1e:a3:b4:
                    f2:9b:93:18:3a:93:97:2e:50:66:2e:df:31:68:87:
                    e8:c7:ef:cc:e6:d2:33:f8:16:2f:a9:95:ef:36:fd:
                    84:55:86:4e:44:d4:95:7c:cb:e1:40:40:23:dd:59:
                    e7:ae:2d:34:8c:30:e3:33:9e:b2:8c:6b:a5:13:4c:
                    b3:d4:69:20:c0:0d:96:90:59:d0:cf:99:05:b7:11:
                    6c:94:55:73:82:18:e6:70:35:23:95:d1:ef:89:84:
                    f2:f5:0a:5e:ba:04:25:aa:a7:6b:38:b2:68:1c:18:
                    58:48:8d:de:94:56:0e:3c:f0:65:eb:2f:80:7b:9d:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8B:25:B5:A9:6E:35:01:81:03:11:9A:3D:B6:C4:20:71:98:5C:CC
            X509v3 Authority Key Identifier:
                keyid:5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b5:de:fa:6e:07:e9:40:19:b8:42:21:d9:fa:fd:58:ae:6e:
         aa:15:dd:fe:78:6e:97:b2:99:db:6d:b0:ea:e9:4f:9f:e7:2e:
         3d:55:a0:d5:81:e0:fe:de:51:be:28:13:a8:71:b8:e4:03:86:
         25:34:9c:87:ea:08:e5:d0:e7:72:4b:86:3f:78:51:fb:99:73:
         52:32:7b:6b:6a:6d:f9:b9:86:89:68:f4:0b:00:6f:7d:3b:7e:
         7b:55:66:8b:44:04:10:84:4c:68:c9:14:26:e7:d5:62:64:5e:
         a5:e4:a9:b4:57:c0:03:f8:63:58:8c:dc:bd:ba:85:48:a0:20:
         a2:ba:ad:82:de:eb:c9:15:da:9b:c4:a0:e2:44:a8:12:d4:0f:
         c0:d8:e4:c0:51:e0:40:a5:99:32:c2:e4:c2:0d:7b:01:83:84:
         ee:7b:2a:8e:c8:c5:82:54:13:ec:d3:0d:f9:c3:fd:b9:3b:2e:
         15:3e:ff:4f:93:10:d2:90:05:23:fb:b3:43:19:e7:95:ad:68:
         9a:48:4c:22:ad:27:9a:42:7c:c4:0c:3c:94:3e:d7:e7:0b:b3:
         ac:c1:b3:72:63:b7:3b:3c:70:6e:fe:2d:a9:ff:68:93:f9:42:
         45:82:f2:ce:85:77:44:10:af:ce:fc:74:6b:95:89:a2:b9:19:
         f7:f4:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:48:28 2025 by rpki-client