Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
File:                     5fbO0n_GD5APrBt1HbHuS_eFqrM.mft (raw, json)
Hash identifier:          mDkOUfkd3A8HFBVFhRf0XCwVGnpDoPIRL+Dt/2B17h0=
Subject key identifier:   55:85:CF:16:52:3B:89:03:0A:9F:DF:10:8B:82:44:D4:90:24:EF:30
Authority key identifier: E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3
Certificate issuer:       /CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
Certificate serial:       019846D20327C318559577464D977F525074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
Manifest number:          1604
Signing time:             Sat 26 Jul 2025 13:00:25 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:25 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:25 +0000
Files and hashes:         1: 5fbO0n_GD5APrBt1HbHuS_eFqrM.crl (hash: c2QJM+v7jjFWY+SUdf5J2PdSmlKFesLUnz5+OJ4KQcM=)
                          2: nBqhUdLMvMF3um2Xd5cemRyaDIY.roa (hash: iNrSMpvfd0IaunQuUuNNAQ8NKO2bkt2NnRjfVSrKAzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:03:27:c3:18:55:95:77:46:4d:97:7f:52:50:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f6ced27fc60f900fac1b751db1ee4bf785aab3
        Validity
            Not Before: Jul 26 13:00:25 2025 GMT
            Not After : Jul 27 13:00:25 2025 GMT
        Subject: CN=5585cf16523b89030a9fdf108b8244d49024ef30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:33:db:4f:c4:2a:eb:a5:f5:dc:56:b3:b0:
                    05:82:e3:83:09:bc:ad:b3:35:25:88:17:32:ff:ad:
                    76:3f:b7:90:89:93:d3:ee:e9:67:c2:12:4c:05:2e:
                    85:22:78:2b:12:8e:7f:0c:79:74:dc:a3:10:b8:fc:
                    18:35:36:6c:7d:18:11:08:28:bb:48:7d:4a:6d:52:
                    f2:80:87:df:b6:5d:dc:48:55:90:a4:46:a9:eb:09:
                    ed:f6:a3:45:54:64:87:8a:3b:75:3a:34:25:d0:a5:
                    f4:da:39:a4:9e:e8:44:ad:7a:c7:88:7b:f9:82:9e:
                    9e:b6:16:36:05:54:4e:21:2c:84:ec:a0:a3:a6:e6:
                    1e:f5:ec:e1:7a:27:0b:ec:ec:93:69:b2:b0:4c:2c:
                    3f:08:e1:f3:da:99:29:24:2d:e8:65:d7:89:b2:5c:
                    39:eb:95:5d:e3:12:9a:12:8a:7f:66:9a:1d:af:38:
                    7a:45:a7:5c:f7:64:6e:d7:18:00:e2:01:d3:da:31:
                    6b:ee:27:14:c3:bd:01:12:b4:e6:b9:a4:c8:ab:e9:
                    fe:e9:ab:38:13:9f:1e:0d:71:16:72:41:8b:42:fd:
                    8a:02:1c:ee:85:64:fc:fb:74:85:a6:c0:b9:62:d9:
                    9b:a8:d1:75:f4:c3:a1:a3:83:c7:8b:77:3e:0e:65:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:85:CF:16:52:3B:89:03:0A:9F:DF:10:8B:82:44:D4:90:24:EF:30
            X509v3 Authority Key Identifier:
                keyid:E5:F6:CE:D2:7F:C6:0F:90:0F:AC:1B:75:1D:B1:EE:4B:F7:85:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fbO0n_GD5APrBt1HbHuS_eFqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/f39a17-8387-4fba-9ed0-3ead7792073c/1/5fbO0n_GD5APrBt1HbHuS_eFqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:90:6e:42:29:87:63:a2:71:08:e5:d0:ff:f8:02:cd:c9:0a:
         7f:85:e8:66:11:1c:3c:c4:30:83:ea:4a:8c:e8:52:5d:58:30:
         13:ca:c2:e7:01:76:08:8d:45:ed:1d:d5:d0:81:ed:f5:32:36:
         eb:ea:9c:f1:c0:0a:4c:09:94:6d:54:76:7c:84:73:86:2d:65:
         c8:56:ab:6d:61:75:09:ba:3b:61:bc:37:ee:87:83:de:bf:42:
         05:72:13:1b:89:7a:94:2c:32:5f:14:fc:70:70:75:fb:68:e7:
         d3:bc:4c:5d:94:54:3b:88:51:63:60:5b:d5:a4:ce:01:3a:17:
         5b:cb:10:88:13:db:c7:08:d6:f6:82:a2:88:2e:5b:24:cb:ed:
         5d:f3:2d:f8:4d:d8:f3:75:0a:dc:fd:37:e8:a1:b1:82:9e:f1:
         21:9b:50:c9:3e:f0:02:09:7f:6e:30:1a:ab:8d:cd:2e:b3:6f:
         df:cb:4c:2d:67:53:9a:b6:f0:bd:09:63:3c:fb:f9:97:fb:0c:
         76:95:7e:d8:16:dd:bf:36:78:06:22:61:9b:a9:d2:0a:cb:24:
         08:5d:cb:86:22:98:01:14:e3:7b:f3:87:7d:42:1f:8d:2d:a5:
         46:d5:4b:8d:d5:1a:24:2a:8e:45:10:a1:8f:75:9e:5e:53:38:
         d0:a8:66:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0gMnwxhVlXdGTZd/UlB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZjZjZWQyN2ZjNjBmOTAwZmFjMWI3NTFkYjFlZTRiZjc4
NWFhYjMwHhcNMjUwNzI2MTMwMDI1WhcNMjUwNzI3MTMwMDI1WjAzMTEwLwYDVQQD
Eyg1NTg1Y2YxNjUyM2I4OTAzMGE5ZmRmMTA4YjgyNDRkNDkwMjRlZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl34z20/EKuul9dxWs7AFguODCbyt
szUliBcy/612P7eQiZPT7ulnwhJMBS6FIngrEo5/DHl03KMQuPwYNTZsfRgRCCi7
SH1KbVLygIfftl3cSFWQpEap6wnt9qNFVGSHijt1OjQl0KX02jmknuhErXrHiHv5
gp6ethY2BVROISyE7KCjpuYe9ezheicL7OyTabKwTCw/COHz2pkpJC3oZdeJslw5
65Vd4xKaEop/Zpodrzh6Radc92Ru1xgA4gHT2jFr7icUw70BErTmuaTIq+n+6as4
E58eDXEWckGLQv2KAhzuhWT8+3SFpsC5YtmbqNF19MOho4PHi3c+DmUdtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWFzxZSO4kDCp/fEIuCRNSQJO8wMB8GA1UdIwQY
MBaAFOX2ztJ/xg+QD6wbdR2x7kv3haqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mMzlhMTctODM4Ny00ZmJhLTllZDAt
M2VhZDc3OTIwNzNjLzEvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9mMzlhMTctODM4Ny00ZmJhLTllZDAtM2VhZDc3OTIwNzNj
LzEvNWZiTzBuX0dENUFQckJ0MUhiSHVTX2VGcXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApBuQimH
Y6JxCOXQ//gCzckKf4XoZhEcPMQwg+pKjOhSXVgwE8rC5wF2CI1F7R3V0IHt9TI2
6+qc8cAKTAmUbVR2fIRzhi1lyFarbWF1Cbo7Ybw37oeD3r9CBXITG4l6lCwyXxT8
cHB1+2jn07xMXZRUO4hRY2Bb1aTOAToXW8sQiBPbxwjW9oKiiC5bJMvtXfMt+E3Y
83UK3P036KGxgp7xIZtQyT7wAgl/bjAaq43NLrNv38tMLWdTmrbwvQljPPv5l/sM
dpV+2BbdvzZ4BiJhm6nSCsskCF3LhiKYARTje/OHfUIfjS2lRtVLjdUaJCqORRCh
j3WeXlM40Khmdg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:03:34 2025 by rpki-client