Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
File:                     iF5uZejXQYIDljRWbNH6KysyVwI.mft (raw, json)
Hash identifier:          NrLGLumhoeVg9Yw87g/yEaCoguuf+6me5N2ENHfjrcU=
Subject key identifier:   E4:5E:ED:B7:62:95:0D:27:7A:7D:71:69:97:19:CF:CF:E1:5B:96:CE
Authority key identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
Certificate issuer:       /CN=885e6e65e8d74182039634566cd1fa2b2b325702
Certificate serial:       01985C112E820CAF9C646D2D2E354C8685CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
Manifest number:          020B
Signing time:             Wed 30 Jul 2025 16:01:26 +0000
Manifest this update:     Wed 30 Jul 2025 16:01:26 +0000
Manifest next update:     Thu 31 Jul 2025 16:01:26 +0000
Files and hashes:         1: 7R9_GJs-RL0ErJSF-LSh2qvUnoE.roa (hash: vAKa7err3VX58GgPpqscTS8KcHYZ802QYuzRZdVwrE8=)
                          2: iF5uZejXQYIDljRWbNH6KysyVwI.crl (hash: TjTJB0tiO9uTcMoDjP3W+s7Kdg6vUjEUmKi2Rc/UcQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 15:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5c:11:2e:82:0c:af:9c:64:6d:2d:2e:35:4c:86:85:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885e6e65e8d74182039634566cd1fa2b2b325702
        Validity
            Not Before: Jul 30 16:01:26 2025 GMT
            Not After : Jul 31 16:01:26 2025 GMT
        Subject: CN=e45eedb762950d277a7d71699719cfcfe15b96ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:55:96:d0:7f:4d:85:5d:b6:cb:b0:05:1e:0f:
                    f9:f6:20:02:95:96:73:4b:32:be:7c:14:1b:58:35:
                    79:22:5a:e4:eb:52:bf:67:70:0f:de:49:00:f0:4b:
                    db:c1:4c:19:f2:5d:08:c5:f6:13:0d:d5:62:30:41:
                    c1:69:aa:54:8d:ae:e0:0a:62:b4:39:fe:c6:b7:af:
                    0e:d0:9d:90:fa:bb:93:1f:19:5f:80:f8:aa:c1:09:
                    a5:22:b2:c5:ba:66:2b:26:8f:f8:f2:41:99:ee:45:
                    17:6f:45:6d:4c:13:0d:95:45:ba:d8:c7:12:b0:2c:
                    32:72:39:cf:5a:2a:1b:b9:75:27:78:d9:3c:44:17:
                    a7:ef:4b:ee:a6:45:7e:8f:af:24:9d:13:33:01:e2:
                    77:65:1a:aa:16:69:16:63:81:51:33:42:75:cd:71:
                    ce:c9:f2:23:2f:d4:82:2b:c7:95:ed:26:35:68:87:
                    25:90:ed:7e:d9:57:ec:b0:6d:1d:88:62:b8:d0:78:
                    5e:d8:3c:1b:bc:9a:d7:48:ab:1b:71:d3:a0:7b:60:
                    93:44:5d:bb:6d:88:7c:8f:28:8b:60:7e:d9:13:f2:
                    3a:be:6e:39:ab:42:11:af:91:bc:1f:e3:5c:96:1e:
                    92:5d:e9:e2:9d:4f:d6:93:5a:af:fb:17:92:d4:5d:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5E:ED:B7:62:95:0D:27:7A:7D:71:69:97:19:CF:CF:E1:5B:96:CE
            X509v3 Authority Key Identifier:
                keyid:88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b1:ed:23:58:f7:3e:df:e8:d1:95:43:62:b1:17:78:06:16:
         84:a5:23:13:cc:9a:fa:7b:27:08:65:3d:49:27:ce:33:78:20:
         f6:1e:8b:2f:97:4c:ea:26:b1:63:7f:20:3a:c3:85:8f:9d:df:
         9f:bc:9e:c2:79:07:60:b3:63:be:ca:63:06:df:33:aa:c7:96:
         b1:24:b6:91:21:13:ad:7a:32:44:bc:af:d3:91:4e:f4:30:2e:
         a9:03:99:e8:1e:4f:53:76:a9:f2:16:bc:d4:0c:14:86:f2:85:
         5e:3c:e6:6e:6c:5e:9b:9b:20:90:90:bc:08:71:5a:9c:6f:8a:
         5e:1b:7b:2b:5f:08:dd:b4:97:a5:f2:7d:d2:90:79:98:a6:6d:
         04:75:94:0e:b5:77:c0:5f:7b:eb:40:a5:a9:72:b2:13:f8:b1:
         a4:42:e1:21:c5:bd:22:bd:ea:cf:0b:25:c6:21:b7:0c:ea:83:
         36:6f:2e:d0:43:db:d7:39:78:e3:5a:16:d3:7f:ee:96:34:5a:
         d2:8a:91:61:ab:87:9b:ae:e9:2d:7b:5c:7c:67:12:5d:72:b9:
         ca:4d:65:47:93:e5:57:92:a9:e6:da:72:75:b4:b2:4a:60:d5:
         58:98:0a:f0:f6:e3:3a:56:98:9b:bf:ca:5d:d3:81:5e:df:59:
         d6:8f:e7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 17:37:18 2025 by rpki-client