Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
File:                     5oS0UXk_YkGGF7yTT16CUT_Daok.mft (raw, json)
Hash identifier:          V0h9gSyUk/zN/gOITzrezePNUGOjJbKY0JDYNiP5UrE=
Subject key identifier:   D5:3F:39:CC:53:BC:47:46:F7:E4:FE:76:73:F9:C0:82:6F:CC:37:B5
Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Certificate issuer:       /CN=e684b451793f62418617bc934f5e82513fc36a89
Certificate serial:       0198488946BB4FEF96E130B2119A7426A80C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
Manifest number:          150D
Signing time:             Sat 26 Jul 2025 21:00:12 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:12 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:12 +0000
Files and hashes:         1: 5oS0UXk_YkGGF7yTT16CUT_Daok.crl (hash: c1E2Fnq6WpryI9y0rhJm6Yv1kTJlccGoJ2dhnGJ5cOU=)
                          2: VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa (hash: h1782ABvZxcb8lHBxbC/bEHNiNxIT1YjharjivSSmh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:46:bb:4f:ef:96:e1:30:b2:11:9a:74:26:a8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89
        Validity
            Not Before: Jul 26 21:00:12 2025 GMT
            Not After : Jul 27 21:00:12 2025 GMT
        Subject: CN=d53f39cc53bc4746f7e4fe7673f9c0826fcc37b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:37:99:dc:f6:65:55:50:7b:d9:86:b6:5d:
                    e9:3a:80:94:1b:58:37:52:d1:d8:23:b9:ef:c5:5c:
                    8b:91:2e:38:3a:2c:5a:18:98:c9:d7:0b:0e:33:09:
                    73:0c:ce:a2:81:fe:69:45:d7:bf:53:47:2c:a1:ce:
                    fc:f7:c4:c7:57:ec:5e:60:cd:3d:08:92:17:8f:5d:
                    db:f2:1d:15:d1:3b:14:a3:c0:94:ad:f7:94:84:1a:
                    79:51:b1:da:51:d6:c6:f5:55:4b:48:3a:38:2e:dd:
                    b3:66:1e:fa:4a:07:93:c6:1d:91:04:0a:9e:e1:ce:
                    34:30:63:7c:41:5a:4c:24:c2:e5:58:13:8b:e0:8b:
                    65:40:04:21:46:43:cc:ff:36:03:08:64:2d:d9:b0:
                    96:7f:ec:eb:4f:c9:1a:14:76:88:74:3d:86:c7:d3:
                    f5:16:9f:ba:cb:56:19:c2:68:5f:c5:86:22:8d:c3:
                    9a:35:b1:57:c3:0e:52:31:dc:e4:a4:cc:b1:2a:fc:
                    15:25:e5:fc:0f:8d:b5:51:d2:da:57:0d:e0:9a:1b:
                    42:75:e5:f7:cb:cf:5c:64:c7:b9:68:7f:4b:e1:1a:
                    79:6f:da:32:e1:d2:c7:cf:bd:70:51:cf:98:39:79:
                    e5:df:d1:64:df:6e:d2:b1:ad:ee:f5:3f:4c:87:49:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3F:39:CC:53:BC:47:46:F7:E4:FE:76:73:F9:C0:82:6F:CC:37:B5
            X509v3 Authority Key Identifier:
                keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:23:8f:76:fe:15:3a:9e:44:91:a3:d2:9d:8f:c1:79:29:bb:
         51:40:30:a2:24:ba:ea:ac:7a:2a:9f:2e:d9:5c:1b:93:c2:4f:
         4c:4a:f4:b9:63:12:cb:c4:cc:7c:6a:e7:eb:f0:c1:f5:22:d5:
         bd:90:8a:12:f6:04:67:c5:f3:01:17:2b:29:82:53:92:bf:39:
         e8:f6:90:d5:7a:d3:77:9e:9b:1e:ad:29:8d:ed:fe:c2:d1:aa:
         75:0c:a7:2d:11:b0:a1:d2:0f:d7:78:a3:17:2f:be:e4:5b:70:
         e9:54:1c:83:06:e3:47:73:a7:d4:d1:0a:0a:6d:2e:4f:2d:14:
         fd:65:bb:86:0c:13:3a:12:e6:4c:05:72:8f:d1:9f:38:f4:6f:
         06:ce:d2:32:4a:06:46:5b:44:45:bc:aa:d5:44:18:27:4e:90:
         f0:a6:fc:f9:03:99:17:00:2c:60:66:97:5c:c5:b0:77:94:eb:
         e2:08:d4:f2:4f:0a:09:2e:3f:0e:41:3a:11:ef:2d:50:85:59:
         7e:7f:46:c0:dc:6e:4a:2b:a9:b0:b6:1e:75:47:c8:aa:e3:29:
         0e:f9:71:88:5e:0a:f4:aa:81:3b:9e:2d:68:6d:be:93:81:d9:
         e2:19:41:b8:63:3c:81:bb:20:f7:3d:03:93:64:31:fd:54:04:
         f8:74:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:44:25 2025 by rpki-client