Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
File:                     F5meIRkUpo24Pq8_f9OExT50dFU.mft (raw, json)
Hash identifier:          5N6C/29PI+xqNXpbToQSIIlaJhTW57CwLwp0yB069B0=
Subject key identifier:   17:1A:A2:D7:23:F3:EB:64:19:E1:24:25:3D:C7:53:6E:07:8D:43:13
Authority key identifier: 17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55
Certificate issuer:       /CN=17999e211914a68db83eaf3f7fd384c53e747455
Certificate serial:       01984A413653990A6FB3DAE57E860590C18D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
Manifest number:          144A
Signing time:             Sun 27 Jul 2025 05:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:44 +0000
Files and hashes:         1: F5meIRkUpo24Pq8_f9OExT50dFU.crl (hash: +WQXG0q0bU6iA2pkdF2FIYoEKXRpzTUVJSp9bIA+ok8=)
                          2: jdjC0ww4NA_4Jmou2NIqk7PauVQ.roa (hash: DpdKiPWViVyeUlQa6RYjsV7wbTabm/grnxVTUMHIZOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:36:53:99:0a:6f:b3:da:e5:7e:86:05:90:c1:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17999e211914a68db83eaf3f7fd384c53e747455
        Validity
            Not Before: Jul 27 05:00:44 2025 GMT
            Not After : Jul 28 05:00:44 2025 GMT
        Subject: CN=171aa2d723f3eb6419e124253dc7536e078d4313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:4e:1c:ab:b9:3c:f7:ec:06:d0:96:10:24:
                    6d:3e:4a:29:ef:1f:e3:d3:b1:55:f6:21:d3:65:39:
                    04:aa:4e:63:37:7b:85:3b:65:c1:d3:3b:08:1c:04:
                    93:06:0c:65:20:a2:31:fd:b9:84:9b:be:39:a7:20:
                    05:92:c5:a1:ac:87:1c:41:9a:5f:b9:5a:1c:a2:46:
                    51:99:31:76:62:52:12:49:a9:5f:e1:40:7a:7d:33:
                    99:74:58:43:11:4a:b9:19:41:ba:ce:1d:94:8a:b3:
                    03:10:00:69:5f:3c:23:11:74:4d:f8:4b:fb:90:0f:
                    5c:67:13:4c:1d:6a:a8:80:d0:1f:34:29:94:c9:db:
                    05:fc:41:e3:cd:93:b4:68:1d:ec:c1:f3:29:15:c9:
                    9b:f3:c4:d8:68:80:61:72:8a:c7:ab:f5:fa:43:30:
                    c5:14:07:46:94:27:26:fa:46:7d:5b:0b:c3:e9:07:
                    58:44:cc:32:04:0f:a7:61:ec:95:36:be:3b:24:f8:
                    fc:4d:47:d1:7d:d2:41:f6:d4:b6:91:a8:3b:d5:33:
                    bf:63:2a:57:31:31:8d:a1:95:c0:09:52:48:9f:01:
                    91:b0:b4:cd:dc:8e:a4:8f:f0:68:28:12:c8:d2:ff:
                    6a:f3:ab:34:36:9d:3e:20:a5:98:e4:1e:85:ff:41:
                    eb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1A:A2:D7:23:F3:EB:64:19:E1:24:25:3D:C7:53:6E:07:8D:43:13
            X509v3 Authority Key Identifier:
                keyid:17:99:9E:21:19:14:A6:8D:B8:3E:AF:3F:7F:D3:84:C5:3E:74:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5meIRkUpo24Pq8_f9OExT50dFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea117a-412a-49e2-890f-4bb43ba3cde3/1/F5meIRkUpo24Pq8_f9OExT50dFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:b4:b2:e1:df:8b:43:da:49:7b:49:d2:19:e5:4c:4e:7a:a2:
         b9:7c:b0:f2:68:ed:14:36:c0:d3:66:e9:b1:b6:3d:85:fd:7b:
         78:b9:2c:2c:8c:10:a4:d0:c0:9a:6d:c4:88:7a:31:43:71:41:
         be:97:47:3c:1b:90:f5:6f:e0:17:b3:c2:84:5e:4e:2a:89:2f:
         ed:48:84:b1:a0:3b:95:fa:18:8c:87:96:b3:dd:dc:e5:84:21:
         99:c0:54:d3:13:e2:fe:57:9d:c7:2b:c7:0b:5c:fe:f3:42:f8:
         dd:0f:1f:b1:59:de:08:35:55:05:70:48:7b:24:05:9f:aa:1c:
         d6:ec:b5:45:8a:35:c2:b7:e7:c6:3d:9a:c5:52:02:23:d0:ce:
         65:ad:d5:a7:22:78:2c:e8:31:70:c0:be:7f:03:1c:b1:33:8b:
         36:d7:86:56:ed:fd:a5:4b:5a:57:1e:35:44:4b:7c:25:b9:98:
         f0:2f:4b:2f:c7:e0:2f:7d:db:24:b3:5a:11:ed:a8:31:7c:1b:
         2e:18:78:41:74:93:2f:d0:78:fc:4e:9b:4d:a4:d4:83:05:8f:
         e2:80:0d:49:25:e7:3f:32:dd:43:2c:cf:81:e3:85:db:45:ac:
         47:21:b9:df:70:d3:ad:7f:0d:16:50:2c:01:75:60:e1:0d:85:
         a5:b7:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:07:27 2025 by rpki-client