Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
File:                     5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json)
Hash identifier:          oOCpRKA+eNuNhcvpi6D8E1mVxKxOjm2DCp64Kyn3hqE=
Subject key identifier:   2F:EE:E2:2A:1F:13:03:87:B8:B2:40:72:25:6A:A4:41:88:71:87:39
Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Certificate issuer:       /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Certificate serial:       019846641319A84A1A6D0B3AAA984EB3A87E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
Manifest number:          05ED
Signing time:             Sat 26 Jul 2025 11:00:20 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:20 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:20 +0000
Files and hashes:         1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: 2BzMonTepwtw1zAuQHdwdA+jo9/10JdvbcwKJ96L/gE=)
                          2: zwhatF5o3yk6nLXIa0yxqzP0ZTc.roa (hash: 9S00G7VwkBsXnXA2C5JQWmhqMbRgsqzBdUuOpwkdR1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:13:19:a8:4a:1a:6d:0b:3a:aa:98:4e:b3:a8:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
        Validity
            Not Before: Jul 26 11:00:20 2025 GMT
            Not After : Jul 27 11:00:20 2025 GMT
        Subject: CN=2feee22a1f130387b8b24072256aa44188718739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:55:e5:e5:55:6a:37:fd:7f:c7:fd:b2:66:8e:
                    5e:06:8d:1c:99:ee:c2:1a:9f:6f:4f:fa:e8:d3:c3:
                    b0:5e:8d:7c:c4:6e:ae:de:f4:e5:83:66:da:ec:c5:
                    ec:c5:51:bd:69:a2:1a:79:55:a4:f1:af:97:2c:09:
                    65:af:fc:70:9a:03:d4:b1:d0:c8:99:ef:78:50:6a:
                    27:c3:98:d7:26:56:74:e6:5c:c0:ae:a9:4b:9c:fe:
                    5e:bd:b3:b8:aa:d3:6e:48:a9:3d:55:76:58:4b:49:
                    97:b9:1c:11:30:0c:b4:0e:1a:20:56:25:90:c4:2f:
                    79:4c:76:03:ad:9e:65:3e:43:61:65:ac:51:0c:f1:
                    81:d0:a5:89:fb:32:46:cb:b8:d9:c2:c3:fa:43:ea:
                    cb:22:f0:d5:29:d1:5c:5b:89:62:4a:75:66:56:06:
                    a3:0b:11:15:d9:d6:df:9a:a7:19:ac:ce:45:b6:17:
                    2e:03:33:ee:28:6b:1b:24:bc:5f:8e:55:34:f2:c8:
                    7b:5f:61:bd:13:77:9b:36:a0:26:08:2b:4b:0d:83:
                    34:99:0f:9d:1d:a7:87:ab:b5:de:1c:a0:e5:69:e4:
                    70:aa:aa:1c:80:0d:1c:d2:4f:90:01:0a:b8:f2:09:
                    f4:15:5e:a1:e1:5f:a5:59:61:d5:28:27:db:c1:ec:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EE:E2:2A:1F:13:03:87:B8:B2:40:72:25:6A:A4:41:88:71:87:39
            X509v3 Authority Key Identifier:
                keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3f:64:87:1e:32:cc:25:8d:2a:36:b7:62:b1:8e:57:97:ef:
         92:89:4a:cd:ba:4f:d5:ac:da:01:73:0e:25:09:32:59:25:cc:
         17:bc:47:41:eb:ca:3f:e9:99:13:a7:42:b2:5d:b5:e9:70:16:
         22:a3:3c:e6:34:d9:a6:db:d2:60:be:9e:6a:78:46:e2:52:79:
         43:1e:16:17:6a:b9:43:3d:58:5a:92:25:d3:eb:54:d3:71:11:
         10:8d:a6:5d:c7:ad:6e:19:ee:20:2a:66:3a:67:e2:30:66:f0:
         22:29:67:db:cb:3c:0d:72:82:46:3b:9b:5b:99:28:42:41:6a:
         20:7c:6a:9d:8f:e4:4e:9e:1f:f7:80:b2:5e:20:f9:5a:50:11:
         f7:c7:bb:08:91:87:4e:4f:b9:7f:de:ab:ac:27:82:38:89:7a:
         6f:3e:1c:aa:93:ed:9c:8c:3b:8c:cf:6f:95:5a:19:6c:3b:fe:
         bd:07:ef:34:dc:ee:f4:d9:23:fd:d2:16:3d:d4:18:cd:6c:13:
         94:11:76:36:a9:ed:25:d5:42:9c:e0:3a:c1:17:1a:04:48:89:
         60:d7:89:83:13:5e:61:a7:bc:08:13:b2:5e:45:db:f6:e4:69:
         20:36:60:0c:95:38:e7:f7:6f:ee:8a:10:d0:29:5c:1b:3a:6b:
         48:fe:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:12 2025 by rpki-client