Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File:                     5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier:          VolOf8MteoC/45dXwCH2EG81tuuY27U30dTy69nOQz8=
Subject key identifier:   BD:B7:D7:F4:41:92:E2:8E:FC:B5:C3:18:A4:8A:27:14:71:0F:7B:4C
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer:       /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial:       0198477731D77BB4EBFA029226662A65C512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 16:00:50 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:50 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:50 +0000
Files and hashes:         1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: DJglnen5WMv7Z7DeG7AihEqYy75VIqWoDrMSPniMBF8=)
                          2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:31:d7:7b:b4:eb:fa:02:92:26:66:2a:65:c5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
        Validity
            Not Before: Jul 26 16:00:50 2025 GMT
            Not After : Jul 27 16:00:50 2025 GMT
        Subject: CN=bdb7d7f44192e28efcb5c318a48a2714710f7b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:20:95:dc:58:a3:a4:15:b1:f4:72:5b:fa:
                    5c:f7:41:6b:b6:2f:a0:03:7b:b5:c4:46:41:54:ff:
                    54:fd:49:48:58:8b:3a:3b:c5:0a:3c:86:f6:60:2b:
                    dc:3f:30:9d:9a:83:3d:4e:4d:bf:3d:28:4d:e2:08:
                    49:35:fa:03:9f:09:14:ed:c1:94:a7:f3:a7:60:dd:
                    90:3f:4c:8e:ce:4a:4a:fc:3d:a3:ba:0a:8f:86:fd:
                    bb:67:d1:93:de:51:d2:50:7c:0f:f1:7f:7e:eb:12:
                    d3:96:f5:97:76:0d:7f:36:d0:c4:16:53:50:7f:a3:
                    e0:6a:d4:05:c7:17:bd:41:b8:55:0a:29:6d:da:49:
                    cd:46:ba:1b:8b:25:79:4d:82:73:e7:63:23:c3:62:
                    90:91:68:6e:f9:33:45:90:23:b1:98:3b:03:31:bd:
                    c8:e5:5c:6f:71:4c:6b:d6:83:ff:9a:93:5e:cf:84:
                    9d:58:25:47:71:ae:38:b1:a6:b8:55:79:9c:ae:3c:
                    4b:0d:be:48:cc:0d:19:a6:73:33:8a:b6:e5:58:26:
                    01:8c:f6:21:78:b0:26:77:05:07:ef:47:09:e9:a9:
                    3a:dc:13:4b:5c:44:e7:ee:e5:92:4b:ed:59:cb:51:
                    5c:a1:22:19:0f:8c:bb:ea:f0:c0:17:8c:1a:dc:05:
                    18:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B7:D7:F4:41:92:E2:8E:FC:B5:C3:18:A4:8A:27:14:71:0F:7B:4C
            X509v3 Authority Key Identifier:
                keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d6:21:2f:68:8f:a5:3a:fb:9a:1f:a6:a0:5c:bf:fd:aa:96:
         08:e0:74:66:fb:98:1c:6d:ad:20:83:5e:9b:59:4f:d4:ec:70:
         d7:6c:94:32:f3:df:7c:f2:b0:10:55:cf:f0:d9:31:ea:14:06:
         08:06:93:a2:07:3f:38:70:25:3d:5c:80:54:6c:af:6d:04:6d:
         26:92:33:2d:2a:97:fb:d4:2b:bf:29:a0:5f:0e:ce:ca:d5:55:
         fc:13:7e:10:ba:78:24:98:41:4f:68:85:e9:b0:71:e0:04:08:
         ce:a2:43:e3:c5:ee:95:24:f0:01:08:13:73:ab:d3:2a:ea:7b:
         da:53:36:ae:e1:ea:dd:35:a9:2e:04:d4:a1:7a:22:6e:3f:df:
         0d:fe:fd:44:b0:aa:1c:bd:5d:03:47:44:7c:1e:b8:ce:56:35:
         28:d7:90:d9:ef:ad:8c:d7:80:26:d8:2b:15:1f:76:c2:c0:ca:
         fd:9c:18:9b:89:20:f1:07:f9:8f:d5:66:ff:2a:ef:d6:5d:20:
         f7:db:9d:d0:8c:5c:e1:a7:5d:69:03:a6:d0:2f:68:c3:2b:9c:
         00:63:85:87:da:47:1b:73:28:4a:86:85:94:05:d5:3b:a5:da:
         d4:2c:1a:40:6a:f4:44:74:7d:31:f1:c4:d0:96:94:65:47:67:
         12:87:8a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:01:21 2025 by rpki-client