Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File:                     51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier:          GD8Ynf9dcUS4BABJuWs9ChxWp1Y/+Ju8rv5ydGqv+Fs=
Subject key identifier:   BE:00:D6:57:71:35:BD:E0:59:1F:0E:BD:DB:E4:1F:54:7E:6B:56:05
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer:       /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial:       019846648EF308C0AAB30C458118173A1F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number:          092B
Signing time:             Sat 26 Jul 2025 11:00:51 +0000
Manifest this update:     Sat 26 Jul 2025 11:00:51 +0000
Manifest next update:     Sun 27 Jul 2025 11:00:51 +0000
Files and hashes:         1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: cEinNOBl0T5g5DPP3anYtBu9TDd85TkEtOlXWvHa4CM=)
                          2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:64:8e:f3:08:c0:aa:b3:0c:45:81:18:17:3a:1f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
        Validity
            Not Before: Jul 26 11:00:51 2025 GMT
            Not After : Jul 27 11:00:51 2025 GMT
        Subject: CN=be00d6577135bde0591f0ebddbe41f547e6b5605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:74:1d:81:8b:47:61:cf:37:a0:4f:f5:d2:
                    54:f2:60:26:07:ad:e1:9f:a0:25:72:89:52:84:f1:
                    a6:07:de:ef:22:35:3c:73:df:87:11:49:da:3a:28:
                    a8:7e:07:7b:ad:1a:32:32:f4:e7:d5:1d:19:03:c1:
                    67:c1:2b:d6:d9:f4:6a:37:54:f4:6c:49:fc:1e:18:
                    37:32:12:d2:7a:a3:97:b1:3b:90:d5:12:2c:e7:58:
                    88:cb:76:cf:69:01:47:3f:d1:bb:1f:b3:c6:e1:5a:
                    63:54:f8:02:5d:d6:35:cd:8c:87:5d:ee:2a:14:e3:
                    39:37:d9:22:10:2b:ed:cb:1b:94:bc:92:5c:c6:af:
                    cd:e2:d2:51:6d:c7:fd:1d:eb:e1:e3:8e:d4:a0:16:
                    5f:0e:0f:39:14:d3:6e:db:89:6f:77:df:12:a5:ed:
                    54:2e:3a:d3:71:9c:33:28:fe:89:59:54:4b:b0:24:
                    22:e3:85:0d:26:b3:ac:da:47:df:dd:c1:13:c2:36:
                    c7:b6:04:e8:56:b3:88:b9:99:c8:3f:cf:48:31:15:
                    b9:0a:a9:3c:29:a9:0c:bd:f3:81:ce:d0:27:d2:c4:
                    17:c9:64:4f:40:5f:43:a4:bb:20:ac:33:93:59:c6:
                    23:4b:b0:f7:d5:fc:1d:b2:42:e1:b6:a7:c1:b5:2c:
                    f9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:00:D6:57:71:35:BD:E0:59:1F:0E:BD:DB:E4:1F:54:7E:6B:56:05
            X509v3 Authority Key Identifier:
                keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:1c:c6:69:42:5c:f4:df:dc:10:59:48:70:21:f1:29:6b:27:
         fc:05:e6:39:d3:98:8c:a8:e9:c5:21:d8:a6:16:b7:a2:08:b6:
         94:43:2f:a9:4f:61:ec:fc:1a:92:9e:56:a3:77:66:4f:b2:01:
         0f:84:98:c0:cb:6e:ce:6f:f5:0c:d7:a1:61:c4:07:41:fd:12:
         4d:2d:ab:53:ba:6c:7f:f7:1c:55:49:e3:a2:39:74:71:64:4e:
         b6:5e:43:f6:6e:c8:2b:da:9d:7e:11:c0:7a:8a:94:9b:fb:a9:
         b7:5e:a2:c1:51:78:08:90:6c:e3:b1:c2:91:ed:41:69:f5:28:
         64:51:b2:6e:1f:8f:40:9b:c5:27:43:6d:43:08:1e:66:20:e5:
         b8:54:34:b7:d1:35:11:99:1a:ad:cd:e4:13:45:99:3f:03:e5:
         d4:2e:fd:d5:74:22:64:92:e6:cc:cd:67:ff:ed:34:84:1b:2a:
         bb:b7:2d:15:2b:27:f7:72:7c:90:f5:35:68:c4:28:52:6e:88:
         8b:c6:ff:69:1f:be:43:22:72:ef:7d:ef:cf:0c:cf:08:0d:dd:
         0f:57:d3:e1:ba:70:2a:1a:c1:4b:1d:35:4b:4b:31:e9:ff:2b:
         dc:fc:e9:07:35:b0:15:04:86:54:52:32:c0:ee:a6:fe:a3:1a:
         34:8e:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:11:57 2025 by rpki-client