Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
File:                     5IKZWNgAyhrebhPKeygLIpzmYC4.mft (raw, json)
Hash identifier:          0TMaqN6mR7cSJA8la4Rvqdm5fxSi6D5FVgbDEkaO7oM=
Subject key identifier:   DB:8A:AD:E9:0E:D6:3F:39:27:AD:DD:25:6C:EE:07:12:61:DD:50:FD
Authority key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Certificate issuer:       /CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Certificate serial:       01984B53C230D241330EB37645F8F2364CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
Manifest number:          15FF
Signing time:             Sun 27 Jul 2025 10:00:37 +0000
Manifest this update:     Sun 27 Jul 2025 10:00:37 +0000
Manifest next update:     Mon 28 Jul 2025 10:00:37 +0000
Files and hashes:         1: 5IKZWNgAyhrebhPKeygLIpzmYC4.crl (hash: D3urYnEI3Zrjk2N56QBBWZjYKCOT+kSL3NSnqHXQ6xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:53:c2:30:d2:41:33:0e:b3:76:45:f8:f2:36:4c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
        Validity
            Not Before: Jul 27 10:00:37 2025 GMT
            Not After : Jul 28 10:00:37 2025 GMT
        Subject: CN=db8aade90ed63f3927addd256cee071261dd50fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:94:8f:f9:a5:71:b6:da:cb:86:65:a5:f2:
                    3d:1c:85:22:19:da:4c:99:ba:28:c2:ee:32:86:4a:
                    c7:2e:a6:62:0f:95:8c:5d:b5:99:c5:a4:43:ff:69:
                    17:3e:2a:be:7d:eb:2c:15:4c:2f:58:7e:c6:82:3e:
                    19:17:31:0b:cd:56:83:6f:4b:e8:e1:71:c0:e2:10:
                    8e:9d:8e:36:aa:6f:bc:8a:13:3f:d8:1b:a9:7a:3f:
                    ac:f6:c9:9c:5a:62:fa:3a:f9:9e:61:b6:86:39:58:
                    2e:9c:02:c9:57:08:da:3a:e9:9d:a0:56:4c:66:23:
                    f2:49:e8:56:84:73:d7:0c:35:03:17:f9:0d:1d:cd:
                    6f:af:c3:fe:07:43:8c:d2:6c:df:a5:57:0a:be:7a:
                    51:cd:70:91:fd:7a:97:f4:b4:3e:0d:ad:aa:7a:de:
                    3a:71:b0:54:00:0d:b7:9b:a9:ea:2b:93:67:60:58:
                    72:bf:c2:32:06:5d:d8:0d:e3:11:9b:db:dd:18:05:
                    2b:dd:53:2d:22:24:08:a0:fe:e2:39:7e:4e:6e:e1:
                    e5:84:ad:2c:6b:98:27:e5:51:42:e6:ba:6f:d9:de:
                    83:18:d5:2e:a5:48:3b:b0:85:5d:47:1e:49:d4:9c:
                    17:c5:fa:f5:19:66:c1:ed:3c:68:c3:34:3b:12:22:
                    1c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8A:AD:E9:0E:D6:3F:39:27:AD:DD:25:6C:EE:07:12:61:DD:50:FD
            X509v3 Authority Key Identifier:
                keyid:E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8d:de:1e:60:1e:f2:b2:4e:1d:0a:c0:7f:a8:b7:b8:9e:4b:
         aa:e3:12:09:03:7e:7f:a9:50:15:1a:e5:9a:0f:c3:0a:d9:11:
         6a:4c:f3:87:e2:c1:be:ee:a4:ab:2a:c3:b5:9f:f6:ae:e1:8c:
         4d:94:13:1b:f4:d8:b7:e1:d4:9a:e1:ba:0e:93:d5:67:4b:0c:
         19:70:c8:47:ab:86:32:02:e2:db:24:db:af:3a:38:40:34:20:
         c0:c3:d3:7e:31:98:e2:22:4c:02:99:61:4a:ff:9f:89:b7:eb:
         ae:f9:8b:17:9b:6a:53:fe:6f:a9:f2:78:cf:18:0c:0d:3f:6b:
         74:ad:11:ab:33:cf:5e:39:1b:7b:7f:04:65:cf:5f:c0:38:f1:
         a3:c4:28:93:ec:f4:df:44:8c:b9:81:be:51:e6:b0:3a:65:7e:
         ff:0d:29:4f:67:49:91:86:a2:a3:65:09:fe:d1:56:24:b5:dc:
         a3:77:31:6f:9b:65:3d:4d:49:c4:39:db:c6:45:47:8c:7c:cb:
         93:ec:c0:d2:f9:93:da:ad:af:a8:5a:8b:ee:7b:e9:42:74:67:
         7b:ed:32:c6:b2:00:b7:dc:23:16:33:e4:ff:3c:64:5f:d1:db:
         48:20:e6:9a:cd:ea:db:07:5a:ad:4e:53:d9:c5:d6:bf:fb:6a:
         bc:8a:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:11:20 2025 by rpki-client