Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
File:                     q5udbmrCgujBAADMPbxK3z_gH-I.mft (raw, json)
Hash identifier:          N5vSKmHKctZ0T3c+qGW8xf0jYfLNlBf6zNfmMHW8uSg=
Subject key identifier:   C2:F8:5A:56:92:AC:91:21:A3:7A:0E:19:62:69:05:58:65:DE:FF:53
Authority key identifier: AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2
Certificate issuer:       /CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
Certificate serial:       019747E7A486EA0F526C37389BF0D301B28E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
Manifest number:          0902
Signing time:             Sat 07 Jun 2025 01:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:52 +0000
Files and hashes:         1: OO8l-5f2KIASeQaCCtzj9OodMu8.roa (hash: 4WUwhvm+xR9jyg+ZUAOpnMkPPHdoXhkYYKLfdNvRCmY=)
                          2: q5udbmrCgujBAADMPbxK3z_gH-I.crl (hash: kwKj57lVg9soYEXGApciMtAZLlkf0yTutvd946SljJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:a4:86:ea:0f:52:6c:37:38:9b:f0:d3:01:b2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9b9d6e6ac282e8c10000cc3dbc4adf3fe01fe2
        Validity
            Not Before: Jun  7 01:00:52 2025 GMT
            Not After : Jun  8 01:00:52 2025 GMT
        Subject: CN=c2f85a5692ac9121a37a0e196269055865deff53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:3c:2d:f5:e2:d4:de:a8:07:85:45:99:e1:
                    9e:36:c4:e9:01:c7:1e:a3:9b:47:13:f9:b4:08:18:
                    0f:8d:94:ad:eb:e7:70:df:46:59:c0:9f:e0:c4:b3:
                    4b:23:9f:3e:02:35:6e:e5:e4:04:e8:2d:66:3c:19:
                    a5:f1:e7:26:17:f7:ed:f1:a3:21:55:79:b6:1e:c1:
                    52:b4:dc:f7:0c:c0:f0:0f:11:10:22:bb:7c:e3:e6:
                    be:04:b8:a1:ef:f3:1b:7a:53:4d:49:54:23:1e:84:
                    1e:52:87:dd:bf:e8:22:4b:6c:23:43:22:44:c7:ac:
                    2b:e6:0e:c3:f4:ae:da:ca:5b:54:57:f6:d3:f2:2e:
                    e4:ba:3a:25:11:6f:06:e8:af:3d:f7:03:5d:00:26:
                    05:8c:f9:03:55:2d:cb:d0:b3:99:31:eb:eb:45:17:
                    75:6c:3f:fa:74:2d:26:87:4c:0e:f7:90:21:81:2e:
                    ff:3a:cd:17:f7:9d:cf:1d:57:cd:1e:ec:74:39:c5:
                    aa:cb:d8:9a:e3:b2:68:31:b1:8e:21:13:34:64:19:
                    21:17:18:3b:ba:25:9b:b5:be:e1:5e:26:6e:c8:d9:
                    c9:ca:ab:45:35:5b:3c:a9:9e:6a:d0:15:8a:e4:51:
                    7c:4f:d4:e0:52:c4:d9:53:c8:61:0d:9c:9f:3d:97:
                    8c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F8:5A:56:92:AC:91:21:A3:7A:0E:19:62:69:05:58:65:DE:FF:53
            X509v3 Authority Key Identifier:
                keyid:AB:9B:9D:6E:6A:C2:82:E8:C1:00:00:CC:3D:BC:4A:DF:3F:E0:1F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5udbmrCgujBAADMPbxK3z_gH-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/87f491-95c9-4f41-b48e-1cec1a0ee98b/1/q5udbmrCgujBAADMPbxK3z_gH-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:33:ff:84:9d:f6:55:57:92:3a:56:78:82:36:07:4e:0e:d7:
         2d:39:29:1b:a5:45:7b:cd:64:3f:ac:18:32:4e:b0:f9:d0:d4:
         8c:1f:28:90:48:ae:c9:4d:01:4d:b2:a3:5f:16:9a:67:da:fa:
         2a:ff:4d:a4:ee:70:5d:2b:28:a5:f3:6e:32:4c:97:5a:30:e2:
         ba:4a:20:8d:1f:fc:29:04:01:43:b1:d0:98:5f:ac:77:9c:d1:
         5b:76:eb:d2:d3:b4:fe:9c:57:da:9d:54:c4:61:04:c5:9c:71:
         b4:2a:fe:5b:1f:36:c0:fa:36:40:88:3c:3f:88:df:03:9c:ac:
         e6:bc:9a:e4:21:67:e2:66:6b:e9:8d:29:9e:9c:10:6c:e4:e9:
         25:ae:4b:f5:91:bc:3c:94:57:38:96:05:e9:19:90:7e:91:09:
         be:90:7a:b0:ce:e8:1b:00:c6:69:81:ee:f3:5e:b4:05:7e:b0:
         cf:60:5e:9f:9b:b9:12:76:7b:52:71:21:a1:3a:8a:9c:35:db:
         36:85:74:38:52:dd:56:b9:3a:1a:d3:ad:96:77:70:f9:db:c3:
         98:3d:83:8c:91:ed:3e:40:3e:7d:7f:74:97:94:e7:3d:2b:3e:
         f8:df:33:3c:60:58:01:e3:ae:5e:37:51:61:17:85:88:2b:f7:
         c0:dc:51:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:27 2025 by rpki-client