Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
File:                     5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft (raw, json)
Hash identifier:          pTn4ogFdXuoePVKIJt5RtY3C/eZcMsnyGeVxh+81fd8=
Subject key identifier:   51:70:5A:0B:39:9C:00:6E:58:81:AF:80:47:A9:5C:C7:90:70:4B:D9
Authority key identifier: E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85
Certificate issuer:       /CN=e566e0e51628554cd92634b711ab758f8467c485
Certificate serial:       01964D100FE083E229F1BB8AC537A137CE37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 08:00:20 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:20 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:20 +0000
Files and hashes:         1: 5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl (hash: sLE6Cm7SBckrtmBt3O0Coymcoekhvghv3XL7Gj4/EnE=)
                          2: wXYrr5S6sLNczud4QNKL5j-Xgqk.roa (hash: 4Keb/PY19EWO9qNRBP6d1iNJWH59G6NwS5aeFCqxnF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:10:0f:e0:83:e2:29:f1:bb:8a:c5:37:a1:37:ce:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e566e0e51628554cd92634b711ab758f8467c485
        Validity
            Not Before: Apr 19 08:00:20 2025 GMT
            Not After : Apr 20 08:00:20 2025 GMT
        Subject: CN=51705a0b399c006e5881af8047a95cc790704bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:9f:3a:51:cc:88:76:e7:49:fa:b2:37:b3:
                    15:5d:af:76:d1:27:e6:e3:70:57:1d:ea:0e:27:df:
                    d0:6c:f9:f9:24:a8:9e:d4:20:0d:ae:65:bb:cb:0b:
                    d5:34:8b:01:39:f3:a1:ac:1f:80:fc:2e:38:dd:17:
                    e7:23:8e:0a:33:57:4f:f3:b6:bf:88:6e:96:44:e5:
                    f7:bb:dc:3f:ed:28:c1:40:2e:e3:9b:2d:35:2d:f3:
                    80:f6:0f:ee:e4:d5:f3:b6:5d:b0:68:60:ca:b2:ca:
                    63:44:84:37:a3:9d:fd:f7:2c:b1:f2:bd:4a:cb:db:
                    01:24:33:1c:4b:3b:66:e1:55:b4:f6:19:6a:75:28:
                    4d:7a:34:96:23:db:08:bd:d9:d3:72:e2:a0:5b:ef:
                    3b:c5:0a:47:fc:32:38:7d:02:b9:e2:bb:b5:ef:29:
                    44:b8:3a:75:83:de:0d:48:5e:57:49:77:7c:55:10:
                    44:ea:cd:0a:54:42:83:c9:7a:8d:ac:a1:f4:78:81:
                    85:0f:79:40:2d:b8:bd:d6:2d:0b:01:64:d7:70:cc:
                    6d:c7:6d:47:e7:d6:f6:6e:3e:ef:8c:12:bf:8d:c4:
                    67:4c:1c:9d:8b:7a:6c:fc:17:e7:d3:09:d1:73:c7:
                    3d:11:b0:0c:b8:4e:4b:16:e1:8c:2b:9d:cc:ac:3a:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:70:5A:0B:39:9C:00:6E:58:81:AF:80:47:A9:5C:C7:90:70:4B:D9
            X509v3 Authority Key Identifier:
                keyid:E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1e:59:5e:f1:07:84:3e:4d:90:f7:bb:37:b0:a9:1c:0c:14:
         d2:1f:87:ad:da:5b:c4:d0:36:8a:65:a9:99:e2:62:06:2b:b9:
         fe:93:ad:f6:70:25:c4:0c:e4:6a:d7:48:6e:23:7c:72:6b:9c:
         ed:ef:e8:df:99:02:b1:ef:ac:5b:71:10:46:d2:fd:0c:09:40:
         2c:4f:05:50:6a:2a:b3:cc:15:32:2c:8f:98:48:d4:ae:aa:1f:
         5b:1a:0e:02:bd:92:ed:38:8a:24:26:81:72:e0:01:7b:bb:be:
         89:ec:2b:cb:d4:6b:25:18:e2:99:12:28:2e:9a:ac:c5:f1:7a:
         a5:26:29:b0:a1:24:e9:6a:85:0a:60:84:c8:dc:2e:83:9f:f1:
         43:45:7b:c9:48:10:86:bf:79:12:ea:da:58:56:fc:28:20:e3:
         6b:0e:90:3c:84:36:1f:22:a8:46:b7:c4:fd:c8:55:35:30:58:
         14:9a:41:d3:ad:a9:5a:70:e8:1f:28:ae:10:a3:84:3d:94:f8:
         31:52:a8:1b:76:68:c0:37:2a:b0:57:bd:ff:0f:68:0a:e8:40:
         a4:55:a0:5d:80:34:ea:a5:65:c8:48:7d:af:3d:9c:3f:50:9a:
         58:eb:92:eb:33:ea:2d:0e:7a:52:aa:28:8a:88:63:e2:ae:70:
         e9:ed:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:18 2025 by rpki-client