Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
File:                     5Lqtn19putkQB1-OHYBetB0N98s.mft (raw, json)
Hash identifier:          TJJEL3IIpfezCbco+3ox5Vls5HkEQvT3EDisYtP4PIo=
Subject key identifier:   78:93:A5:C1:37:9E:4D:F3:D1:BC:DA:29:E4:7D:A2:F6:9F:2A:4A:A0
Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
Certificate issuer:       /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Certificate serial:       019752D8E472FA9DDDEA09A03C146FC4C343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
Manifest number:          0E6A
Signing time:             Mon 09 Jun 2025 04:00:35 +0000
Manifest this update:     Mon 09 Jun 2025 04:00:35 +0000
Manifest next update:     Tue 10 Jun 2025 04:00:35 +0000
Files and hashes:         1: 5Lqtn19putkQB1-OHYBetB0N98s.crl (hash: b8jGS83BfWzboV5+anLIsBsCTXI/XXsaL9sHhONMQrc=)
                          2: Q49WFQb687C-dROudfCZNH5xgk0.roa (hash: 6gTPlVN38oZH6TKqFrihOGk/Y67bvVr39M4N4cXiKUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:d8:e4:72:fa:9d:dd:ea:09:a0:3c:14:6f:c4:c3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
        Validity
            Not Before: Jun  9 04:00:35 2025 GMT
            Not After : Jun 10 04:00:35 2025 GMT
        Subject: CN=7893a5c1379e4df3d1bcda29e47da2f69f2a4aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b0:7d:dc:bf:1b:9e:3f:4f:96:d0:e9:ca:4f:
                    1b:30:cd:be:36:b1:4c:34:0b:8b:b1:04:a4:f6:d2:
                    c7:dd:38:de:9d:bd:30:c2:0c:94:c9:7c:98:63:1b:
                    5f:53:7c:57:dd:ef:c8:b5:0e:0d:e3:87:bb:21:64:
                    84:1c:1a:03:2a:03:20:53:8c:01:1d:79:68:da:73:
                    40:71:33:b8:72:49:ba:66:9a:8f:aa:d5:8d:bb:ee:
                    00:cc:6c:47:a5:7c:99:13:1f:34:09:df:15:f2:95:
                    46:46:d3:80:cc:42:03:94:bc:1e:c8:44:54:1a:db:
                    54:8b:f7:32:53:42:76:73:6c:47:54:6b:dd:d8:8a:
                    17:7b:49:d5:a4:85:1e:f2:f5:72:83:c1:c7:45:8b:
                    f4:2d:80:6d:09:87:57:ba:21:41:91:a8:f5:13:ef:
                    79:62:47:37:f2:fc:75:44:3d:7c:08:f4:94:be:b2:
                    81:b5:55:64:eb:d0:73:0d:75:79:e6:84:ef:47:8e:
                    14:31:d7:fc:39:93:d6:25:be:48:6d:09:ba:59:77:
                    3d:34:08:7a:02:66:6c:f0:a5:20:84:69:22:5c:04:
                    b0:8b:a5:7b:e0:d7:f9:62:4d:8f:d7:64:f4:28:64:
                    06:2c:c9:e3:91:3c:33:41:17:ce:b9:f4:09:1f:8f:
                    28:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:93:A5:C1:37:9E:4D:F3:D1:BC:DA:29:E4:7D:A2:F6:9F:2A:4A:A0
            X509v3 Authority Key Identifier:
                keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:44:83:bc:57:94:14:cd:f0:0e:80:3c:05:cf:5e:6f:37:79:
         39:74:72:5c:76:ce:48:ed:a1:20:76:6f:7e:32:b4:dd:6a:98:
         ce:f3:7d:61:f9:8d:b3:4e:34:ce:d1:6d:6d:c9:73:c6:d6:e9:
         a9:89:08:1e:b3:f8:52:79:cf:9e:ae:f6:7f:e1:f3:22:2b:9a:
         59:0f:2d:9a:fd:45:59:d6:c1:cc:a5:46:43:11:e1:e4:b6:54:
         6a:d7:1c:b0:c4:14:76:a3:09:c3:75:73:3f:24:12:d6:9c:b0:
         f4:92:3b:fa:39:68:be:ee:06:ce:e7:37:64:77:1c:c1:92:ce:
         07:d8:8f:14:b8:7e:e3:46:32:ca:dd:cc:e3:51:b3:c4:c0:4e:
         19:6a:e4:cb:91:4a:f2:ed:cc:24:3b:bc:58:1d:03:42:41:7c:
         7f:78:4e:50:df:98:00:4b:50:b6:d0:d3:ff:41:26:7f:a9:04:
         ce:a2:43:a3:42:d7:bf:e6:64:53:0f:af:67:d0:b6:55:de:b9:
         db:8b:68:ee:22:d7:f8:a2:57:d0:e5:4b:d2:47:19:5d:f7:c2:
         59:0b:60:d9:56:37:68:38:7e:b3:75:c8:48:f6:a2:0d:43:74:
         3c:97:08:cc:3e:7e:df:d4:32:54:22:c5:2e:19:c3:07:09:a5:
         ab:71:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:11:02 2025 by rpki-client