Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File:                     5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier:          NrHrgqafhpE8AQLGkP8ZfwH1KAa9rby82undKF+eq1g=
Subject key identifier:   C5:33:13:F0:86:AD:AD:12:45:5A:47:E8:D8:EE:21:B3:C5:FE:7C:35
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer:       /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial:       019750462EAD731A61ED55EEB5FD645884EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 16:01:05 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:05 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:05 +0000
Files and hashes:         1: 1-rRkYRd227_5bnec3bYwnL5SxpY.roa (hash: R+OpLqItt4unWxgfStcunzTz6dBOZ563zxthlacRJZ4=)
                          2: 12bcoRpyhxcN6wVe5E7GqdMB6EU.roa (hash: r0dkh09UaIafY8LdKgjtDDwdtCz3QHwlzpUJT/cj3NA=)
                          3: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: Xxlqc3HtTEwzsN9UHgaeqfA5qHDXZyjYkF1cP1lwoXo=)
                          4: 7QAi3hol-4GpeEk0vacoCeiMLE8.roa (hash: 41WAyyFZEfqE7fT5J+jGu94yYNN3Qp+eHjuNlnSVUDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:2e:ad:73:1a:61:ed:55:ee:b5:fd:64:58:84:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
        Validity
            Not Before: Jun  8 16:01:05 2025 GMT
            Not After : Jun  9 16:01:05 2025 GMT
        Subject: CN=c53313f086adad12455a47e8d8ee21b3c5fe7c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e0:d8:9e:24:76:15:a1:05:8e:25:73:74:4e:
                    df:c8:7d:16:6b:de:05:0f:d1:3c:8a:da:22:a5:2a:
                    07:b2:08:a9:3f:3b:b2:dd:21:b2:d7:4c:c8:71:39:
                    56:2e:11:d7:00:d6:fa:7d:da:5b:ff:30:2e:ba:96:
                    22:f1:6d:09:76:c7:ad:07:1e:09:25:27:b4:3e:8b:
                    36:85:61:05:bc:82:01:39:55:95:3e:aa:79:f3:87:
                    e7:3a:c0:19:cf:33:5c:68:0a:da:bf:ac:5d:4a:b6:
                    96:92:3e:4f:23:ba:87:0a:14:53:9f:07:6a:b7:2b:
                    91:8d:59:28:ff:2e:57:17:51:02:93:1a:70:8c:6b:
                    44:78:00:31:ee:29:57:e2:d7:1d:4c:53:3b:2e:10:
                    77:f5:60:50:1b:ca:13:98:c5:04:61:4b:bd:d8:0b:
                    1e:fc:1e:7d:c3:4b:37:01:9b:7b:91:f0:76:09:b3:
                    0b:e7:d7:73:67:d9:73:90:b9:f1:a5:ef:13:f0:a0:
                    ca:48:0c:11:36:9f:17:ff:31:df:b5:3b:17:96:2e:
                    d5:88:3f:e1:55:b2:22:28:58:45:90:29:38:8c:98:
                    96:ca:4a:4b:e5:6c:ff:9d:c5:2c:ab:5a:fc:6a:56:
                    ed:6f:50:d5:20:ff:35:e8:f0:28:28:64:35:0a:a4:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:33:13:F0:86:AD:AD:12:45:5A:47:E8:D8:EE:21:B3:C5:FE:7C:35
            X509v3 Authority Key Identifier:
                keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:73:a7:cd:7a:20:0d:c0:3c:f2:f8:58:64:10:8b:b4:b4:f7:
         4c:36:76:ec:e3:f9:0c:4f:3c:67:e8:84:78:5f:68:c2:bc:70:
         cf:9d:d1:14:ca:c9:86:32:51:af:c4:55:89:1b:f4:6e:7d:f0:
         86:a7:14:2d:1d:83:24:c2:be:5a:84:57:23:8e:30:3f:3d:34:
         21:a2:1e:62:e0:82:8a:b8:7e:51:30:01:02:4d:8c:b7:ac:03:
         62:0b:d2:64:9d:2f:71:da:cd:e1:72:54:fa:69:d1:e2:63:5c:
         d1:70:4e:b0:1c:ae:47:f8:a8:fc:5c:df:82:75:74:cf:6a:77:
         62:3d:57:8d:33:77:e2:72:93:a2:ce:c6:1d:43:9c:7e:bf:81:
         f5:5a:48:58:c4:15:ca:b8:1c:28:ef:06:5b:65:4c:ef:18:e0:
         14:74:39:b5:9c:ce:ff:49:02:21:4b:80:b3:b9:8e:e7:d1:c3:
         08:fb:dd:cc:ac:3d:d5:34:0a:df:b2:e7:df:7f:60:7d:79:48:
         a0:76:52:18:e5:d0:25:c9:ac:be:cd:8b:e2:45:65:1e:c6:64:
         c1:a4:ea:8c:a2:89:b6:50:f7:24:22:60:05:d4:31:f4:26:ff:
         48:5b:d0:19:bf:43:ff:47:c7:cb:31:f0:e2:30:16:5b:ba:1b:
         3a:5b:ef:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:22:43 2025 by rpki-client