Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
File:                     5r62dxRfZMr7zXE26B81onSujow.mft (raw, json)
Hash identifier:          6Jk+KYj1Ep8617BBZtyeoUOjcpSllvASFCw6Nqp7tOU=
Subject key identifier:   41:9C:AA:AB:4A:5B:4B:1D:68:F6:84:71:DE:F1:D9:23:A8:DB:AE:29
Authority key identifier: E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C
Certificate issuer:       /CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
Certificate serial:       019A70DC2265CACFA36F7C82101EC24FD730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
Manifest number:          62
Signing time:             Tue 11 Nov 2025 03:01:06 +0000
Manifest this update:     Tue 11 Nov 2025 03:01:06 +0000
Manifest next update:     Wed 12 Nov 2025 03:01:06 +0000
Files and hashes:         1: 5r62dxRfZMr7zXE26B81onSujow.crl (hash: QxB6WfmdMsicQu/tDUbGpzsDg7PouTGk2dV7DtmIr2o=)
                          2: _4Y--84lEsBn20PgX6M05x1F5_A.roa (hash: q0rbhIJFPrPOpvAXOzX/aS9tNPbzDnyOozHI6yKGmWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:dc:22:65:ca:cf:a3:6f:7c:82:10:1e:c2:4f:d7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c
        Validity
            Not Before: Nov 11 03:01:06 2025 GMT
            Not After : Nov 12 03:01:06 2025 GMT
        Subject: CN=419caaab4a5b4b1d68f68471def1d923a8dbae29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:af:54:62:9f:b4:92:3a:60:3a:8d:45:d7:dc:
                    26:f7:3f:7b:51:55:81:ca:5e:12:c2:af:b2:07:7c:
                    f4:ac:e0:ca:09:58:03:4d:5b:ca:c2:74:79:89:62:
                    23:a1:70:66:85:93:7d:2b:39:f0:79:d0:55:98:b4:
                    2e:f9:53:dc:8f:a1:c5:87:9c:b5:fb:28:0d:f7:ce:
                    ab:83:71:34:11:4e:c2:a2:69:64:a3:51:47:50:8d:
                    db:cd:d8:b4:b5:c6:09:32:6c:53:65:2a:93:cb:2e:
                    a7:3c:88:cf:c1:a9:0a:a3:1d:15:2e:c6:47:14:9a:
                    66:01:f3:69:88:07:6e:2a:1c:6b:eb:55:c3:fd:36:
                    db:46:91:d4:11:6a:47:c1:dc:41:87:cf:dd:80:ad:
                    63:6b:dd:21:66:7d:19:4a:fc:3f:cd:ca:28:9d:92:
                    25:f5:a0:5b:66:c3:6c:cd:95:2a:1c:ad:ec:9a:41:
                    ae:e6:32:5f:0a:20:1e:c6:62:91:8a:a8:92:93:0e:
                    4d:6d:55:18:a5:58:b8:e6:6a:db:0e:2b:66:6b:de:
                    32:ca:f1:96:f7:10:f7:fd:31:db:c1:a0:83:cc:fa:
                    50:3b:a5:49:8f:31:52:ba:05:8d:b7:4d:f8:a5:ae:
                    31:f9:11:05:e2:3f:9c:6b:2e:c8:e2:b6:59:e9:78:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9C:AA:AB:4A:5B:4B:1D:68:F6:84:71:DE:F1:D9:23:A8:DB:AE:29
            X509v3 Authority Key Identifier:
                keyid:E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:ce:14:a7:77:78:c6:2f:3d:c3:e9:09:62:d5:ad:4e:a8:
         3f:89:f7:a9:2f:73:a8:09:c4:20:0e:94:1d:fd:9d:56:7e:6c:
         45:46:90:95:4b:a9:d3:d1:5b:74:90:61:37:db:78:7a:a4:d7:
         94:1a:08:3f:6c:ac:dd:40:19:ca:12:c8:ff:04:cb:e8:d6:ad:
         e6:cb:67:33:13:b1:76:50:ab:05:15:16:78:f4:26:fb:df:fd:
         50:23:b0:6e:aa:ec:79:31:ad:e6:78:4d:3a:93:b3:95:6d:00:
         15:40:84:7d:6a:4c:4b:f1:1f:d3:ce:b2:da:da:5f:ec:c5:0f:
         be:4b:e1:45:91:a6:74:a1:26:5e:9c:07:e2:1e:54:db:d9:fd:
         20:17:91:b1:04:60:40:01:f5:6e:3c:bc:64:69:1c:30:1d:e3:
         e1:d0:65:67:3f:97:f0:dd:f7:64:0a:e8:d2:9c:88:0b:a7:bc:
         e9:40:ac:61:c8:e7:28:c2:f7:47:e3:b6:8f:67:ed:3c:e4:59:
         ae:63:1a:65:89:a1:9f:33:d5:0b:2c:42:0b:de:f9:e4:6a:73:
         85:d7:06:22:72:ba:78:2f:63:6c:70:e5:cd:a9:ec:a3:da:14:
         2c:cd:56:54:33:18:b4:04:4f:62:63:c7:95:8a:08:05:11:9b:
         49:40:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:31 2025 by rpki-client