Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
File:                     _mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft (raw, json)
Hash identifier:          R6hpvtDUMtqYO0+YvZyPDKVp9lbbZEQQyMaF578nyDc=
Subject key identifier:   0A:E6:A8:A3:45:E4:6C:0A:A9:3D:69:8C:13:46:F5:EB:41:1B:B2:5B
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Certificate issuer:       /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial:       0199240CD72A2C4648945727B367061766B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
Manifest number:          C5
Signing time:             Sun 07 Sep 2025 12:00:45 +0000
Manifest this update:     Sun 07 Sep 2025 12:00:45 +0000
Manifest next update:     Mon 08 Sep 2025 12:00:45 +0000
Files and hashes:         1: _mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl (hash: QNQQjfJfrSBtDudKQgGTwLY+/4q5Ra6wPWw4lpvLauo=)
                          2: oidQOFv_T3t4hgPCm6h_UreADsw.roa (hash: y9QfSR0j2NSF/2jSZyP0tv3TDh1rVPF+ZeadaUNAaYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0c:d7:2a:2c:46:48:94:57:27:b3:67:06:17:66:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
        Validity
            Not Before: Sep  7 12:00:45 2025 GMT
            Not After : Sep  8 12:00:45 2025 GMT
        Subject: CN=0ae6a8a345e46c0aa93d698c1346f5eb411bb25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:63:c3:fc:e3:cd:10:b5:e4:a5:2b:bf:71:aa:
                    0f:6a:9b:33:3e:3a:73:75:63:91:9f:d7:a5:db:f8:
                    56:05:82:ab:fd:3c:74:63:32:2b:69:dd:e4:7f:ee:
                    6e:e8:f1:a1:a3:84:1d:7c:6c:b4:8d:db:1f:ce:92:
                    15:a5:17:f1:3b:c1:fd:0f:26:b1:33:fa:80:29:05:
                    2f:e2:dd:7f:cc:0b:fb:33:9e:32:e0:45:d3:9e:74:
                    87:dd:2e:18:b7:a0:98:45:1f:43:4b:5c:17:2b:20:
                    f1:91:dc:bb:58:f1:d1:5a:c4:ec:eb:70:a3:81:db:
                    89:00:79:db:10:54:d3:4d:17:44:5e:b2:45:02:29:
                    4c:43:cd:f4:51:84:4c:af:43:84:0b:aa:ac:29:f9:
                    59:7f:17:b0:82:5b:02:2c:26:f9:4f:8c:b3:e6:1a:
                    e8:85:63:19:ac:79:c1:e6:67:9e:0a:84:b1:be:3b:
                    e0:38:af:04:bb:52:79:f8:0c:57:66:2e:84:7d:b3:
                    1b:69:c9:c6:45:af:2e:fe:75:68:08:73:15:59:8a:
                    c3:54:40:01:b1:df:53:09:f9:57:c1:ba:b6:c0:c0:
                    93:94:0c:bf:43:a0:1f:25:b0:aa:b4:cc:72:8c:20:
                    f0:42:28:08:69:8f:0f:31:5b:8d:ae:48:6e:12:c3:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E6:A8:A3:45:E4:6C:0A:A9:3D:69:8C:13:46:F5:EB:41:1B:B2:5B
            X509v3 Authority Key Identifier:
                keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5e:9f:79:78:61:92:2a:ce:57:29:90:d7:73:79:e8:04:44:
         45:7f:62:31:87:3c:2d:8e:cc:e7:ee:ab:88:b2:2e:0b:bf:64:
         05:01:cb:79:17:b3:06:b2:96:66:15:04:d1:3f:81:41:72:73:
         ff:d8:da:40:6b:39:8f:c8:b7:3b:1a:8a:c0:36:9f:93:11:20:
         c0:83:60:05:0f:3f:f3:98:89:48:10:da:02:13:77:79:ad:6c:
         c4:2b:c7:ef:3c:9e:ce:2f:ef:e8:06:17:c4:b2:b5:cb:48:b3:
         d3:2d:e4:11:4b:4b:d4:24:ee:a5:44:b3:98:d8:54:3d:95:e6:
         f1:09:da:27:ff:8f:18:65:a0:72:60:5e:ae:61:f5:7e:4d:8b:
         d1:b4:7e:dc:0e:a9:da:16:3a:6f:0e:c9:35:41:ad:ce:e8:4f:
         8c:59:9b:1f:57:22:69:c8:80:bc:0a:da:b6:73:61:fb:95:df:
         a5:18:2e:6f:6c:42:26:be:40:e7:bf:7c:1e:f5:d5:ca:98:8b:
         73:90:4d:ca:f3:df:9a:33:e3:59:c2:e1:f8:4e:ce:a8:79:d8:
         e5:90:77:18:9a:a6:b4:d2:17:28:dc:22:4a:0e:a1:e1:fe:bf:
         8a:0a:d3:99:c5:3f:c1:a8:2e:92:bf:32:30:1d:31:bb:6b:c3:
         c1:18:31:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:19 2025 by rpki-client