Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File:                     1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier:          rwBLFbt0OqfylPHbTdGMth/Y+TnU3cds7TlAPr+q94s=
Subject key identifier:   75:23:FA:A4:AB:0D:E7:67:5C:41:84:DF:EC:BF:43:68:D0:07:33:D7
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer:       /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial:       019750EADE8F808D2BF1D02827A14376777B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number:          010A
Signing time:             Sun 08 Jun 2025 19:00:58 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:58 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:58 +0000
Files and hashes:         1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: BBeCmpU/7Pxtl29aRT08encnX8ST+558xtRRsptY1j8=)
                          2: Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa (hash: +sFVK8H7AnsXd5rUe7kR0o92ssiFNiEpWCKNsSev/NE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:de:8f:80:8d:2b:f1:d0:28:27:a1:43:76:77:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
        Validity
            Not Before: Jun  8 19:00:58 2025 GMT
            Not After : Jun  9 19:00:58 2025 GMT
        Subject: CN=7523faa4ab0de7675c4184dfecbf4368d00733d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a4:c8:2a:a6:d7:f1:0d:db:89:2b:53:bc:22:
                    ed:aa:19:0a:6b:5c:3d:27:85:89:07:20:82:c6:b0:
                    10:d4:2f:a2:ad:57:76:26:81:39:16:80:a8:5b:23:
                    b7:ec:ac:e4:dd:8c:ca:43:c1:31:4d:0c:4f:31:1b:
                    36:84:1a:28:3f:7b:d6:bf:2a:e1:09:49:db:49:a2:
                    9e:80:2c:15:42:70:f0:58:6f:b3:d8:8d:ee:c9:cf:
                    f2:92:23:7f:9e:26:9f:54:46:8c:4f:f5:c3:4a:c2:
                    b6:77:00:49:eb:03:5c:d6:c9:70:02:7b:ad:08:db:
                    69:25:fb:fb:de:73:bd:04:9f:4a:f0:fb:ca:55:3b:
                    39:ea:ac:b8:ce:81:c9:69:7f:74:c3:50:d7:d9:9f:
                    41:ee:d8:eb:5d:1c:95:c2:b4:29:ac:05:c2:ed:1e:
                    9a:35:68:67:81:b7:d4:2a:1c:3d:cf:45:9b:c1:24:
                    2b:9c:1e:19:d5:0a:6e:f9:b0:fc:bc:4f:d2:8d:be:
                    ac:bd:56:16:09:7d:c2:06:a9:67:60:69:2f:37:2f:
                    a0:7b:8c:e8:e4:7f:bb:b9:56:4f:b8:35:14:8a:07:
                    cf:fc:a9:56:7a:30:ca:0b:46:0e:2e:cd:db:d2:ce:
                    5a:5d:71:7f:6d:12:e7:5d:87:65:b2:e1:0f:85:d5:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:23:FA:A4:AB:0D:E7:67:5C:41:84:DF:EC:BF:43:68:D0:07:33:D7
            X509v3 Authority Key Identifier:
                keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:2a:4c:1a:cf:9a:cd:54:c6:f8:98:0f:13:d6:22:92:da:03:
         13:6c:35:70:4c:1a:81:b7:31:ce:1b:41:c2:82:0a:5a:25:65:
         dd:94:86:0b:40:79:e9:a5:c7:80:d4:ee:0a:67:f8:2c:61:79:
         7f:8b:bb:69:3e:39:9c:49:84:47:a4:da:1e:84:f7:87:f5:58:
         77:81:e0:8e:64:89:ac:92:bd:71:d7:f9:a6:1a:25:0a:ae:91:
         77:aa:da:8c:6e:d4:ff:ce:55:4f:a6:b0:4d:81:32:07:8d:ca:
         16:2b:57:ce:3c:bc:77:f2:2a:4d:0d:94:2a:11:88:99:77:e3:
         48:28:cf:c2:61:49:98:1c:d9:7a:82:f5:52:51:b7:c2:37:13:
         32:3d:35:c0:67:bc:9a:64:06:ab:c4:95:f9:4b:ad:bc:a7:23:
         7e:bb:a9:68:92:08:66:0e:94:65:c2:eb:81:a3:45:dc:fc:fa:
         55:d5:2d:18:c6:ba:6c:f3:44:e4:c2:39:4b:55:a7:70:f7:b7:
         1d:87:41:7f:1f:34:43:f8:b8:89:3d:ba:e7:4f:7e:ff:05:7b:
         aa:e2:55:98:6d:82:49:dc:55:e5:b9:72:bb:51:0b:79:22:3e:
         cf:ab:c4:83:f2:87:14:39:ae:bf:ba:82:41:97:81:1f:5d:b7:
         d8:9f:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:22:28 2025 by rpki-client