Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          BuZN2WDxivd1jKJvbamPM/RoMnwMeNJo/jD58/kOEFo=
Subject key identifier:   E9:0C:95:91:C3:4F:25:EA:46:B2:AF:1C:98:55:44:26:4C:A8:C8:5C
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       01974BFB6BB9C1DAF41F0D4099BF8D789334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          04F5
Signing time:             Sat 07 Jun 2025 20:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:57 +0000
Files and hashes:         1: 8eJjkZcpuWjV5v8rUew7uwzMNnU.roa (hash: yUs06Rtd51ccCs/vsal2jQR2RBqNnF02H0mDpxwGrFE=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: 4EU6dhULVOa5Mly8tRcw6oKznVqM0d9Yf8FrGb0ZRns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:6b:b9:c1:da:f4:1f:0d:40:99:bf:8d:78:93:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: Jun  7 20:00:57 2025 GMT
            Not After : Jun  8 20:00:57 2025 GMT
        Subject: CN=e90c9591c34f25ea46b2af1c985544264ca8c85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:9a:b2:5e:c9:fd:da:23:6c:f7:e9:c8:d4:
                    7b:37:76:0c:81:5e:45:55:46:18:64:f6:63:63:1f:
                    ab:2f:2b:69:d9:f4:6e:d1:78:4d:c9:35:f6:56:c6:
                    16:f1:5e:0b:68:ab:55:23:06:fb:c0:50:92:fa:1b:
                    14:80:28:2b:07:88:df:d6:b6:65:05:2a:b9:9b:30:
                    75:10:bd:35:1b:ab:ac:ef:42:5d:e3:c1:0b:8d:25:
                    8f:d5:2d:e5:ec:4b:30:ea:0a:cb:1e:f6:10:c8:2a:
                    69:23:1b:bf:9b:66:0f:6f:df:ef:98:aa:9c:26:ed:
                    7a:3b:8f:9f:8f:03:a6:54:6f:0c:50:94:cd:cc:78:
                    d6:d3:fb:b9:fa:fd:9c:1b:c2:a8:10:76:05:bd:ab:
                    b0:3f:b4:cd:4b:15:59:c9:42:8c:c5:24:1b:99:e0:
                    38:28:ae:79:ee:66:3d:33:13:04:62:0c:22:d9:21:
                    1e:4d:76:0f:23:a0:ec:36:a0:9c:0a:80:13:eb:2f:
                    71:a7:d6:ec:27:73:ad:48:3d:ef:48:10:1c:8b:be:
                    b3:84:1e:c7:87:63:1c:2e:8c:70:d8:55:06:f9:28:
                    fc:eb:c6:c4:a0:ef:35:a6:78:20:1b:9c:cc:f4:ea:
                    c9:b1:f4:de:5c:90:03:50:af:7e:a1:ce:b0:fd:f3:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0C:95:91:C3:4F:25:EA:46:B2:AF:1C:98:55:44:26:4C:A8:C8:5C
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:57:00:a1:91:7d:83:3c:ef:28:e8:15:8c:e5:f2:3e:fe:59:
         17:b3:74:f7:24:58:32:23:da:57:23:e3:d2:08:85:54:cb:93:
         c4:48:49:9e:f9:c1:09:7a:3c:ea:aa:cd:55:cc:8f:03:4d:ae:
         5a:5f:96:43:cd:ed:0c:f2:13:b2:bc:8f:0f:06:86:f2:62:88:
         a3:88:50:0b:fc:26:fb:e7:86:e4:39:5b:ee:13:63:a0:96:fe:
         95:41:6f:9a:28:29:02:4d:86:5a:c7:91:ca:1e:34:43:6e:29:
         73:93:8d:2c:03:b7:d0:43:ab:bd:fe:1e:c7:68:87:c4:17:f9:
         92:af:b9:28:c5:38:7d:ee:33:32:da:3c:e9:3d:ca:3c:65:c9:
         37:6c:1b:19:0c:b3:68:3c:fb:c3:ff:5b:1b:57:6d:8c:13:ec:
         c6:38:ed:26:38:b0:e2:04:10:f5:16:52:19:d1:15:6a:87:db:
         4b:97:e0:5c:50:fd:13:73:81:59:60:52:25:27:fe:60:4e:38:
         01:22:8c:db:15:e2:32:98:a0:a4:13:ac:bf:1e:f1:62:ac:56:
         68:2a:b4:4d:81:fb:ff:7a:35:d5:88:4c:20:10:91:1d:6e:74:
         8f:1e:dc:fe:a1:4e:15:e9:41:52:81:f2:d1:b1:70:e9:9b:5d:
         53:9a:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:25 2025 by rpki-client