Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File:                     FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier:          K0otyXGJrgHsr+BNtD2EPYu+HDdHXajA8I4prPy1nsw=
Subject key identifier:   5E:51:8F:83:6D:EE:28:24:77:5C:5E:F9:54:5A:55:18:55:A4:FD:9D
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer:       /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial:       019757FFC7509D5699B5CDF175D3B99F4134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number:          0EF9
Signing time:             Tue 10 Jun 2025 04:01:09 +0000
Manifest this update:     Tue 10 Jun 2025 04:01:09 +0000
Manifest next update:     Wed 11 Jun 2025 04:01:09 +0000
Files and hashes:         1: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (hash: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=)
                          2: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: afT8EMux/Msjyg32lzAlGEh1mBas+IOIpCZM44eOvYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:ff:c7:50:9d:56:99:b5:cd:f1:75:d3:b9:9f:41:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
        Validity
            Not Before: Jun 10 04:01:09 2025 GMT
            Not After : Jun 11 04:01:09 2025 GMT
        Subject: CN=5e518f836dee2824775c5ef9545a551855a4fd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:4d:45:9d:e7:db:90:4c:85:66:4e:2e:84:
                    94:6c:9f:b4:f3:24:0d:7b:d9:3a:a4:66:27:0b:b1:
                    57:bb:73:ae:bd:32:a7:22:98:5d:33:64:16:59:50:
                    81:ce:43:d5:cf:5d:63:b4:6a:89:17:29:fa:94:3f:
                    ca:7b:9f:4b:99:0f:e2:2d:d5:4f:d7:8d:00:be:35:
                    1e:71:58:0d:13:14:f7:7a:ec:61:7b:c2:6c:c5:35:
                    52:16:11:2c:bd:f5:84:4f:dc:c7:3b:9f:8e:e0:d0:
                    52:22:05:e4:4f:d1:df:fb:9c:d2:53:1f:f5:be:7e:
                    8c:40:4d:20:54:a0:ae:23:1d:a8:3d:3d:83:01:39:
                    b7:89:37:31:72:e7:ce:76:98:b9:14:de:e2:81:10:
                    82:6e:a5:0a:de:b3:6b:9a:e5:d1:f4:4d:4e:16:b2:
                    12:bc:3d:1e:c7:1c:64:71:3d:0c:37:33:b1:96:32:
                    20:28:88:30:0e:98:04:34:e0:7f:36:fb:08:ba:90:
                    9a:c0:2f:8c:14:3f:f8:2a:ef:39:36:d3:16:e6:e9:
                    aa:55:b5:0d:47:66:b4:f4:01:85:48:51:77:b8:3a:
                    30:85:c2:af:9b:af:59:c9:19:fb:20:09:87:12:1a:
                    f8:e8:5c:f4:62:84:06:62:eb:b9:ce:98:3d:84:f4:
                    ec:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:51:8F:83:6D:EE:28:24:77:5C:5E:F9:54:5A:55:18:55:A4:FD:9D
            X509v3 Authority Key Identifier:
                keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5e:75:cc:23:84:d4:99:99:2d:98:f4:11:48:43:2a:1f:b4:
         3e:b9:c2:23:a1:be:e2:6c:f9:cb:d4:23:88:a5:27:2a:29:7e:
         00:4f:cd:3a:80:83:ec:a8:90:28:3c:31:a7:12:75:95:e1:0e:
         88:3a:97:19:17:65:cd:88:aa:1a:7d:58:81:2b:5c:09:75:2e:
         74:5a:87:55:2f:ca:85:fa:a8:7f:fb:27:04:cc:cc:5d:ce:11:
         20:43:67:fb:be:21:ef:4c:fb:2d:d7:66:50:56:a6:7e:99:d9:
         30:47:7a:c3:0e:3e:7c:5a:5e:b2:3e:30:e0:2d:74:9a:df:5b:
         c0:89:58:7a:27:1c:31:4a:c6:10:3e:e0:4a:2e:41:20:da:19:
         98:d9:30:e7:2a:d5:e1:f2:93:c0:21:46:52:a9:1a:35:5e:b6:
         be:ed:4e:dd:52:57:26:a8:12:67:b0:86:9f:d0:df:4a:f7:4a:
         4d:29:e2:7d:b6:10:65:75:0b:20:db:d3:33:b0:11:b7:4e:f6:
         9b:e6:6d:f8:f0:06:2a:9d:f5:fe:3d:a5:0d:34:7a:e4:f6:91:
         ce:8e:a8:16:e7:79:a9:11:18:bd:11:d4:0f:7a:11:90:b0:4d:
         c1:45:a5:34:c6:f7:0f:a6:20:eb:f5:9b:ac:21:04:b3:c5:3e:
         f4:ab:d5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:31:16 2025 by rpki-client