Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
File:                     R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft (raw, json)
Hash identifier:          PpaJsJ7M5kyUDOQo2VGXjECqhYkFbsR4CcjI2vMs1cQ=
Subject key identifier:   28:64:23:1D:BC:D6:83:A6:B5:58:2D:0C:F6:65:8D:69:BD:0B:B2:11
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Certificate issuer:       /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial:       0197586D1AC24F53B62D611F6AEE6E70C5B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
Manifest number:          0FCF
Signing time:             Tue 10 Jun 2025 06:00:34 +0000
Manifest this update:     Tue 10 Jun 2025 06:00:34 +0000
Manifest next update:     Wed 11 Jun 2025 06:00:34 +0000
Files and hashes:         1: R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl (hash: e3YutQXhdopTClZ5DbuhGr5RYwAk2CkMX+aCpLgVcXU=)
                          2: YwpFL-la1dCDFyOhJkDlnsbvc0E.roa (hash: 5Fts0SsJTbarORUPjAMAPXr3a1lfXPj9HBkPNFyTj4M=)
                          3: dEKlYH2cmj45z4x_T9UVuavDVhs.roa (hash: Ol+cnfARbBRUjhEvoMIs6jgxKtNHaBvPnq4IVRHSiu4=)
                          4: v05yfGi9C_17HLObMwDo5FEICGE.roa (hash: /OVS3c7m1p/c35QFzc0QWZFHRzFKrme9OTRuEH9/X8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6d:1a:c2:4f:53:b6:2d:61:1f:6a:ee:6e:70:c5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
        Validity
            Not Before: Jun 10 06:00:34 2025 GMT
            Not After : Jun 11 06:00:34 2025 GMT
        Subject: CN=2864231dbcd683a6b5582d0cf6658d69bd0bb211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:46:76:49:b2:bf:f6:39:25:8c:1d:73:9c:03:
                    48:f3:d4:66:86:00:2a:ca:de:b7:5e:8d:1c:e4:d0:
                    c1:b6:4d:ab:d5:f0:13:32:9c:46:38:2f:7d:68:5f:
                    d4:d7:ad:01:89:3b:05:da:b1:36:73:58:af:bd:01:
                    73:55:6a:9c:20:92:8f:37:20:34:08:5d:71:a2:ec:
                    6c:04:55:04:c0:74:d2:2a:8a:4e:a7:8c:72:a7:47:
                    da:f5:2a:06:a6:ea:ab:c9:98:17:d5:a3:5b:76:3d:
                    05:eb:ba:58:61:ff:8f:27:86:31:97:43:8d:67:2e:
                    07:0e:66:8a:53:df:b9:89:c0:19:63:98:72:e5:fc:
                    d7:f2:41:8e:ff:b9:3e:6f:b4:55:fd:2a:b3:a4:57:
                    2b:1a:c3:80:c1:06:fa:40:13:05:6e:69:40:b5:e8:
                    5f:8b:e9:d5:7e:69:3d:a5:ba:c7:8c:a7:23:6e:73:
                    1d:f2:d2:4b:34:84:75:1f:cd:57:6e:45:5b:b0:ea:
                    17:f9:0d:f4:95:f1:c7:58:90:70:cf:68:25:33:ca:
                    05:f6:6d:88:2e:27:ce:ee:24:30:9a:9b:0b:60:f0:
                    b5:43:2d:d9:b7:b5:de:7c:33:98:f0:26:90:7a:4c:
                    a1:11:4d:e9:a9:c0:b6:47:a3:8e:1a:c4:a1:3a:06:
                    95:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:23:1D:BC:D6:83:A6:B5:58:2D:0C:F6:65:8D:69:BD:0B:B2:11
            X509v3 Authority Key Identifier:
                keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ca:3d:52:3b:51:8a:44:5a:f7:bd:75:71:25:c6:80:76:fd:
         88:6c:8b:35:e0:a3:73:fb:21:1f:48:40:65:45:3a:84:2e:0a:
         b0:69:3e:0f:2c:58:63:c6:41:5e:6b:89:72:aa:c5:65:28:92:
         ab:e6:31:52:d7:ae:8e:c3:c1:9c:b7:99:20:f4:05:26:da:c8:
         dd:c5:6b:d2:83:3d:74:38:42:7d:96:0c:3b:cd:c2:b2:3a:34:
         71:a3:ce:4b:29:25:0a:ac:17:84:16:47:9e:2f:1e:db:c7:14:
         33:87:c5:f8:e8:4a:77:3a:15:ae:35:8f:25:84:06:b9:70:bc:
         33:22:4c:b4:df:0a:30:6b:9e:43:fd:61:a1:1c:1c:1f:a2:80:
         57:f2:49:f3:cf:69:76:92:f8:90:44:31:83:1d:93:4e:cc:49:
         31:14:81:76:47:1c:0d:a1:9c:a8:58:1d:1f:9f:ed:a7:c9:ea:
         64:4c:7c:02:c1:1b:71:c0:7f:f5:39:6c:95:44:fc:6b:2d:8f:
         3d:b2:04:dc:63:59:d9:0f:7d:56:e3:51:ea:07:00:0c:e5:ea:
         2f:bd:36:4a:4c:a5:4f:d0:09:df:8f:2e:80:80:df:d6:ef:1f:
         24:af:48:6a:8e:9d:ed:94:51:29:5e:70:a9:cc:55:0d:6d:de:
         38:a2:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:27:24 2025 by rpki-client