Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File:                     V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier:          WBEtSfHB3cgAV27UIwrzmIrKOHs2Us0TEGLxmz9X+QI=
Subject key identifier:   5E:44:C4:98:D0:0D:F6:52:A6:41:CC:D5:0D:03:1D:65:2C:F6:2D:19
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer:       /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial:       01974B56B3337C4BC4AE33C7D26C84ADC663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number:          1268
Signing time:             Sat 07 Jun 2025 17:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 17:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 17:01:02 +0000
Files and hashes:         1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=)
                          2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: ufOWExN3Qi4Wh9sX4baYYu8g6jhk7Q9t9UcGRKK2RJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:b3:33:7c:4b:c4:ae:33:c7:d2:6c:84:ad:c6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
        Validity
            Not Before: Jun  7 17:01:02 2025 GMT
            Not After : Jun  8 17:01:02 2025 GMT
        Subject: CN=5e44c498d00df652a641ccd50d031d652cf62d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:9f:0c:8f:21:9e:29:df:4e:5a:3c:44:97:
                    91:fc:11:81:37:30:08:df:2f:92:34:bb:92:3e:50:
                    a6:c5:8e:2f:da:c4:34:9f:c4:8c:12:de:02:87:de:
                    10:0e:d3:80:9b:84:41:b7:04:e6:64:29:a8:6c:e6:
                    81:62:a2:9e:60:1b:2f:5d:b2:fe:0d:f0:8f:4d:3d:
                    2d:55:cd:0e:1c:52:27:4c:24:80:0c:e3:7d:f5:9b:
                    d1:70:5c:2c:3d:8f:0e:5f:d1:45:38:32:37:09:03:
                    04:98:6e:fe:fe:10:bc:ad:64:07:98:80:40:b7:df:
                    f5:d6:ae:bf:88:6e:21:c2:8e:f3:16:82:4d:c2:cd:
                    a9:bd:0e:ba:f4:77:d0:f5:c0:b2:d7:04:47:59:7a:
                    ed:b1:01:a3:bd:42:3d:c8:73:b0:9a:3f:b5:04:94:
                    bc:f3:d3:1a:87:eb:30:9f:f0:7f:d0:10:c1:63:42:
                    c4:cd:52:77:cb:12:fd:df:36:32:37:f2:cf:c3:57:
                    10:a0:11:86:87:14:e9:06:f7:be:c3:40:6c:84:9a:
                    8b:f2:e7:f7:af:0e:6f:f6:7b:14:90:08:0e:76:bf:
                    4e:a0:0f:a6:a2:b3:6a:c2:bd:9c:f1:7e:15:3c:82:
                    90:c2:09:ed:f5:06:d1:93:a9:75:d7:f5:45:54:14:
                    c2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:44:C4:98:D0:0D:F6:52:A6:41:CC:D5:0D:03:1D:65:2C:F6:2D:19
            X509v3 Authority Key Identifier:
                keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9b:9f:85:8d:9f:a6:66:d5:c0:0e:6d:77:0d:12:2d:d3:d5:
         1a:e4:44:18:68:d7:43:e5:bd:63:38:91:43:6b:e5:4d:93:2e:
         96:cb:18:42:fe:cc:3f:d8:f8:5d:2f:9f:06:6c:14:8f:e5:ee:
         82:89:dc:4f:f9:b5:c4:f2:94:fc:4c:ed:23:0d:31:b0:31:88:
         a5:f4:76:dc:eb:9f:dc:40:98:d1:34:f4:0b:bc:d7:42:72:7d:
         fb:7e:24:d1:ae:b9:52:f6:b1:2c:8c:7e:e5:39:71:62:31:23:
         d2:2d:6f:ae:5d:a6:40:f5:01:0e:c3:ae:16:84:c5:57:80:37:
         e1:61:18:0e:f5:22:68:0a:18:3c:bf:21:d4:9d:19:d3:16:cb:
         31:a0:de:e4:63:a3:4f:b5:1a:86:8d:6a:8a:d1:be:9d:73:ae:
         fb:c5:5d:31:10:82:35:91:51:bd:0a:ea:0f:ac:79:16:e8:b9:
         ea:c1:3c:7a:8b:e3:f8:10:1d:55:9e:8f:9b:36:89:a1:3a:13:
         99:62:a1:cb:88:c5:8b:0a:7e:b7:50:21:37:03:3f:5d:83:62:
         85:3e:34:08:1f:53:7a:58:3b:81:ac:aa:bb:d7:a7:10:d8:cb:
         3c:3e:02:71:30:ea:da:9f:8d:b2:29:ba:84:c3:f2:90:f1:e0:
         23:1e:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:06 2025 by rpki-client