Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
File:                     5dasEgU_FIaz3nfxyHC1a538ORM.mft (raw, json)
Hash identifier:          t5B9269yrOzXuq4VHRJC7tq6A+BwegHEr/+JoJc3oe4=
Subject key identifier:   00:7F:50:51:06:AD:2C:C4:A3:7B:DB:53:E1:25:58:7F:DB:89:16:3C
Authority key identifier: E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13
Certificate issuer:       /CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
Certificate serial:       0197469DB7C58A34141EAACC1546B7EBB19C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
Manifest number:          1578
Signing time:             Fri 06 Jun 2025 19:00:30 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:30 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:30 +0000
Files and hashes:         1: 5dasEgU_FIaz3nfxyHC1a538ORM.crl (hash: ypJDDrd2Xfolg7aILFfuifXANznLX3FXOgt/zN4IsEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:b7:c5:8a:34:14:1e:aa:cc:15:46:b7:eb:b1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6ac12053f1486b3de77f1c870b56b9dfc3913
        Validity
            Not Before: Jun  6 19:00:30 2025 GMT
            Not After : Jun  7 19:00:30 2025 GMT
        Subject: CN=007f505106ad2cc4a37bdb53e125587fdb89163c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:a8:e6:8f:54:4d:cd:45:73:a9:58:06:eb:
                    fa:27:1c:4b:1c:ea:a0:9d:44:86:7d:62:7d:ae:42:
                    73:ef:88:e0:98:86:2b:c5:a7:82:1c:1f:c9:16:d7:
                    75:6e:e3:46:0d:65:5a:cd:90:00:14:03:af:eb:70:
                    f0:2e:98:42:38:6c:93:5e:33:87:6d:dc:07:ea:c1:
                    1e:7f:cf:82:8b:e5:95:8f:ff:2f:bc:3f:d6:d0:29:
                    52:83:d3:26:ea:11:66:a5:89:62:2e:bd:6b:c6:b6:
                    f7:f6:ac:71:69:4d:6d:e6:48:2e:19:58:e8:df:ea:
                    1a:f1:5b:23:e6:61:11:8b:ac:61:1b:b2:2c:ca:68:
                    04:98:85:ff:1b:52:46:57:98:b8:ca:3f:fd:51:24:
                    20:12:1e:19:f9:5c:6f:4c:6b:57:bf:44:ae:a7:aa:
                    91:2d:e2:50:43:b8:d8:f8:41:9b:c0:b0:4f:42:03:
                    d0:43:54:fa:6e:8b:43:05:de:3a:b8:58:9e:72:8f:
                    6c:82:f5:15:3f:8e:b8:e6:ea:53:fc:5f:32:61:99:
                    a7:af:af:a5:e1:62:64:a3:7f:f3:d7:8d:f4:0a:81:
                    4f:16:2a:d8:a8:5e:38:03:9a:67:f0:20:cb:bd:c2:
                    56:9e:26:c4:74:21:11:26:be:f2:2a:ac:b5:d7:2d:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7F:50:51:06:AD:2C:C4:A3:7B:DB:53:E1:25:58:7F:DB:89:16:3C
            X509v3 Authority Key Identifier:
                keyid:E5:D6:AC:12:05:3F:14:86:B3:DE:77:F1:C8:70:B5:6B:9D:FC:39:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dasEgU_FIaz3nfxyHC1a538ORM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e62c4f-5ee2-4fe0-9540-b103fa4743b9/1/5dasEgU_FIaz3nfxyHC1a538ORM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:34:89:3e:8a:ec:57:5c:71:25:8a:00:95:38:f7:ea:26:
         c9:82:bc:64:5a:c0:6e:10:d4:5c:13:d3:e3:b8:95:d1:82:36:
         96:6b:22:dc:c0:79:5c:88:ef:66:c2:6a:3a:d4:e8:f0:f2:52:
         8a:f1:c7:23:e4:8d:5c:b1:1d:8b:f8:c2:ba:f1:1c:ae:7c:d7:
         24:1f:bc:aa:5a:80:aa:3c:4f:b7:f1:ab:ac:85:e1:07:b9:ab:
         7b:70:8d:5b:d3:78:22:38:51:6e:35:64:79:83:d7:69:36:57:
         c3:b3:11:0b:63:dd:b9:bc:82:e7:47:fb:8f:24:aa:24:b3:76:
         c8:a7:f2:1a:f9:4d:be:c3:d2:06:3b:5e:66:f1:85:4d:95:b5:
         1e:9f:35:43:a2:4f:2d:d2:40:08:43:86:05:8c:7c:8f:ff:81:
         b7:76:49:85:d2:a6:22:4a:e1:8c:a0:31:29:1e:ec:f3:0d:69:
         55:de:d4:3c:ad:af:d1:15:c8:16:a4:0e:96:7a:11:5f:fd:d4:
         23:ff:b7:d7:69:b7:a0:9e:ed:95:9b:9f:7f:1c:8c:76:a9:56:
         91:38:97:f1:fd:50:9a:05:63:da:48:ee:43:b2:d1:d9:a2:12:
         3d:27:3f:3d:21:83:34:04:a0:1b:2d:82:b9:49:fe:01:5c:a3:
         b4:ac:02:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:46 2025 by rpki-client