Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File:                     5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier:          NKswzEF5BqWCywVu9hFAopgj2eNO2NOaheZrqe7GvTI=
Subject key identifier:   F4:58:D7:26:36:42:DE:9B:F0:46:63:FA:90:D7:74:2A:25:8E:4C:D0
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer:       /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial:       019A288B9D2BA4D78512EE4035A31F3D24FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number:          0F18
Signing time:             Tue 28 Oct 2025 02:00:29 +0000
Manifest this update:     Tue 28 Oct 2025 02:00:29 +0000
Manifest next update:     Wed 29 Oct 2025 02:00:29 +0000
Files and hashes:         1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: lhYxf768RVM4SDsf3cBTdjsy03OYk6jXl8JZVNin1IU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:28:8b:9d:2b:a4:d7:85:12:ee:40:35:a3:1f:3d:24:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
        Validity
            Not Before: Oct 28 02:00:29 2025 GMT
            Not After : Oct 29 02:00:29 2025 GMT
        Subject: CN=f458d7263642de9bf04663fa90d7742a258e4cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:94:4d:c2:e6:68:d4:49:0b:79:5f:48:0f:
                    e3:ea:cd:d6:c9:4f:a7:5f:96:63:c6:3c:ef:83:11:
                    4f:b2:2a:c3:c1:37:4d:ce:d3:b6:92:a1:8b:6a:f0:
                    b9:dc:e1:6d:28:db:46:7a:f6:57:0c:b5:7e:b1:03:
                    5d:64:29:42:a1:85:e5:ad:e2:0f:5a:8e:21:b0:61:
                    84:c3:09:3f:ba:8d:64:47:ad:6d:0f:c0:e5:63:e7:
                    06:c9:4f:27:ff:74:84:82:92:bb:54:fa:25:e8:c3:
                    88:42:c0:f4:6c:94:f0:76:bc:89:87:a2:b3:e0:cf:
                    0d:64:b6:8a:a8:e3:55:76:cf:c5:92:46:9b:9a:bf:
                    e2:75:01:43:c9:19:15:9f:8b:ea:f5:f7:72:15:41:
                    61:fb:e0:0f:51:c5:e4:52:af:a4:31:0e:0f:00:a5:
                    78:9c:f8:37:25:16:5b:a8:46:d2:2a:b9:a3:c7:da:
                    65:cc:50:10:31:27:7b:5a:29:1b:33:6a:40:a4:8d:
                    b9:f6:e0:e7:9c:b7:d9:43:3d:20:c5:80:6a:90:8e:
                    21:bf:a6:b5:c5:e6:fe:45:8d:59:eb:a0:f4:a2:04:
                    4d:90:35:9d:29:fa:ea:8c:cf:89:3e:db:f7:2d:ce:
                    db:58:7f:e2:33:05:1f:3f:b9:ab:6f:ba:51:a8:2e:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:58:D7:26:36:42:DE:9B:F0:46:63:FA:90:D7:74:2A:25:8E:4C:D0
            X509v3 Authority Key Identifier:
                keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:4a:8e:1d:0e:1e:e5:86:37:f7:91:33:b6:4d:71:2e:4b:3b:
         65:05:c6:6d:9a:b6:8d:66:a1:e3:1a:b4:6c:15:ac:b4:2d:2d:
         c3:4d:77:0e:66:cc:df:1a:f1:cc:f2:00:5e:b6:27:c7:60:67:
         d3:ff:ff:bb:04:ad:dc:78:f8:c5:8f:c5:e6:b0:37:eb:f3:3e:
         3a:c5:de:05:f7:14:4c:ac:a6:c8:5e:06:83:c1:ee:a3:92:3e:
         2b:6f:dc:dc:e9:d0:82:95:0c:ff:5b:ed:ac:57:43:97:e6:a6:
         5a:20:3f:64:87:b2:47:e3:d6:e6:66:d4:67:dd:6b:22:c8:1a:
         ef:f0:fe:e2:0e:ab:c8:93:97:dd:84:b7:6c:ee:20:68:da:2f:
         de:a0:b5:61:75:66:ef:60:45:66:14:4e:30:03:86:e5:db:b9:
         40:e5:9a:9a:35:f6:3d:25:ca:80:06:1e:58:4d:76:bf:d1:93:
         9a:de:43:c5:bf:04:26:10:e2:87:b8:ad:b7:f3:86:77:35:23:
         0d:8b:59:79:93:86:52:0a:29:39:5e:a0:c5:3f:9b:e8:5a:e4:
         54:87:17:4a:2f:69:d7:14:7b:de:11:6c:f1:a1:73:b2:4c:81:
         58:1a:7b:4b:2f:2d:51:07:ac:5c:ad:e7:5e:75:90:4d:b0:87:
         c9:6f:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:46:02 2025 by rpki-client