Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File:                     5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier:          dXjyW8n20PFD70x5G3YlqjfrseNCcpPnM3BU8g2z9lY=
Subject key identifier:   68:C7:0E:4F:36:CF:09:F8:91:5D:D9:31:43:F3:44:D0:DF:E6:E4:3C
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer:       /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial:       01975AC9BDF4C55970021D8D6B6C66FB7816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number:          0DA3
Signing time:             Tue 10 Jun 2025 17:01:00 +0000
Manifest this update:     Tue 10 Jun 2025 17:01:00 +0000
Manifest next update:     Wed 11 Jun 2025 17:01:00 +0000
Files and hashes:         1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: 80GjQidAcYE3CykCF/UhOn0imA7aoYm7gN9GvsRRNbo=)
                          2: h1D7CnT2PY1NPObHiR4r21lOKxw.roa (hash: FFNEtoxBXjniX9r1DmUch9vHzQqa3zr4aAAiKoIwvtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:c9:bd:f4:c5:59:70:02:1d:8d:6b:6c:66:fb:78:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
        Validity
            Not Before: Jun 10 17:01:00 2025 GMT
            Not After : Jun 11 17:01:00 2025 GMT
        Subject: CN=68c70e4f36cf09f8915dd93143f344d0dfe6e43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:75:12:d4:4c:e7:97:b0:9f:ba:3e:d9:c5:
                    a7:c9:f1:bb:67:a8:f5:9a:8e:c4:38:0f:6b:80:0e:
                    18:46:a1:2e:43:38:a5:31:fa:2c:49:cb:ae:b4:61:
                    27:70:d9:d0:be:17:b7:79:3c:1e:22:0f:db:87:0d:
                    44:c4:42:82:bb:4e:45:36:69:f3:24:55:36:33:bb:
                    ce:84:ef:87:39:43:3b:20:f2:44:14:c1:68:a0:87:
                    6c:b3:7e:f1:10:5f:6a:13:c6:e1:13:65:e7:39:1f:
                    d4:07:c1:02:7f:48:65:70:e0:46:7e:43:f1:95:b3:
                    19:5e:00:08:06:81:2a:cf:67:6c:32:67:91:54:b4:
                    86:fa:d7:17:97:04:3b:c8:ca:e9:30:c1:09:56:b8:
                    2e:97:aa:97:e5:34:37:e6:66:af:4b:a4:ba:54:6c:
                    b6:2d:b4:e0:f8:14:25:e7:86:3f:93:5b:2a:bf:30:
                    5b:16:b1:94:e9:79:d5:69:59:9d:5b:7e:f2:92:a3:
                    e3:cc:d2:61:26:e0:fe:60:00:ba:59:94:3f:2c:49:
                    b7:9a:c5:05:c4:8b:9e:e7:5a:1d:d0:cc:63:f2:55:
                    d3:29:6a:82:e9:6c:48:e3:48:ec:07:da:84:3e:74:
                    97:83:ac:12:0c:69:ec:13:e1:1b:15:6f:11:07:ff:
                    59:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C7:0E:4F:36:CF:09:F8:91:5D:D9:31:43:F3:44:D0:DF:E6:E4:3C
            X509v3 Authority Key Identifier:
                keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:70:cb:6b:6b:b3:41:b1:50:04:89:7e:ba:9c:68:a0:4a:57:
         e0:97:dc:78:d0:e7:70:32:ca:3b:25:05:61:88:c4:66:df:15:
         a7:2c:02:b2:69:48:79:ae:77:14:af:7e:8a:b5:b0:7f:9c:3f:
         3b:6a:1e:80:e8:08:a3:07:98:f5:1d:b2:44:b4:58:07:90:85:
         23:60:3e:bb:7e:12:6a:91:f1:95:67:59:fb:94:23:5c:33:ad:
         92:cd:2a:12:e7:43:73:c2:d2:21:8d:30:bf:96:dd:e7:b4:30:
         7e:d9:03:6a:77:5b:5f:39:a0:6b:38:66:ec:c2:38:79:38:77:
         e9:ad:be:2c:3f:68:d5:82:9e:7c:51:9f:8b:17:84:6b:07:1f:
         05:9e:91:11:a4:31:c2:6e:37:2b:65:31:c1:92:eb:c9:18:61:
         6c:d4:6e:73:91:65:81:fc:72:f7:f3:10:16:32:1e:be:f6:49:
         3a:65:ac:1d:d9:cb:96:77:77:4f:ca:a7:1f:b4:b1:95:a9:f5:
         a5:8c:72:9b:6c:d3:00:6f:78:52:23:bb:73:6a:46:7f:d1:25:
         a4:f0:c5:64:b5:68:0e:5e:bd:1d:0f:fb:04:7f:00:fa:a7:0f:
         ee:df:e8:0a:84:e9:39:c0:7b:d8:3f:59:02:3d:40:8e:a1:87:
         8d:67:93:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdayb30xVlwAh2Na2xm+3gWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGU2NjkyZDk3MjhkYTgxZjVjNGY0OWUxNTA3NzNlMWFm
YmM4MGIwHhcNMjUwNjEwMTcwMTAwWhcNMjUwNjExMTcwMTAwWjAzMTEwLwYDVQQD
Eyg2OGM3MGU0ZjM2Y2YwOWY4OTE1ZGQ5MzE0M2YzNDRkMGRmZTZlNDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTV1EtRM55ewn7o+2cWnyfG7Z6j1
mo7EOA9rgA4YRqEuQzilMfosScuutGEncNnQvhe3eTweIg/bhw1ExEKCu05FNmnz
JFU2M7vOhO+HOUM7IPJEFMFooIdss37xEF9qE8bhE2XnOR/UB8ECf0hlcOBGfkPx
lbMZXgAIBoEqz2dsMmeRVLSG+tcXlwQ7yMrpMMEJVrgul6qX5TQ35mavS6S6VGy2
LbTg+BQl54Y/k1sqvzBbFrGU6XnVaVmdW37ykqPjzNJhJuD+YAC6WZQ/LEm3msUF
xIue51od0Mxj8lXTKWqC6WxI40jsB9qEPnSXg6wSDGnsE+EbFW8RB/9ZWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjHDk82zwn4kV3ZMUPzRNDf5uQ8MB8GA1UdIwQY
MBaAFOUOZpLZco2oH1xPSeFQdz4a+8gLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgt
MDM5YzE0MDVlMTc1LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9mMmVkNTAtNGM5YS00MzQ0LTkxNDgtMDM5YzE0MDVlMTc1
LzEvNVE1bWt0bHlqYWdmWEU5SjRWQjNQaHI3eUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXDLa2uz
QbFQBIl+upxooEpX4JfceNDncDLKOyUFYYjEZt8VpywCsmlIea53FK9+irWwf5w/
O2oegOgIoweY9R2yRLRYB5CFI2A+u34SapHxlWdZ+5QjXDOtks0qEudDc8LSIY0w
v5bd57QwftkDandbXzmgazhm7MI4eTh36a2+LD9o1YKefFGfixeEawcfBZ6REaQx
wm43K2UxwZLryRhhbNRuc5Flgfxy9/MQFjIevvZJOmWsHdnLlnd3T8qnH7Sxlan1
pYxym2zTAG94UiO7c2pGf9ElpPDFZLVoDl69HQ/7BH8A+qcP7t/oCoTpOcB72D9Z
Aj1AjqGHjWeT/w==
-----END CERTIFICATE-----
Generated at Tue Jun 10 23:45:52 2025 by rpki-client