Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
File:                     5-aiybui7N1AdLMVN1mDXoI6uOQ.mft (raw, json)
Hash identifier:          +Llic9BXQ2suwxvccIP0lRlUvE2Mq4b+a8mdE5K/wvY=
Subject key identifier:   BC:5D:BD:DC:AC:BC:46:35:6A:7E:CB:52:F9:E7:84:50:B3:BF:54:DD
Authority key identifier: E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4
Certificate issuer:       /CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
Certificate serial:       01974A7B97EE9786360525119F26A1DCB866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
Manifest number:          0C5D
Signing time:             Sat 07 Jun 2025 13:01:42 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:42 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:42 +0000
Files and hashes:         1: 5-aiybui7N1AdLMVN1mDXoI6uOQ.crl (hash: JIVElm7E1JTdIfCghvEnK5gjiWjpbGUS1qMKZkGvYQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:97:ee:97:86:36:05:25:11:9f:26:a1:dc:b8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7e6a2c9bba2ecdd4074b3153759835e823ab8e4
        Validity
            Not Before: Jun  7 13:01:42 2025 GMT
            Not After : Jun  8 13:01:42 2025 GMT
        Subject: CN=bc5dbddcacbc46356a7ecb52f9e78450b3bf54dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fe:b5:dd:fd:7e:55:35:73:81:81:c1:3e:04:
                    d9:89:18:eb:d0:2c:16:ea:7a:18:18:26:26:53:c3:
                    41:c5:2f:80:6d:0b:58:59:a0:ed:5f:92:80:b8:cb:
                    0e:d6:5b:37:1a:b5:94:cf:74:94:ce:76:63:bf:58:
                    1f:21:71:ff:d5:93:df:39:9b:3a:c2:93:cc:c6:5f:
                    94:36:d5:02:5b:70:df:1e:ce:69:d2:94:f5:63:22:
                    d5:ad:3b:bd:49:80:f8:3e:fc:63:c8:3f:43:9a:56:
                    9c:1a:5d:7d:a1:e4:aa:d0:25:83:0c:ed:04:f2:1c:
                    8d:51:95:08:bc:b4:4e:d4:69:6e:af:59:d7:56:f5:
                    89:da:bb:26:e5:40:50:16:e8:b0:81:48:7e:7c:fd:
                    a0:39:8d:44:d9:ea:3f:5d:a2:92:f9:8f:b0:e5:e2:
                    cc:3d:8f:be:a9:7f:b4:53:35:0a:01:24:ed:e5:d8:
                    5b:e9:71:58:09:a6:55:8c:38:6a:3e:04:b7:54:32:
                    16:39:85:32:eb:88:90:d0:58:4d:18:5b:25:47:16:
                    5e:e3:42:53:12:1a:b2:f7:1b:d6:a6:91:31:1b:24:
                    a1:10:91:21:02:38:46:15:88:4c:a0:78:a7:f3:2c:
                    63:0b:22:39:4a:45:3e:44:4f:46:47:10:27:70:72:
                    b9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5D:BD:DC:AC:BC:46:35:6A:7E:CB:52:F9:E7:84:50:B3:BF:54:DD
            X509v3 Authority Key Identifier:
                keyid:E7:E6:A2:C9:BB:A2:EC:DD:40:74:B3:15:37:59:83:5E:82:3A:B8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-aiybui7N1AdLMVN1mDXoI6uOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/35b59e-bc27-4206-a7d9-53569aca3a5f/1/5-aiybui7N1AdLMVN1mDXoI6uOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:c4:bb:e8:71:4c:b4:26:2f:8c:a5:c4:31:92:cc:a4:cd:07:
         27:bc:8c:1e:86:4a:53:4e:ca:d2:64:7a:ec:8c:ff:22:70:b9:
         7b:7e:75:7f:7f:4d:19:7d:ff:03:45:97:2d:a3:49:93:8b:82:
         76:bd:0b:98:ab:54:11:d8:3e:b6:d3:e4:0a:8f:f6:5b:1a:38:
         66:f4:3a:fc:17:79:a6:7b:a0:66:51:2a:a9:93:b7:37:89:7b:
         52:4d:93:49:06:d6:ad:d0:43:75:a9:cb:d0:3a:bd:89:09:a0:
         5e:8c:f1:82:4a:a4:0e:ea:13:28:5f:6b:d0:34:90:53:f5:18:
         fb:cc:d9:bf:c4:b3:b6:fc:b5:1b:cc:88:d1:be:f9:e0:fd:1e:
         13:bd:01:1e:f7:90:51:fe:ea:8e:07:1b:a3:04:c5:eb:9c:9a:
         ef:78:01:c4:8a:f0:df:5c:56:9f:06:8f:15:b8:44:ac:11:dc:
         c4:9a:1a:d9:f5:d4:ce:60:28:d5:ce:3d:59:11:bf:ad:94:5b:
         55:0c:04:76:f2:1c:41:83:98:ec:45:b4:21:86:4b:2a:d0:ef:
         a7:1a:1f:d8:6c:9b:3a:a3:f0:c6:25:11:31:a3:51:e8:3c:be:
         51:fd:ad:df:3b:ca:c7:58:2e:87:03:46:fd:75:a1:65:34:49:
         08:b3:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:50 2025 by rpki-client