Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
File:                     5zqmpwU3TttxYIbqzxppeqLwjmE.mft (raw, json)
Hash identifier:          Ns8x/I7k15hCzKqQ0WWZB4XTl616U+vJsXlYX6TSO3s=
Subject key identifier:   77:52:7D:10:76:97:4C:5B:C3:6C:D9:28:9E:D6:09:CE:6F:AD:9C:D6
Authority key identifier: E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61
Certificate issuer:       /CN=e73aa6a705374edb716086eacf1a697aa2f08e61
Certificate serial:       019921B06234BB099E0985AE34B665C5F3ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
Manifest number:          06BF
Signing time:             Sun 07 Sep 2025 01:00:31 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:31 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:31 +0000
Files and hashes:         1: 5zqmpwU3TttxYIbqzxppeqLwjmE.crl (hash: 49TPbO3jjsUnAnBHAFasfq4KnG+0a/rE9b84fc5lR/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:62:34:bb:09:9e:09:85:ae:34:b6:65:c5:f3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73aa6a705374edb716086eacf1a697aa2f08e61
        Validity
            Not Before: Sep  7 01:00:31 2025 GMT
            Not After : Sep  8 01:00:31 2025 GMT
        Subject: CN=77527d1076974c5bc36cd9289ed609ce6fad9cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:ef:73:33:f3:a9:32:07:74:75:d6:ad:71:
                    d3:41:fb:1e:ef:30:25:f5:b7:2f:b6:6c:05:3a:23:
                    2d:9c:4a:b0:c8:74:d4:24:6e:98:ad:95:29:aa:5b:
                    62:49:05:ab:4a:0a:a8:1b:b1:ba:55:5e:c0:ef:64:
                    36:a1:2c:7a:ce:3a:8d:3e:67:63:02:e3:0f:de:27:
                    ab:77:d6:fe:de:62:e1:33:99:db:1e:65:2c:7f:dd:
                    e8:d3:8f:c6:a3:f5:43:d4:a7:63:20:9f:24:de:55:
                    e3:3e:20:07:63:10:84:bb:37:98:50:d8:d7:e8:58:
                    92:47:55:64:11:ba:f1:8c:53:8c:e6:1f:c2:9a:26:
                    6a:d8:fa:5e:c4:8a:95:bf:d3:63:5c:f6:6d:6e:3e:
                    ff:e7:9d:d7:2c:92:9d:18:1c:e3:b4:0a:77:1c:e9:
                    ae:4a:8f:9a:a4:35:f8:a4:74:4a:32:e2:ff:c8:b5:
                    d2:30:92:1d:98:79:f4:14:ad:61:62:3e:20:64:a9:
                    45:a0:f3:df:d9:b6:5a:10:aa:c8:da:46:03:3a:26:
                    c1:2f:a6:5f:cb:b1:bc:7f:bb:c5:a7:87:5c:b5:fd:
                    74:13:95:05:68:9a:58:0d:1e:a4:56:26:f8:f7:54:
                    54:cd:76:df:c8:a4:ce:58:44:23:82:b1:41:9c:f3:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:52:7D:10:76:97:4C:5B:C3:6C:D9:28:9E:D6:09:CE:6F:AD:9C:D6
            X509v3 Authority Key Identifier:
                keyid:E7:3A:A6:A7:05:37:4E:DB:71:60:86:EA:CF:1A:69:7A:A2:F0:8E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqmpwU3TttxYIbqzxppeqLwjmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/15d0f7-7daa-4ce7-b3f2-86009980edf4/1/5zqmpwU3TttxYIbqzxppeqLwjmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1c:92:19:00:75:29:da:ae:5e:90:65:e3:75:f6:a5:52:14:
         9f:81:fe:eb:ab:22:f2:47:90:13:6a:d6:03:3b:73:e6:86:fc:
         b7:00:9e:de:9d:bd:36:e0:15:ca:ae:e1:5b:e8:58:34:92:0c:
         5c:88:ba:ee:2e:69:51:b3:4c:2b:43:47:c5:1c:d5:ac:b4:b3:
         0e:26:05:a8:19:34:7e:7d:52:62:2d:11:b8:cf:70:b6:a3:e3:
         2a:99:c6:58:54:d3:fb:1a:36:db:72:f6:c2:8d:4e:69:1c:31:
         2d:48:56:0c:9b:2c:68:37:18:16:db:ce:2b:f9:df:c3:7d:d8:
         69:a7:67:e5:9f:a4:b2:a6:53:27:b2:f2:85:9f:e1:ea:d7:17:
         4d:1f:16:fe:67:22:ba:79:40:b8:c9:09:56:c9:91:e8:d9:c0:
         98:23:75:3d:ce:c0:35:4d:a4:29:3d:78:f1:86:e4:ce:90:98:
         66:42:33:c7:6b:bf:f0:b2:ee:97:3b:ab:34:eb:53:94:e6:49:
         46:fb:1a:67:94:b5:a2:a6:5c:d4:65:b0:b8:4a:e2:a7:79:fa:
         d9:23:24:6d:e1:bc:39:e9:89:51:f9:27:17:1e:da:5d:e9:d4:
         02:ee:f8:00:94:b0:07:e9:91:f8:c9:f4:df:b9:b2:65:f8:e3:
         19:b1:bb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:50 2025 by rpki-client