Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
File:                     5lluFVL8CliEqIGzUoF9C3MAkIM.mft (raw, json)
Hash identifier:          huLslP1n4GYDJqDrsV5TqO/kwEOnLiRWnNdq05Ly6+M=
Subject key identifier:   69:25:77:82:B2:2F:20:9C:25:C8:3D:D0:27:F9:DB:82:2D:B2:33:DC
Authority key identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
Certificate issuer:       /CN=e6596e1552fc0a5884a881b352817d0b73009083
Certificate serial:       01974967BBEAD45297F4C82A3BDDC267C073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
Manifest number:          04D8
Signing time:             Sat 07 Jun 2025 08:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:24 +0000
Files and hashes:         1: 5lluFVL8CliEqIGzUoF9C3MAkIM.crl (hash: jXCdYUfXD3PhuwhLfszgEa9z2b5mtRZ1QMD539lV4yo=)
                          2: ZchGG8A8nhqHRHzSz8wIeuBKy7A.roa (hash: fyy0T0JEDqACIzgC4O1cOibFQ+4m6gfIvZEPpikdJzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:bb:ea:d4:52:97:f4:c8:2a:3b:dd:c2:67:c0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596e1552fc0a5884a881b352817d0b73009083
        Validity
            Not Before: Jun  7 08:00:24 2025 GMT
            Not After : Jun  8 08:00:24 2025 GMT
        Subject: CN=69257782b22f209c25c83dd027f9db822db233dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:92:cf:df:ca:23:7f:f7:8f:e4:b1:03:a9:
                    f2:6a:fe:c4:e2:d9:cb:20:4d:d5:81:18:d0:e7:2f:
                    5c:30:99:89:b9:aa:8d:ba:ad:36:ca:24:7d:b6:d8:
                    be:01:0d:b1:1e:5c:4e:4d:49:cd:f3:43:b6:60:9e:
                    5d:8e:88:07:1d:3b:22:1c:c2:f8:2b:4e:77:38:c0:
                    d3:26:f5:ec:55:68:9b:29:e4:5f:5a:55:a8:b5:5c:
                    6b:96:86:e7:c2:0b:83:36:14:13:8c:f3:84:57:62:
                    f3:15:14:71:91:ee:c4:b4:61:b2:34:52:31:74:fc:
                    13:60:ee:ef:4f:bb:8d:e6:c0:e2:06:37:1d:1e:1f:
                    cf:b7:39:9a:cc:f0:8b:0b:aa:d3:31:48:64:d5:73:
                    d4:ec:3f:13:e9:b6:20:74:67:af:5e:25:f8:aa:19:
                    a2:c3:12:55:55:94:bc:39:17:52:fb:6a:0d:9f:ce:
                    d6:82:35:7f:89:1d:6e:58:ab:46:e4:31:b9:44:39:
                    d9:89:19:53:88:63:9d:65:78:0e:e7:c3:bc:c4:44:
                    84:6d:28:ca:ea:3d:ba:c7:c7:bc:dc:f3:5d:45:61:
                    7c:64:a9:6b:72:19:b1:f7:80:3a:99:29:49:08:50:
                    ba:0a:43:ac:a9:04:38:56:02:78:70:2f:93:75:7f:
                    3c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:25:77:82:B2:2F:20:9C:25:C8:3D:D0:27:F9:DB:82:2D:B2:33:DC
            X509v3 Authority Key Identifier:
                keyid:E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:93:bb:42:57:27:fb:44:ea:8f:ef:cc:b3:b4:7a:01:41:
         ff:7a:c9:64:65:81:1a:26:bd:29:f0:5f:f8:3c:78:fd:7f:fa:
         85:f4:f7:a0:5a:1d:15:57:f2:d7:07:fe:c5:29:2f:7f:ec:51:
         4f:db:21:ec:e0:de:6e:1f:11:47:49:74:1c:1b:8b:09:81:60:
         2f:51:d2:25:34:ed:44:1d:3a:d2:90:59:b9:65:bb:43:03:13:
         ac:31:fd:c0:bc:66:84:eb:3b:05:16:77:f4:06:d1:fe:df:64:
         c9:15:87:3b:79:e0:25:26:59:2c:40:4d:a3:2e:00:13:dc:d3:
         90:82:b9:0a:d6:6e:35:5d:df:d6:f6:8f:7a:60:ff:94:95:8b:
         1d:48:29:19:9d:7b:88:3c:32:86:47:b3:8c:38:36:da:13:77:
         18:d3:34:04:6a:b8:18:67:74:85:55:e0:1b:ef:86:14:cf:ce:
         f7:c4:51:38:12:98:42:84:1a:bb:79:03:32:d5:1b:81:80:ed:
         e2:fa:03:73:ee:a4:ed:93:34:a9:df:2b:67:ab:12:c5:84:0a:
         3d:c2:80:bc:26:db:b5:3b:90:e2:26:88:29:38:a9:4f:fe:f4:
         60:fc:9e:9c:f6:25:1c:22:54:9a:c8:a7:ab:e1:99:88:b6:12:
         94:77:71:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:29:38 2025 by rpki-client