Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File:                     5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier:          kvt56ugKNV/3tQiO1LK4zgWiPlQx47Rn0zvl/+p10wY=
Subject key identifier:   E9:7D:66:46:75:0F:24:85:10:70:1D:D1:4A:03:7E:01:0F:68:7E:12
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer:       /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial:       019773099BC3A4ADCE7F4E11A5AF09C2500F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number:          0F65
Signing time:             Sun 15 Jun 2025 10:01:38 +0000
Manifest this update:     Sun 15 Jun 2025 10:01:38 +0000
Manifest next update:     Mon 16 Jun 2025 10:01:38 +0000
Files and hashes:         1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: 5gMUzPWuFazF00+fU05X67WaZPaJ2V5GJSY1Plxo9Os=)
                          2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 10:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:09:9b:c3:a4:ad:ce:7f:4e:11:a5:af:09:c2:50:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
        Validity
            Not Before: Jun 15 10:01:38 2025 GMT
            Not After : Jun 16 10:01:38 2025 GMT
        Subject: CN=e97d6646750f248510701dd14a037e010f687e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:18:64:62:54:67:54:1b:ac:a6:3e:d0:ca:f6:
                    76:f7:e6:a6:d4:a4:55:ca:43:11:fc:eb:32:4c:04:
                    65:e3:48:a9:b2:d3:12:ec:66:33:8a:af:12:a8:b5:
                    77:95:6d:0d:8e:7c:d9:c6:05:80:e8:f0:fc:aa:75:
                    eb:b5:af:9e:65:46:53:12:96:cc:dc:78:ad:ab:0d:
                    4d:89:dc:45:c6:3f:74:0f:0d:a5:4b:43:1c:36:38:
                    34:fe:cd:78:ed:d7:50:8d:c9:92:68:ec:d1:73:a8:
                    55:54:f0:fe:53:c5:be:25:2d:da:61:c9:a7:ab:e8:
                    70:21:79:62:a4:81:e2:d6:54:7a:e2:e7:f7:13:b2:
                    6c:7a:4d:20:7e:bb:05:6f:18:43:06:8c:65:c7:7b:
                    0a:5d:cc:cd:08:84:de:b9:a0:ad:8d:4c:9a:30:70:
                    51:e4:48:f5:3e:c4:e6:9c:da:58:62:15:82:74:27:
                    d1:b9:83:8d:08:7d:73:90:ec:45:e3:be:0f:d5:30:
                    66:95:b0:1a:44:86:8e:19:14:18:89:a4:45:92:3d:
                    16:d9:3b:d2:17:51:f4:d8:57:15:b9:39:5a:91:98:
                    14:33:ff:05:05:1e:11:c2:76:0c:f8:85:79:55:8c:
                    22:2b:b0:fe:cb:31:cc:23:f4:fe:6f:1c:01:20:69:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7D:66:46:75:0F:24:85:10:70:1D:D1:4A:03:7E:01:0F:68:7E:12
            X509v3 Authority Key Identifier:
                keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4b:33:bd:13:13:46:0d:f7:83:56:81:b3:fd:f6:8c:6b:32:
         34:25:07:fa:6c:fe:a7:a4:aa:8e:7e:16:f7:18:6c:1c:26:bb:
         c2:59:08:9e:38:a2:c9:be:2c:43:53:e1:f0:ef:df:95:96:57:
         42:f2:5b:97:38:e9:cb:04:88:f4:14:5a:17:4d:5b:77:dc:de:
         68:cd:01:d9:e7:5e:f5:50:81:e6:ff:e5:aa:eb:92:d7:1b:e2:
         d4:65:a3:61:3f:cb:fb:ae:c8:87:4a:9e:b4:50:29:5c:b0:e6:
         e5:b1:96:18:0f:c5:4a:b5:67:67:57:03:9b:d2:d9:86:e7:88:
         e7:90:dd:31:a9:a7:04:a4:14:b2:96:3f:4c:c0:6b:e4:55:9e:
         77:89:2b:92:87:a6:15:39:d0:14:f4:91:12:f2:ee:77:df:6b:
         6f:73:e4:2a:64:d5:0a:96:05:7c:e2:0a:51:04:19:93:0d:8f:
         31:8d:32:05:0f:b9:7e:3b:1e:fd:a1:f9:21:be:3d:fa:9b:f0:
         03:9e:02:72:60:b1:09:53:ac:7f:19:c0:2d:fa:54:43:17:1a:
         ce:35:42:6c:1b:50:ab:85:1c:46:cf:c8:43:c0:f2:b0:88:79:
         09:95:76:12:2d:b0:e2:cb:12:d8:19:9d:fc:3e:a1:4b:e9:14:
         ab:fc:86:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:38:13 2025 by rpki-client