Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
File:                     5DWo9PNqSBGpLRlhc-HEmarMd9U.mft (raw, json)
Hash identifier:          S0sOIeAhDpeoX69gL0nLHtLmbJ52vogKYKCjyPlLtJ4=
Subject key identifier:   90:25:1E:76:C0:0F:9B:61:86:24:D2:59:20:5A:C9:0B:09:1A:A0:05
Authority key identifier: E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
Certificate issuer:       /CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Certificate serial:       019922FA47328D3B35DB4B57CEA757AC51AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
Manifest number:          0D4F
Signing time:             Sun 07 Sep 2025 07:00:51 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:51 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:51 +0000
Files and hashes:         1: 5DWo9PNqSBGpLRlhc-HEmarMd9U.crl (hash: ZYUp3gvBO/qvEF5PtrSqCp0DmDkj0B/lfWn5y6sZeCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:47:32:8d:3b:35:db:4b:57:ce:a7:57:ac:51:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
        Validity
            Not Before: Sep  7 07:00:51 2025 GMT
            Not After : Sep  8 07:00:51 2025 GMT
        Subject: CN=90251e76c00f9b618624d259205ac90b091aa005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:d7:66:89:0b:70:ce:83:87:f7:f2:42:ac:
                    32:59:2b:dd:ec:71:fa:cb:c9:4c:82:e4:16:06:aa:
                    79:3f:2f:73:63:a6:85:54:d3:f4:d9:51:41:c3:8f:
                    5d:31:0e:7a:83:73:8b:86:aa:82:9f:f8:a1:79:48:
                    02:a5:2b:ff:81:b3:3b:46:1c:d2:8e:6a:1e:cb:a4:
                    af:f0:fb:1a:6d:57:99:ae:85:fe:53:58:35:ed:f7:
                    24:26:4b:3e:cb:5e:98:38:56:bc:76:b0:06:bb:2e:
                    83:85:e4:4a:e0:29:69:fe:5c:48:91:4d:e9:9b:01:
                    31:ea:34:4a:b2:4d:f8:4a:d7:4d:1c:60:30:2b:e7:
                    94:18:6f:c9:53:0e:44:03:fb:da:82:bf:4f:2c:e8:
                    d6:f3:04:c1:25:16:a8:c3:4d:cd:f1:e5:4e:e5:c0:
                    e7:c9:a1:a9:18:56:f8:10:e1:72:1a:d4:7c:8a:5d:
                    6a:49:91:18:9f:8e:37:fc:f6:3e:0c:e7:9b:a7:11:
                    99:8e:35:6e:f1:55:46:00:9e:41:ec:33:c6:d3:d7:
                    7f:87:59:46:e1:ab:ea:af:b6:5d:75:13:45:02:b5:
                    42:a9:00:f4:fe:be:b8:a8:a9:63:ef:28:30:ec:4b:
                    8c:c0:88:7e:54:47:95:09:15:ab:7a:c7:69:67:2e:
                    7f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:25:1E:76:C0:0F:9B:61:86:24:D2:59:20:5A:C9:0B:09:1A:A0:05
            X509v3 Authority Key Identifier:
                keyid:E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:69:8c:79:f3:fc:5f:f6:4d:5d:a8:0e:4e:7b:2b:98:7e:68:
         99:41:36:af:e9:e5:de:f3:dc:f0:42:fd:98:ff:78:4b:7d:7f:
         01:4d:2b:fa:b7:23:78:13:b0:43:89:8d:c0:93:39:8e:dc:28:
         f4:f6:bf:dc:ef:6e:56:e4:0f:59:67:f5:04:0e:ca:3a:2a:92:
         3b:f4:e0:92:5a:42:01:5e:83:9d:35:41:50:50:a1:a0:94:5d:
         80:66:3b:1c:2d:d0:bd:91:87:ed:ab:c8:e7:90:09:41:6c:67:
         f0:af:03:61:53:cf:76:c4:f6:26:e1:b3:83:42:4f:26:52:e6:
         77:b9:b5:40:20:c2:72:ea:07:a0:e2:e5:ef:23:b7:55:6c:55:
         49:a1:32:a8:ac:59:f3:c7:1a:a4:7a:f3:0e:e1:22:b7:b4:9e:
         31:91:3f:95:fd:b5:0e:bd:87:6e:cc:d2:c4:e3:d4:a0:78:c8:
         92:57:35:75:88:4d:6a:1e:b9:78:19:ee:33:18:c5:4a:37:85:
         06:42:6f:ee:30:90:5b:c2:58:03:a7:f7:57:5d:31:81:14:9c:
         17:79:c0:e8:e5:08:6a:dc:83:37:a5:02:96:ca:db:0d:7c:9d:
         24:1a:e3:d2:e8:6c:f4:ef:81:1a:ec:19:aa:53:95:71:aa:77:
         25:2f:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:11 2025 by rpki-client