Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
File:                     5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft (raw, json)
Hash identifier:          Kmy5KDROC7P/Cqhg9w+Oo+YwPqXDu6rQcwtfN+SGk4k=
Subject key identifier:   61:6E:D6:41:2E:E6:DC:82:0E:CB:73:00:7B:AF:1A:E7:2B:C7:D4:7D
Authority key identifier: E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75
Certificate issuer:       /CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
Certificate serial:       0197CDCEEFD090DA2461621B4F4A4CAED605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
Manifest number:          05C5
Signing time:             Thu 03 Jul 2025 01:03:00 +0000
Manifest this update:     Thu 03 Jul 2025 01:03:00 +0000
Manifest next update:     Fri 04 Jul 2025 01:03:00 +0000
Files and hashes:         1: 5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl (hash: 39BO7JPOJhp0xYGGKT439N+Og7KsxVxYj7gzDuDF/b0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 01:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:ce:ef:d0:90:da:24:61:62:1b:4f:4a:4c:ae:d6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
        Validity
            Not Before: Jul  3 01:03:00 2025 GMT
            Not After : Jul  4 01:03:00 2025 GMT
        Subject: CN=616ed6412ee6dc820ecb73007baf1ae72bc7d47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:6f:84:60:39:48:84:0b:b6:84:06:0a:ef:
                    1c:e6:cd:fe:01:81:87:8b:8f:01:95:06:16:ff:0a:
                    b3:14:71:15:cb:34:cd:5a:77:db:3f:e6:40:f2:24:
                    53:84:cf:85:5d:44:e6:97:34:1e:aa:4b:5c:f7:54:
                    77:08:01:1d:6b:a7:4c:b1:cc:e2:ac:d1:9c:89:0d:
                    d1:be:39:8c:3d:78:ad:dd:08:8c:e7:94:43:70:01:
                    4f:80:49:ea:31:e2:10:ee:1a:6d:32:34:48:37:6b:
                    29:3f:06:90:8c:77:a6:ab:98:5a:11:74:fa:33:a2:
                    58:f5:86:d2:42:bc:b5:6b:48:e1:50:34:a4:8e:70:
                    67:c3:75:fc:bc:83:1b:cf:ba:77:00:3b:ce:b1:5c:
                    88:2d:fe:1e:ef:9b:1b:ab:a6:8d:3c:16:a0:56:d0:
                    ca:86:d8:fa:74:91:f2:68:77:17:bd:ac:fc:8d:8d:
                    93:89:99:22:14:06:b2:bc:aa:9e:28:aa:87:f6:17:
                    1c:ad:6a:a8:bc:6b:68:04:46:fa:6c:e6:03:26:b7:
                    27:db:b2:38:85:79:30:d9:f9:67:c1:a0:6d:75:00:
                    9c:0c:9c:43:39:5b:90:54:48:10:59:a3:73:b7:96:
                    28:09:2b:f5:3a:55:47:97:88:28:c0:81:78:ec:7e:
                    63:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6E:D6:41:2E:E6:DC:82:0E:CB:73:00:7B:AF:1A:E7:2B:C7:D4:7D
            X509v3 Authority Key Identifier:
                keyid:E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:df:64:eb:49:9c:66:3a:cf:c1:17:1d:9c:ce:8b:1b:35:46:
         5f:8b:e4:aa:8b:fd:cb:08:3b:83:32:14:ee:58:e6:62:cf:74:
         5d:c3:6d:a5:e5:86:8a:5d:47:be:df:0d:13:b5:95:c3:84:e4:
         7b:79:b4:d2:e5:31:c6:2a:ea:31:fe:df:53:d3:2e:0f:22:44:
         d0:55:d6:57:e9:9c:7b:5c:d3:c3:0a:8d:87:3c:db:71:5a:17:
         07:96:4d:83:33:6e:04:d9:49:0d:e9:66:83:2c:bb:d2:0a:f0:
         0d:3e:cc:fc:d8:8d:a9:b7:87:6d:8d:07:6a:45:a8:ea:67:74:
         ca:f8:f5:78:d4:38:10:1b:34:2f:2f:26:3a:cb:e3:36:3b:65:
         1b:79:da:ee:b6:2f:90:2a:0a:48:9c:c9:18:00:e9:9b:e6:f9:
         fd:5c:b2:55:72:3e:34:03:06:41:07:d7:43:8d:a4:5e:ef:65:
         21:80:ec:ed:ca:a8:0a:aa:a2:89:31:ae:fd:f1:e3:65:0d:6d:
         7e:e2:9b:6f:ce:b1:5f:6c:cb:e1:bc:f3:85:ce:65:de:38:80:
         d4:fc:2c:20:6e:d2:e1:dd:29:f4:9d:7e:64:bd:92:7f:23:5b:
         a4:20:50:29:bc:59:27:aa:6b:ca:39:01:4a:32:20:8b:4b:f1:
         4a:2b:ed:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:34:47 2025 by rpki-client