Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
File:                     5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json)
Hash identifier:          x2Yd9BfqZq2hC7FfL8Wkt3Tq0hOUVdL59hiEiGiqCfA=
Subject key identifier:   5E:3A:0F:12:C5:D4:DD:6A:29:79:D2:96:FC:C0:DC:10:02:F1:BB:D6
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Certificate issuer:       /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial:       01993C4BF422BA1C696D73F156B6B4618CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
Manifest number:          167F
Signing time:             Fri 12 Sep 2025 05:00:34 +0000
Manifest this update:     Fri 12 Sep 2025 05:00:34 +0000
Manifest next update:     Sat 13 Sep 2025 05:00:34 +0000
Files and hashes:         1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: icVr7wrWDJpBt5KCtLv2gf6bAbMoT+0KIYNCVClh/vw=)
                          2: Sl8BbPDt6kdls_K1R2Dh5Z2l9ss.roa (hash: FohmZC9RjfkLWGSkIiIa2VtU1w5u6RfcN+tDaynMZcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Sep 2025 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:3c:4b:f4:22:ba:1c:69:6d:73:f1:56:b6:b4:61:8c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
        Validity
            Not Before: Sep 12 05:00:34 2025 GMT
            Not After : Sep 13 05:00:34 2025 GMT
        Subject: CN=5e3a0f12c5d4dd6a2979d296fcc0dc1002f1bbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:d9:2f:2e:27:3a:c8:07:35:c0:d7:1f:35:
                    d0:4a:f5:55:a4:cb:cd:f7:a8:19:10:63:b9:42:7e:
                    ed:36:c0:59:79:ad:0c:40:05:bc:52:98:9a:0c:7e:
                    b4:8a:0b:48:6c:7f:c4:df:95:54:5b:5e:17:c3:12:
                    c1:80:c2:5d:26:26:20:7c:3b:62:45:e2:aa:69:b3:
                    00:57:30:4d:cd:c9:e1:3c:e5:68:24:63:7a:2f:02:
                    16:ec:14:9e:87:d7:80:96:da:d1:bb:95:55:3e:35:
                    5d:c5:75:3d:86:18:7f:e3:23:b2:34:c1:ce:47:00:
                    5d:ab:b0:b1:0a:7d:6c:28:d8:aa:32:63:b5:bc:8a:
                    42:58:93:00:f8:83:58:06:54:11:41:dd:df:89:c2:
                    ce:09:9f:0e:82:99:06:24:13:db:12:d7:a1:b8:93:
                    60:95:6b:6e:db:1d:87:fd:ed:b6:52:ff:eb:42:15:
                    32:8d:92:bb:d1:a9:e1:37:1b:f1:99:f8:3e:01:d9:
                    c6:27:8a:0b:51:23:5e:3c:52:56:05:85:af:31:7a:
                    c4:9e:23:61:ca:0c:8b:f2:e4:5b:fb:03:cc:03:46:
                    3b:85:78:b3:e3:97:c3:92:f6:0e:49:e5:f0:60:1b:
                    1b:1b:98:f8:89:8c:16:6c:b9:67:39:5b:b3:54:20:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3A:0F:12:C5:D4:DD:6A:29:79:D2:96:FC:C0:DC:10:02:F1:BB:D6
            X509v3 Authority Key Identifier:
                keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:f9:bd:5f:07:a3:d3:7d:48:9c:46:68:08:4c:3f:8b:f4:
         af:6d:7e:49:dc:12:5d:51:5b:75:54:e7:30:31:f8:d4:4e:3d:
         ca:54:22:ad:0a:5c:65:e5:b0:cc:3b:87:dc:5c:bc:3c:07:de:
         5b:a9:b9:de:3f:e4:12:ea:01:ea:40:ff:a5:74:61:7f:a8:eb:
         a7:c9:50:ee:d7:e7:42:1c:91:83:1f:92:b1:ab:2e:2f:b4:78:
         47:b8:68:3d:f3:e2:e8:52:79:03:8b:4f:33:d4:42:c3:cc:4e:
         15:32:20:60:a7:59:50:45:7d:5f:fd:51:b7:37:16:0f:21:a6:
         98:c8:88:e2:c2:ad:ae:8d:00:13:91:d4:a5:1c:fb:85:29:b2:
         56:a0:81:9b:72:1e:89:96:dc:6b:95:cd:42:c9:c5:ab:de:b5:
         e4:d2:32:30:08:c6:26:f5:c7:d6:cc:77:ac:11:e9:8b:5a:29:
         b1:0c:de:53:32:7a:50:4a:93:67:90:0d:7d:88:1a:c7:fe:52:
         c5:c8:3d:32:a9:09:78:a6:6b:af:94:17:f4:f7:d5:0d:02:70:
         d5:d1:58:9f:41:1e:28:fe:6f:f4:b4:8f:25:78:9c:ef:12:a5:
         b4:bf:d0:ba:f9:16:eb:52:b2:01:58:33:35:0b:19:2b:07:78:
         af:76:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 12:35:40 2025 by rpki-client