Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File:                     5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier:          C29uhcCgmcqJDVBPyH2KOdFgzox2oRn9HNvduQA6iuk=
Subject key identifier:   C7:21:69:26:C8:FC:45:47:B8:21:34:D9:05:B0:BD:0F:CD:CF:53:35
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer:       /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial:       019761A7ACAA1CE1D767114771103DB5796A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number:          0834
Signing time:             Thu 12 Jun 2025 01:01:08 +0000
Manifest this update:     Thu 12 Jun 2025 01:01:08 +0000
Manifest next update:     Fri 13 Jun 2025 01:01:08 +0000
Files and hashes:         1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: 7NDP09hWAjqRyCYor4VP/47pzHyjq9zZpZ7rt5lc5aE=)
                          2: 8CQhFFzhVCUSs-Acf3oCW5Ht1O4.roa (hash: 4QjA0b3TlO69hSmmKrV3SWr74V598K76v+qHTSKJ/xE=)
                          3: BQSs352-EOwWdJt5W4JX2r66118.roa (hash: SQJWh7RfqqUI9aMjD6YSzrE33eXIstI44fKb5g3qqDI=)
                          4: L92S0PfcHSE9bgS-JCS8vvop6UQ.roa (hash: XSHb8sFm7h1G4YsZCXgF14jI1G7rEVjjM6p2QTILx6g=)
                          5: gTRae7ZL-HNGSMdQfcCH4w50U3I.roa (hash: lqNN9a02R1wKbKPgix1ICuGW1yv4WMeo7Mou83VAgGA=)
                          6: j_3Ftqm-lzj1TntRYs7GVQ4-no4.roa (hash: uD9N1p5kcD0F5MTrxTTnuG+MRtGjk9UHle8sxsfds2s=)
                          7: tLtgUfd0ui74NFHNYFQ3DTMpTpY.roa (hash: t0Rcfn+Zo7QZAW0FXDZgWJxfMhFkyCKBVpW7cC1Ejw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:a7:ac:aa:1c:e1:d7:67:11:47:71:10:3d:b5:79:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
        Validity
            Not Before: Jun 12 01:01:08 2025 GMT
            Not After : Jun 13 01:01:08 2025 GMT
        Subject: CN=c7216926c8fc4547b82134d905b0bd0fcdcf5335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:26:6c:f4:f9:87:00:80:45:6e:69:17:bf:
                    42:3c:c1:af:77:7b:53:75:69:64:67:29:d5:5c:05:
                    34:ec:3a:b2:59:9f:ed:55:95:8e:2e:d4:fc:42:1a:
                    89:66:e9:e1:0e:cc:d0:c0:31:5c:f3:ed:f6:d2:c7:
                    2f:e2:68:0f:5f:9c:1a:b1:6f:fc:a3:ad:51:0a:f6:
                    91:5a:e3:0c:6f:e6:67:9e:fe:62:9e:f1:52:f2:35:
                    4d:8f:d8:27:9b:e0:66:b0:98:ae:80:fb:1b:2a:e5:
                    ff:3b:be:a2:4a:90:a2:23:ee:62:ce:94:90:1e:a0:
                    12:15:6f:6d:65:a5:f1:18:06:e7:5c:48:33:8b:48:
                    95:0a:56:b0:15:5f:c2:09:de:c0:aa:af:b8:76:46:
                    cd:a9:95:36:c6:2d:60:9b:06:f9:ed:cb:d4:0f:98:
                    01:80:e3:d3:60:42:75:0c:03:76:fe:17:20:f5:95:
                    f1:08:1c:29:ee:eb:cf:5d:fa:e2:2e:e2:87:17:da:
                    77:ab:33:da:80:d3:9a:a6:5e:d4:bf:7c:3a:fe:74:
                    20:ae:88:ce:25:89:c1:48:4e:7f:dc:58:9d:27:da:
                    b5:7b:0b:03:cb:79:28:b7:90:38:7d:86:fc:d3:78:
                    70:46:a6:eb:69:17:95:80:e3:28:22:e9:00:eb:68:
                    67:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:21:69:26:C8:FC:45:47:B8:21:34:D9:05:B0:BD:0F:CD:CF:53:35
            X509v3 Authority Key Identifier:
                keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:de:86:c2:d2:a1:c1:c0:ae:6a:0b:04:e1:74:f7:22:78:c2:
         8e:2d:ab:bc:a4:ed:89:07:80:a6:e2:81:9f:e0:e8:5f:09:b0:
         bb:3d:66:0e:1d:59:1e:ad:6f:a7:74:dd:3a:1c:8e:f2:3a:97:
         a1:17:c4:5f:82:b1:4c:a1:81:73:1c:ad:7c:d1:cb:91:b8:7f:
         7a:bf:89:cb:c8:0a:4f:1f:08:35:19:8c:3c:b5:67:3a:26:22:
         5c:49:45:3d:21:25:0c:bd:ac:1a:13:0d:70:6d:e3:94:2b:f4:
         f0:42:29:17:cc:70:b6:b9:75:31:d2:c9:49:b5:2e:60:0f:f2:
         4c:a5:57:b3:56:2b:d1:79:45:d6:cb:b3:22:52:53:0e:aa:0e:
         62:81:0f:f6:17:55:d6:cc:b9:8d:58:9d:a3:56:52:f3:ba:9c:
         2c:9f:46:d7:fb:c6:21:5b:5b:f3:a1:29:0d:ee:9d:33:3a:8b:
         20:52:fb:28:d3:13:b4:51:f2:75:fb:e8:bb:1d:8a:84:ff:10:
         90:14:30:4c:4c:19:0c:2e:a7:d8:b9:86:44:00:8f:65:74:1a:
         62:4e:4d:87:6a:eb:71:25:c8:b5:4d:4e:3f:1f:91:a9:e0:d3:
         62:3f:56:ef:7d:e2:de:53:9c:69:85:aa:84:08:16:10:e2:98:
         13:56:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:48:46 2025 by rpki-client