Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
File:                     5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json)
Hash identifier:          iHFS7TNOM92EYwmaw6VjotgqLvk+4O6ZqkSJUhwXWgQ=
Subject key identifier:   57:AE:55:44:25:23:9D:20:50:05:B4:B7:01:64:F9:C8:6F:AE:CC:AD
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Certificate issuer:       /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial:       01974CD765721B7AE64F2F857483CDBEB0A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
Manifest number:          0A7E
Signing time:             Sun 08 Jun 2025 00:01:14 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:14 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:14 +0000
Files and hashes:         1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=)
                          2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=)
                          3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: hwrM9HAlUejGExtXUlBzFTwOWbAm4jIwyV03RQBVSyY=)
                          4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=)
                          5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=)
                          6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=)
                          7: GPFpap7M0DbSFtJBpaKp67RfOgs.roa (hash: 6C0EKVC4/wJ0awCJ51hmh22riQaO8QV9e+LjKWFhq3o=)
                          8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=)
                          9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=)
                          10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=)
                          11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=)
                          12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=)
                          13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=)
                          14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:65:72:1b:7a:e6:4f:2f:85:74:83:cd:be:b0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
        Validity
            Not Before: Jun  8 00:01:14 2025 GMT
            Not After : Jun  9 00:01:14 2025 GMT
        Subject: CN=57ae554425239d205005b4b70164f9c86faeccad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:74:f1:e5:7f:32:72:c4:fe:f2:dc:6f:00:
                    01:b9:71:54:20:b3:81:14:da:90:a4:ed:42:b4:91:
                    5a:24:74:36:6f:ec:db:2b:36:5a:ba:9e:ad:46:cf:
                    a0:1f:15:a1:cc:09:df:34:8d:5c:e0:b2:eb:f9:8e:
                    96:b0:07:a1:65:5f:0b:3b:08:3f:6b:ea:50:d0:d9:
                    6f:cd:01:6a:5b:0b:e8:96:a9:7c:83:34:1d:26:0b:
                    b5:8f:02:a4:63:60:7a:61:16:80:5d:5b:c0:a7:14:
                    49:48:58:1e:61:a8:d3:a1:1c:f1:19:66:d6:4a:b1:
                    da:e3:9d:e1:24:b5:ac:4a:1c:04:c4:2d:6e:2c:a3:
                    e2:dd:04:b2:ea:11:bc:d2:1e:9f:31:a3:59:e9:16:
                    dd:b3:c7:0f:6f:d9:a7:7b:18:14:73:1f:e8:c3:a0:
                    db:f1:f3:ff:3f:7d:87:30:c5:0e:e8:a4:56:7a:fe:
                    c7:60:e8:32:cc:e0:74:c9:3d:f6:c6:ba:00:ed:e4:
                    6d:02:a4:e8:bb:fb:70:8f:0b:9e:f5:a5:dc:5c:0b:
                    bb:bd:d8:3f:25:4c:8f:9f:c5:76:38:e6:c3:e3:b6:
                    04:b2:ea:c3:12:65:09:c5:24:15:88:4e:a1:63:5d:
                    ee:14:ab:72:2f:74:14:a7:b8:48:30:66:6b:00:b3:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AE:55:44:25:23:9D:20:50:05:B4:B7:01:64:F9:C8:6F:AE:CC:AD
            X509v3 Authority Key Identifier:
                keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:83:9d:c8:fa:ce:9e:93:5a:ec:13:06:2b:bd:13:b3:5b:a9:
         b4:7e:bf:f5:43:8c:c7:e5:9f:05:57:fb:e7:5b:b9:44:04:e4:
         df:a8:ec:63:d3:9c:90:81:03:2c:75:0c:0c:5b:96:4f:08:93:
         3d:4d:5f:6f:48:63:ef:f2:ed:65:81:42:7f:71:dc:75:ac:94:
         c1:88:4a:cd:e9:73:fc:a4:77:71:e5:61:6c:64:c6:99:89:e6:
         d6:f8:7e:73:bf:8f:07:cf:27:64:4a:a9:f2:7a:f1:b7:f6:d2:
         22:fd:0e:f7:01:1f:da:87:37:c4:0f:4e:35:0d:39:65:09:af:
         b7:2e:85:cf:a8:5b:c6:3a:a2:b5:64:0f:08:da:09:76:b3:fe:
         84:f4:10:8f:19:29:99:14:e4:e8:5a:1b:20:f1:33:4d:c0:81:
         7e:76:cd:4e:08:31:67:19:20:16:74:0c:62:83:f7:3c:7b:2a:
         8e:37:be:a6:f5:28:61:f4:59:55:ba:23:a7:cf:ea:a2:3f:fc:
         55:24:6c:40:4c:3e:f8:06:c1:24:1c:ac:42:ef:ea:3c:91:bd:
         1c:21:64:82:9c:00:6d:49:ac:89:1a:37:67:8a:2a:47:e8:d2:
         98:87:5d:ae:34:42:30:bf:3e:58:87:78:82:6e:c1:fc:b2:bf:
         6f:32:05:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:44:56 2025 by rpki-client