Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File:                     AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier:          liNU+PTnf7tFITOHBclYlP77RPs7FZGrmsGlffLhCDE=
Subject key identifier:   5E:06:EE:53:63:22:45:AB:2E:C5:B6:0C:07:18:33:7B:BE:B5:78:02
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer:       /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial:       0197CACC4C28C07CC30B7CF9C20D6A6F3147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number:          102F
Signing time:             Wed 02 Jul 2025 11:01:15 +0000
Manifest this update:     Wed 02 Jul 2025 11:01:15 +0000
Manifest next update:     Thu 03 Jul 2025 11:01:15 +0000
Files and hashes:         1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: 2dFgco53NG5Nlyp3b3XkfA4NstzVt3kejL5HJlVE/ms=)
                          2: mzTTUqHywuBobPS3UeYVNsDUJ_k.roa (hash: hsMBTi8GspJP9sz8q6TgdiXZybDG1BQNlqbzOxmeAmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:cc:4c:28:c0:7c:c3:0b:7c:f9:c2:0d:6a:6f:31:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
        Validity
            Not Before: Jul  2 11:01:15 2025 GMT
            Not After : Jul  3 11:01:15 2025 GMT
        Subject: CN=5e06ee53632245ab2ec5b60c0718337bbeb57802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:61:84:9c:6c:6e:cc:d9:28:62:ee:ca:5c:
                    50:2b:ec:53:54:19:3e:96:ab:b4:ee:b8:c1:ac:90:
                    cc:bd:96:ad:ea:a6:56:5b:00:ee:26:15:ea:0e:4c:
                    3f:1b:a3:06:92:31:df:c9:8e:b2:81:0f:56:4d:33:
                    62:52:0e:fb:93:51:7d:b9:a8:bf:ec:d8:fe:1f:85:
                    91:84:3e:e7:9b:22:39:0c:bc:8d:52:fc:32:27:c6:
                    3f:b1:ce:a8:49:29:15:96:62:a3:f0:b0:a6:d7:2d:
                    93:bb:f8:82:34:4e:b2:6f:09:b8:95:4e:5d:5f:dd:
                    ee:4e:00:00:eb:a3:1a:bf:fd:98:87:d5:ab:53:57:
                    63:84:e4:f7:b1:f6:85:18:5d:7a:d2:29:45:3a:fa:
                    f6:11:9e:ac:e3:4b:d7:d6:88:a1:04:f6:90:d6:1c:
                    d5:c2:6c:f1:11:29:35:bf:be:04:e1:36:1d:4d:35:
                    f5:ca:c3:a0:09:1a:2e:9e:07:76:e1:31:ae:1e:ff:
                    84:04:54:37:f8:1d:29:65:c9:e2:5e:bb:9a:6f:6a:
                    4a:a8:2f:17:62:c3:35:74:41:f2:ea:e7:ca:08:0f:
                    6c:23:4d:d1:1b:65:9c:cf:26:38:8e:6b:23:52:c6:
                    4e:4a:a6:89:ea:9e:07:dc:5f:c1:ef:92:04:b5:d5:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:06:EE:53:63:22:45:AB:2E:C5:B6:0C:07:18:33:7B:BE:B5:78:02
            X509v3 Authority Key Identifier:
                keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b4:41:01:c4:e9:2d:9d:e8:e2:d2:49:36:b9:54:74:8a:90:
         e9:7a:a4:84:b9:12:6c:1a:be:dd:80:40:c8:ef:6a:3d:5e:7a:
         1e:02:44:1a:d2:f8:8b:4d:0b:c8:b5:85:dc:0d:6f:ea:e0:75:
         e2:53:6f:17:37:77:b1:29:c0:24:cb:c2:64:19:53:2a:fc:bc:
         55:01:76:ab:13:22:cc:16:62:82:d4:b0:83:05:50:e5:84:5c:
         a2:ad:53:45:0e:56:5b:12:69:1d:2b:c5:a8:2b:55:c5:af:33:
         74:e4:94:30:f7:22:33:0c:bd:5b:ef:cb:cd:75:4c:fa:6d:06:
         3d:7d:e3:77:51:e1:a2:6e:5e:2a:11:5a:01:ed:92:58:6d:14:
         69:99:c2:f9:87:0b:ad:18:f0:71:da:78:b6:dc:24:30:8d:63:
         33:e2:05:7c:29:77:08:91:e3:d5:a3:b7:de:23:34:0f:24:51:
         c8:e5:08:21:60:b5:54:6c:e4:63:9a:d4:f2:f4:2a:61:7b:42:
         c6:1c:03:cf:6a:17:5c:42:f0:26:9b:73:2d:92:ac:82:be:88:
         4b:7d:22:45:b0:0d:4e:79:51:92:01:ae:a1:16:85:83:9a:1d:
         6c:36:69:f1:cb:2f:e7:4f:b7:67:57:8d:70:69:ca:f4:e1:67:
         9d:a8:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:12:17 2025 by rpki-client