Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File:                     5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier:          SliFnIQSgFPs/54BRpxVn/+gIL/OnB3vDdyGZR4N/Rk=
Subject key identifier:   60:BD:B5:B0:56:20:C8:83:2C:42:35:B7:DD:E7:BA:DC:AA:77:74:7D
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer:       /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial:       01974C695C84BC7733F7B75288A060613BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number:          089B
Signing time:             Sat 07 Jun 2025 22:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:02 +0000
Files and hashes:         1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: L+va+Hwc8PnhOSIBRG1lSndSQoQZXVHz9vsbRDzVuIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:5c:84:bc:77:33:f7:b7:52:88:a0:60:61:3b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
        Validity
            Not Before: Jun  7 22:01:02 2025 GMT
            Not After : Jun  8 22:01:02 2025 GMT
        Subject: CN=60bdb5b05620c8832c4235b7dde7badcaa77747d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f4:ff:dc:d0:d2:73:1b:da:9e:05:ec:36:25:
                    eb:4f:02:9f:92:e5:ce:03:34:8d:74:ce:fc:77:62:
                    14:fe:1c:08:4a:02:c2:48:4b:1c:38:80:bf:ae:10:
                    ba:d9:1e:fc:76:cf:49:b2:23:ff:69:4c:9c:73:be:
                    08:43:02:aa:e7:cf:bf:7e:34:39:09:e2:80:ba:b1:
                    56:66:fa:53:9b:bd:65:e7:54:f4:10:81:24:49:3b:
                    8d:09:5e:77:8c:ec:ea:44:c3:85:6d:a0:0d:d4:38:
                    c4:f3:cc:48:4d:ac:3a:da:26:66:24:09:ec:e7:1d:
                    30:3c:99:38:cf:4d:b6:2e:05:ee:fe:17:47:d9:cf:
                    68:58:31:50:f7:95:1c:a9:04:8e:82:be:1a:6a:c6:
                    5a:ce:82:ac:a6:0a:f2:33:6c:c4:4b:a9:f1:e6:3d:
                    07:5b:67:0a:6f:ff:a0:7c:7d:54:30:fb:90:4b:bb:
                    98:6d:3c:42:e6:2a:f6:2a:68:5f:41:8c:3a:a1:12:
                    b2:5c:92:c6:40:13:01:c5:b5:d8:4f:12:87:83:8a:
                    62:37:65:f0:f3:fc:c2:25:04:0a:ee:57:61:6b:c0:
                    de:fd:3e:8e:fc:67:bc:58:18:8d:d4:ea:20:9b:18:
                    18:99:cb:29:6f:2f:43:88:e9:53:e1:ee:da:f0:78:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BD:B5:B0:56:20:C8:83:2C:42:35:B7:DD:E7:BA:DC:AA:77:74:7D
            X509v3 Authority Key Identifier:
                keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e7:72:73:72:a2:ab:4e:52:43:35:7b:bf:f2:2b:75:f3:a1:
         57:b5:e1:1d:d2:43:e9:96:01:48:bf:07:b2:f7:f0:3d:f7:29:
         f6:0b:c9:de:d4:94:be:79:18:ec:d5:da:48:46:81:fb:20:d7:
         5d:7a:e3:59:43:17:e9:b0:f1:71:7d:dd:0c:ed:6b:26:12:47:
         6f:f8:29:22:a8:b7:de:32:c4:b1:08:f7:b3:ab:d8:3c:47:4c:
         b5:a6:c0:16:c5:e2:db:e3:dd:46:ac:db:21:5d:41:ae:f4:0c:
         a6:a3:00:94:89:99:63:a2:3d:3e:cd:89:9a:7b:6c:3f:ee:b2:
         e6:8a:8d:34:1c:77:24:6a:36:69:3c:3a:c8:f8:0a:b0:a0:22:
         a0:e9:96:97:63:03:18:7c:32:b9:b5:8e:43:ab:aa:33:98:76:
         11:0f:07:4d:96:1b:5c:27:9c:24:88:81:f4:1d:5d:b8:84:43:
         70:ad:48:0b:84:b5:45:c8:f2:37:e3:00:54:67:d6:d6:98:fa:
         21:ea:5d:2b:25:64:80:0d:ea:d1:7b:e0:7a:c2:65:b9:3a:a8:
         19:01:05:91:6f:96:9c:23:73:d0:9a:35:56:fc:9f:5f:ad:21:
         72:e6:08:bb:cd:95:8d:35:ac:46:47:d1:3c:98:ad:cf:47:d8:
         9b:be:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:59:39 2025 by rpki-client