Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File:                     5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier:          /PaDMf297dg6Jf5lMMCrZCSeaSv0iwVmkeouxuGUPIw=
Subject key identifier:   2E:58:01:84:38:84:FF:40:77:4F:A9:AE:1B:54:5B:A5:83:07:C2:72
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer:       /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial:       0197B70EEADD21BC91FDCD50266D2D92B325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number:          0640
Signing time:             Sat 28 Jun 2025 15:01:37 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:37 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:37 +0000
Files and hashes:         1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=)
                          2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: mpf7yIWUdlSXMJcxIt4Ki2Kr6VmID/xR1SvWwFHh4qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ea:dd:21:bc:91:fd:cd:50:26:6d:2d:92:b3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
        Validity
            Not Before: Jun 28 15:01:37 2025 GMT
            Not After : Jun 29 15:01:37 2025 GMT
        Subject: CN=2e5801843884ff40774fa9ae1b545ba58307c272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:53:88:03:38:9d:43:f9:64:cc:67:66:0c:
                    74:53:7e:b4:82:24:0e:cb:8e:69:6d:bd:78:95:1c:
                    13:01:cd:d9:92:52:c0:16:50:cc:4e:88:59:65:07:
                    72:a4:39:51:31:54:93:66:6f:21:3f:80:14:fa:0b:
                    50:31:ec:89:a3:ff:f9:ef:26:2b:ef:ac:71:7c:cd:
                    b4:e3:4d:0c:72:c3:95:9b:d1:04:17:8e:bf:e0:91:
                    fb:9f:27:59:b1:fd:39:42:35:45:38:5c:0d:6f:53:
                    d9:01:26:fd:33:15:ad:b5:de:d7:85:0d:5b:45:32:
                    98:d2:80:45:c2:cb:ce:39:1d:92:60:06:1a:e1:04:
                    55:0a:d1:cc:81:c2:b3:0b:9a:79:b4:c4:82:af:bf:
                    59:de:87:2a:09:8f:d4:bf:65:bc:3c:4b:41:c9:ba:
                    cd:3b:3e:6c:70:0d:1d:d8:66:51:d4:fb:cc:91:5d:
                    da:3d:15:50:bc:f6:50:ca:f2:fe:06:ad:b6:7c:c3:
                    d6:64:4d:7c:2b:51:c7:e3:b7:e9:4b:f7:b6:09:95:
                    7a:42:22:05:be:11:fd:1f:6e:d4:0e:aa:75:9a:3c:
                    46:63:73:da:29:a7:17:8f:92:d1:31:1c:13:3a:3c:
                    ff:62:f1:17:1e:2f:6c:98:f7:98:3e:f9:f1:99:e8:
                    8c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:58:01:84:38:84:FF:40:77:4F:A9:AE:1B:54:5B:A5:83:07:C2:72
            X509v3 Authority Key Identifier:
                keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f6:43:ba:1d:6c:81:b6:5c:ab:e6:a4:a6:33:e8:68:7c:1f:
         d4:84:f1:9e:66:0b:76:b1:5d:e5:a0:46:96:d7:91:19:38:3d:
         ad:13:6b:25:3c:64:c0:98:b5:f8:66:b7:e8:e3:bf:c9:0e:ec:
         1a:97:20:b2:10:89:16:9d:1d:a5:08:5b:03:88:cf:a0:5a:b3:
         ba:5a:11:1f:18:b8:fa:fc:3e:88:6e:52:66:46:51:45:21:e0:
         41:85:48:0d:52:b4:a1:9a:51:2d:8a:41:e9:ef:ba:03:b4:a1:
         93:fb:b0:00:51:17:e6:10:52:15:96:7a:18:24:5f:8d:d3:12:
         0b:7a:04:c7:14:7d:ef:d3:07:9b:7a:2c:64:b2:5e:ca:82:25:
         61:87:4b:f8:43:bc:8a:06:20:5f:bc:4e:44:00:b4:9b:ea:78:
         9d:8b:8c:da:0e:63:a3:f4:34:79:dc:66:e3:9b:31:9c:b1:16:
         96:eb:bb:c2:6b:f4:9b:11:a9:45:37:42:f8:8d:45:7f:5e:63:
         54:8a:d5:bd:fb:3c:3e:c3:d8:14:e6:59:51:f7:6c:13:ed:cd:
         3e:f8:a8:c9:e7:fa:bd:13:a2:c1:1a:2a:45:ed:dc:e3:93:c2:
         72:b3:a0:97:2d:3f:a3:6b:dd:67:32:d7:ff:13:02:74:f4:b8:
         73:93:03:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:36 2025 by rpki-client