Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
File:                     5cN18687kSQJ3YNgp0CRNVaTcUE.mft (raw, json)
Hash identifier:          bk+IGogJcLSJI7lq2IH6pIbzGoIhd7bnR4h3HvzEhrc=
Subject key identifier:   8B:DB:04:69:68:AB:14:2D:39:72:10:86:7B:11:0C:BC:8E:38:09:1C
Authority key identifier: E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
Certificate issuer:       /CN=e5c375f3af3b912409dd8360a740913556937141
Certificate serial:       0199FF22D4DF881BD4FE2DB24CE4780AD01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
Manifest number:          0620
Signing time:             Mon 20 Oct 2025 01:01:36 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:36 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:36 +0000
Files and hashes:         1: 5cN18687kSQJ3YNgp0CRNVaTcUE.crl (hash: zW29aWoOKqv1trhmNWRukn0bKnxsKt7x4iE7o/kiSMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:d4:df:88:1b:d4:fe:2d:b2:4c:e4:78:0a:d0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c375f3af3b912409dd8360a740913556937141
        Validity
            Not Before: Oct 20 01:01:36 2025 GMT
            Not After : Oct 21 01:01:36 2025 GMT
        Subject: CN=8bdb046968ab142d397210867b110cbc8e38091c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:85:3b:69:0e:2b:ca:6e:8e:9b:ef:f2:b5:
                    1e:3a:c0:11:86:dd:b2:ba:4a:b4:5c:f1:3b:95:1b:
                    11:a2:60:f7:13:10:00:b8:24:31:50:72:28:19:2b:
                    90:e0:33:b9:aa:45:66:c3:12:2d:12:47:4a:b5:10:
                    4f:ca:ee:2f:2b:d5:16:ed:97:59:83:de:20:85:9f:
                    ec:7f:8a:65:1e:d4:63:14:80:ac:64:78:70:5b:10:
                    9e:30:ef:b3:33:a2:6e:64:04:08:4f:27:2b:33:8f:
                    76:5b:27:0d:92:26:6f:34:e7:67:5f:93:60:9f:ae:
                    fb:72:9f:c8:6a:4d:7c:14:3f:b9:4e:41:ac:76:e6:
                    44:42:a8:d0:df:cb:ed:68:b3:9f:ac:08:e9:1a:bd:
                    6b:6f:6c:7a:c4:b8:ca:d6:9b:96:2e:09:14:47:41:
                    36:5f:be:a2:77:f9:2d:20:8e:67:78:02:c5:88:45:
                    1e:1a:e1:49:82:d3:c3:45:7b:6e:96:e6:71:a7:a1:
                    76:fa:25:73:5f:27:f8:a0:61:3a:8a:b4:86:41:9f:
                    a4:c2:4e:94:a7:33:23:50:0d:18:de:17:8f:46:2c:
                    92:7c:ef:19:7b:0b:41:aa:32:c8:cb:c0:6a:3d:cb:
                    42:6d:1d:6c:13:e4:95:f1:99:a5:da:2d:28:15:31:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DB:04:69:68:AB:14:2D:39:72:10:86:7B:11:0C:BC:8E:38:09:1C
            X509v3 Authority Key Identifier:
                keyid:E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:32:65:af:58:94:34:d5:4c:9b:92:7f:83:d7:a9:d8:22:ac:
         71:72:bb:74:b2:27:0c:f1:05:ad:58:f4:87:eb:dd:fa:a3:b5:
         37:1d:73:10:44:13:1c:79:f8:09:e4:5c:3f:b7:b7:78:3f:2b:
         9e:11:f4:63:da:61:32:29:41:f1:2f:c8:b5:a2:5b:5f:7a:e5:
         a8:b2:cc:b9:8a:a6:e1:6b:8c:63:2c:a9:80:23:cb:14:0b:f3:
         63:6e:d6:ae:92:7d:07:4b:5f:bd:0a:9f:0e:78:9a:9b:dc:40:
         da:c3:98:b0:26:30:c8:eb:b8:f9:92:f1:41:6a:bc:43:e2:93:
         ce:a0:46:3e:39:37:fa:c3:f9:0a:58:a4:56:a0:eb:e7:e0:fc:
         5f:f1:41:e3:c3:cf:3d:2a:19:d5:92:d5:c9:e9:e0:2a:5c:be:
         2a:ed:c3:22:5b:6f:e6:7a:a5:4d:75:05:31:ec:2f:c2:fd:f3:
         ce:09:4a:3f:43:23:f1:90:7a:3e:e3:4b:3c:bc:94:03:66:0a:
         30:61:f8:c2:c7:e2:71:aa:2b:57:6a:97:c2:fa:e0:37:96:39:
         48:10:54:1c:83:5c:a7:e5:8c:0f:80:ae:c5:4f:c5:64:b9:b1:
         70:83:78:ef:cf:42:ce:e7:a5:5f:5f:51:eb:9a:f2:db:b2:f7:
         60:ce:84:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:38 2025 by rpki-client