Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File:                     5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier:          ScZIvlRdJ1a1UnNbF1sDZxobaG+4TIXBAoQWM/0PkLg=
Subject key identifier:   75:6D:A0:44:9A:5A:98:8C:45:81:DD:CF:77:F6:00:C5:4B:DB:DD:58
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer:       /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial:       0197B77C31712F8C54B8D342863DA955839F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number:          0539
Signing time:             Sat 28 Jun 2025 17:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:58 +0000
Files and hashes:         1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: jUJDXVSeEKrFR4LHTy6rc1h+bdq/rZs9iuQ3Ep2IDqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:31:71:2f:8c:54:b8:d3:42:86:3d:a9:55:83:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
        Validity
            Not Before: Jun 28 17:00:58 2025 GMT
            Not After : Jun 29 17:00:58 2025 GMT
        Subject: CN=756da0449a5a988c4581ddcf77f600c54bdbdd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:57:ec:99:fe:5f:cc:29:73:c8:08:2b:1b:
                    80:9a:6f:a3:3b:14:db:02:d9:8a:59:74:1b:21:6d:
                    33:b1:e0:33:bf:67:d7:19:7e:b9:9b:31:d0:48:d4:
                    cd:d8:b0:03:38:4a:0c:4b:45:ad:c6:7c:1b:41:50:
                    44:db:db:1a:86:8e:ed:b5:1a:1d:71:9b:50:23:11:
                    b6:6f:c8:88:8d:16:47:88:11:f6:7c:a0:d1:00:93:
                    d7:cb:f5:ef:a8:9f:28:52:e2:82:ef:35:2f:d7:c1:
                    89:9e:e3:e7:51:8c:c6:c2:03:d3:b0:86:ab:ce:60:
                    02:0b:eb:a4:65:5a:45:de:fb:66:3e:4b:8b:f3:9b:
                    b3:10:d5:8d:7d:26:9b:2c:cf:51:69:e9:87:fa:50:
                    43:85:a5:90:90:fc:5c:e8:57:f7:68:0a:84:dc:a7:
                    3b:9e:a4:dd:a9:4e:d6:c4:20:5f:23:e6:1f:7e:f5:
                    a9:c7:39:3d:1f:fe:af:31:25:fa:64:fb:ca:90:62:
                    5a:ee:93:4f:0d:55:f5:16:1b:14:e7:2c:50:aa:5d:
                    28:6c:52:b2:b8:34:b2:bf:0e:fb:87:9e:d1:32:7a:
                    f9:df:ed:75:23:e4:aa:3a:3d:f7:f1:ca:4e:b4:cf:
                    22:10:61:4d:8d:08:62:b9:b5:3d:de:14:52:a1:fd:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6D:A0:44:9A:5A:98:8C:45:81:DD:CF:77:F6:00:C5:4B:DB:DD:58
            X509v3 Authority Key Identifier:
                keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e1:99:35:5c:82:69:c6:53:3e:45:c1:7a:91:3d:e1:f4:1a:
         b2:47:64:ea:de:c7:80:10:23:ec:2c:2b:7c:66:b9:38:6d:52:
         d7:e1:8f:05:e5:27:33:07:4c:a2:5c:12:0a:fa:3b:44:31:7e:
         15:e1:5b:da:d2:b4:69:b0:bf:0e:93:81:a7:bf:5d:58:52:2e:
         6c:dc:b7:98:68:82:92:cc:b2:f6:57:8c:68:24:5b:43:89:ed:
         ba:f4:c9:0d:bf:5f:1e:70:31:a1:13:6e:c4:a2:b8:5b:1d:53:
         b6:dd:97:f0:bf:7c:5b:0b:49:60:da:b8:92:05:b3:25:12:cc:
         ea:67:d3:d8:c4:be:5d:82:ea:94:d3:c2:70:da:aa:20:27:7f:
         05:a1:1d:7a:9c:13:17:89:f1:b6:71:4f:b4:88:1b:3d:dc:c7:
         25:81:00:09:89:61:de:a0:11:2d:88:74:05:0e:66:da:91:10:
         3c:c7:77:a7:e7:59:f1:6a:30:0e:d4:8a:53:5c:56:60:f1:b6:
         f6:61:2f:ec:fa:16:14:47:13:ab:d1:0b:3c:c8:5f:28:ff:0c:
         f6:fa:d8:72:f9:eb:76:ae:12:98:6f:2e:45:cb:91:c0:d6:25:
         dd:a3:e3:85:0a:32:d9:8e:b6:08:3f:50:d1:c3:8f:aa:0b:a5:
         b0:20:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:11 2025 by rpki-client