Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File:                     5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier:          D9mlQH7BIxrbAXz9+yQEhY6gzsIrV8Z4tDnH45VOKpQ=
Subject key identifier:   AD:81:0C:F6:ED:68:A4:FB:B0:FA:FC:42:03:B8:D2:67:B0:93:A4:C0
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer:       /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial:       0198D7E157A0A39FD62BAFD9C9AB0BBD30FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number:          0BBF
Signing time:             Sat 23 Aug 2025 17:02:05 +0000
Manifest this update:     Sat 23 Aug 2025 17:02:05 +0000
Manifest next update:     Sun 24 Aug 2025 17:02:05 +0000
Files and hashes:         1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: NqSW8I5HED5xSJiiTvLWiHb5Cj9BJTG4Nz0JJhMeGv4=)
                          2: rf8xmxH0lxQMZaEoNGLhxRtMOZM.roa (hash: 8uXylOlK6BkO3v7SWg2Pp+uIEZNpg7MPKeK8yn1WMAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:57:a0:a3:9f:d6:2b:af:d9:c9:ab:0b:bd:30:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
        Validity
            Not Before: Aug 23 17:02:05 2025 GMT
            Not After : Aug 24 17:02:05 2025 GMT
        Subject: CN=ad810cf6ed68a4fbb0fafc4203b8d267b093a4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:e1:1c:69:01:57:8a:2a:3d:5b:fb:bb:03:
                    31:8c:89:26:0c:33:85:e5:46:35:3e:b7:18:39:f3:
                    49:f9:2c:37:ef:e6:3a:c0:74:2e:17:f8:21:ee:59:
                    d1:68:2e:73:37:6c:e4:a9:c1:c8:90:24:cb:5b:2e:
                    87:02:68:e4:23:a4:2e:2a:e7:f8:7c:a4:65:5d:0a:
                    98:1d:0a:e5:cd:23:00:6e:4a:af:7f:ca:82:59:5d:
                    48:b8:d7:5c:05:6b:9b:2b:f2:79:a5:bc:a1:a6:48:
                    fc:5b:00:0d:7e:35:32:ef:70:ce:1a:9a:18:5e:d6:
                    2d:6e:11:49:76:df:b0:1f:a3:e7:a0:c5:93:a1:d0:
                    2c:6a:68:b7:c0:b0:fe:aa:68:a1:06:f4:22:5a:26:
                    db:64:f8:2f:69:5b:c0:22:4f:8a:d8:a1:61:1e:1a:
                    25:93:7b:24:5d:ea:c4:b7:df:29:15:1b:f3:e5:04:
                    31:30:2d:9c:55:32:cc:38:87:94:07:44:f3:93:df:
                    0b:2e:11:8a:31:67:a3:da:dc:66:b3:87:25:30:c6:
                    36:fd:93:87:02:aa:ec:e1:e7:b8:2b:af:91:71:fc:
                    ed:63:2d:4a:7a:c3:c2:3d:79:2d:a0:b5:84:62:80:
                    33:2d:69:d0:6d:84:28:67:85:e3:b5:3f:e5:13:64:
                    a4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:81:0C:F6:ED:68:A4:FB:B0:FA:FC:42:03:B8:D2:67:B0:93:A4:C0
            X509v3 Authority Key Identifier:
                keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6e:fb:e8:87:40:83:65:50:0a:e6:2e:58:2a:1a:f1:95:7b:
         a6:8e:fd:20:45:81:b5:84:13:a5:ad:32:c3:3f:e6:b9:f3:3c:
         ec:c8:28:6d:08:c9:48:66:46:1c:e5:7b:4a:de:a1:1a:11:c4:
         e1:9e:45:cd:e0:24:bf:09:0f:ce:7e:bc:ba:91:57:23:3e:00:
         f5:a7:d7:6d:6a:d6:0a:c9:ec:e0:55:ca:22:d2:41:36:d7:2f:
         75:79:29:71:86:51:c2:4e:52:56:4b:40:d2:f1:78:c7:04:ab:
         ff:9e:00:a8:3a:7e:28:4e:9f:4e:d4:4b:84:cf:77:c4:7a:04:
         ae:4a:fd:ec:f0:71:cc:62:97:2b:bc:4f:f8:97:7c:af:e5:6a:
         61:c7:88:40:57:96:72:f8:64:6e:53:eb:e2:1c:67:f8:a6:65:
         c6:ff:11:87:6b:2b:a7:ba:53:67:23:c4:4e:55:e3:bb:35:e1:
         2c:67:94:df:25:4b:df:d7:75:c1:44:13:a9:c9:49:41:6e:84:
         6c:4b:94:8c:a5:cf:1f:2b:70:20:68:e4:7a:98:ca:5c:63:fc:
         a8:a8:27:a3:77:7c:c8:ea:c4:9b:3f:bb:7c:fe:91:7c:54:f5:
         f7:00:e7:de:04:e0:ac:2f:c0:b7:77:0c:bf:e3:a3:5d:89:bd:
         f4:d7:60:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:01 2025 by rpki-client