Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File:                     1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier:          MQmW7RsRluUs3SUprKudcghiQ+sV594ScYlDRzLXoVw=
Subject key identifier:   CC:5B:57:9B:66:09:6E:95:66:05:7F:A9:25:3C:E8:9C:22:FF:AA:14
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer:       /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial:       019813F7A136CB5DAA4FF8C92FDB9246E58C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number:          016F
Signing time:             Wed 16 Jul 2025 16:00:52 +0000
Manifest this update:     Wed 16 Jul 2025 16:00:52 +0000
Manifest next update:     Thu 17 Jul 2025 16:00:52 +0000
Files and hashes:         1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: pUZtUWW5o54yzZyWMA7jNKXvRtohgWyfsFkODI3EKq0=)
                          2: Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa (hash: +sFVK8H7AnsXd5rUe7kR0o92ssiFNiEpWCKNsSev/NE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Jul 2025 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:13:f7:a1:36:cb:5d:aa:4f:f8:c9:2f:db:92:46:e5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
        Validity
            Not Before: Jul 16 16:00:52 2025 GMT
            Not After : Jul 17 16:00:52 2025 GMT
        Subject: CN=cc5b579b66096e9566057fa9253ce89c22ffaa14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c1:7d:24:ff:a6:1d:f9:2a:42:e2:a3:c6:10:
                    f3:98:dd:93:00:7b:d3:4a:71:72:2f:15:26:43:81:
                    45:2d:6a:fa:40:f8:48:b5:c7:9f:f5:1e:73:82:9c:
                    cc:20:a4:12:20:da:6f:e1:02:18:d5:af:7c:4e:99:
                    d8:cb:d7:51:02:1d:33:14:9f:25:c3:e1:d9:4c:32:
                    5a:70:c3:0c:ac:0d:c0:47:14:23:8c:ea:e5:6b:d0:
                    cf:fc:ca:27:c6:a5:85:27:cf:cf:95:c4:38:44:82:
                    a9:d0:5b:79:2d:45:c7:63:14:79:ef:cd:c2:02:61:
                    35:50:93:22:5a:2c:9d:91:52:44:e9:a8:3a:49:a1:
                    15:b8:37:68:24:b6:be:20:fc:41:cc:1c:95:33:c6:
                    fa:34:b6:5b:8f:4b:28:e0:d5:25:e1:8d:61:66:1f:
                    e4:7c:a2:b3:8a:33:5c:c0:42:48:8c:ca:50:7e:a8:
                    fb:f5:91:6a:52:21:dc:ca:47:ce:e8:7f:de:bb:8b:
                    60:ec:a6:2f:24:6b:30:9b:fe:1b:d7:3e:7f:fb:e1:
                    bf:c2:b6:67:9f:38:df:b3:54:1b:8c:39:30:2a:4d:
                    7b:fe:78:9e:b7:c9:df:f8:9d:5f:97:37:61:63:25:
                    3c:d1:cb:6b:f0:04:6d:24:6d:43:06:98:fb:e2:38:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5B:57:9B:66:09:6E:95:66:05:7F:A9:25:3C:E8:9C:22:FF:AA:14
            X509v3 Authority Key Identifier:
                keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:14:de:3e:b4:f8:8d:20:c2:07:53:a5:09:eb:55:d7:30:a8:
         8a:ab:92:e9:e1:a3:d4:07:93:32:2e:77:cb:fe:f2:a6:9d:9c:
         4b:13:3b:48:58:2c:f5:f6:08:b9:ad:c8:63:35:8f:05:5c:53:
         fe:c4:be:21:7b:2c:58:20:c1:05:8d:7e:c0:80:ff:91:cf:0b:
         76:05:bb:f0:0f:67:83:bf:1b:24:67:29:c6:2a:d1:b5:3b:a9:
         66:57:b2:e5:94:26:a4:cf:49:13:bb:59:3b:03:95:aa:5b:30:
         b0:a6:72:b8:db:a7:08:fd:69:d5:63:fc:f7:28:ed:f5:c8:4e:
         2d:2a:94:2c:28:2d:c1:ac:27:2a:8d:68:84:eb:f3:5e:5b:ca:
         93:48:97:7a:01:e6:08:2e:bc:f1:1b:b6:66:51:fd:3d:53:34:
         e7:12:b6:11:da:72:6c:f5:e8:83:85:a2:3b:2f:fa:31:74:e3:
         12:af:79:1d:f8:a8:55:cb:6f:de:89:35:7e:bc:e2:e9:d9:24:
         a2:26:24:9b:ef:04:69:36:94:dd:7e:7f:42:05:aa:6e:31:55:
         44:50:8d:84:82:08:b9:0e:7b:4c:fc:ad:3b:53:75:f9:7b:01:
         1a:4d:55:d3:23:66:3e:45:cc:32:9c:74:5b:e4:02:3c:fe:9c:
         c5:d2:ae:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 16 23:09:49 2025 by rpki-client