Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
File:                     5e61yh0hW8msLLQNHum-53UPn1c.mft (raw, json)
Hash identifier:          FKTijFfJvDqx54IuIYQI1oS3dMuSWNd3Yua9aI4biW0=
Subject key identifier:   DD:C7:A6:11:44:B6:49:25:67:51:E1:DA:B3:26:C3:63:31:82:49:59
Authority key identifier: E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57
Certificate issuer:       /CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
Certificate serial:       0197B632A5663848CFC3C7F785479C5E7631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
Manifest number:          0510
Signing time:             Sat 28 Jun 2025 11:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:01 +0000
Files and hashes:         1: 5e61yh0hW8msLLQNHum-53UPn1c.crl (hash: c6j3MZjyCt0knexuksXm4P6GQwJ5G/89HWkNvh4e0SE=)
                          2: fv9GU78KTThVylwpUoVkrE_AXzQ.roa (hash: nnsqZgD7w8A2HHvf/0xUBOlqX3ZvvzafFDRwPNk7+QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:a5:66:38:48:cf:c3:c7:f7:85:47:9c:5e:76:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
        Validity
            Not Before: Jun 28 11:01:01 2025 GMT
            Not After : Jun 29 11:01:01 2025 GMT
        Subject: CN=ddc7a61144b649256751e1dab326c36331824959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:7f:26:4a:cd:52:f6:25:0f:3c:3b:f8:97:
                    59:cf:9e:ac:1c:cd:58:dc:60:03:72:d1:23:42:0a:
                    79:07:d7:83:9f:a2:bd:17:49:ef:d6:70:e3:31:fb:
                    93:34:f3:a1:7a:f8:2d:ab:62:fc:fb:09:d9:12:cf:
                    67:c5:99:7e:d5:f1:a6:9f:ec:d0:b5:86:15:3e:c3:
                    d7:42:93:a1:9e:3a:73:96:44:6d:b1:b7:2c:68:94:
                    50:ea:20:01:ba:6e:80:6b:8b:ae:94:47:48:3a:1c:
                    09:ed:9e:47:23:ed:9d:25:88:86:ec:d3:f7:ac:a3:
                    59:44:46:d1:6d:28:ad:7d:30:b2:ac:7f:94:66:8f:
                    02:ed:24:46:d0:21:2f:c6:58:0b:aa:8d:29:ef:92:
                    d3:3b:24:56:fd:f4:7b:70:38:05:7b:1b:80:a0:54:
                    2a:a2:6c:6c:df:ae:2d:f8:6d:78:24:93:30:6e:04:
                    bd:1e:b5:c6:6a:4c:a0:8b:36:3a:2d:86:3c:ef:35:
                    ae:23:45:5d:15:a5:5b:19:e9:79:5b:67:36:b2:a7:
                    bc:84:22:6e:e7:d0:bd:6e:7e:04:7a:7c:66:71:f6:
                    d0:b4:72:4b:89:0f:6f:54:77:88:88:a0:70:79:20:
                    ce:e8:1f:1e:30:b7:61:fa:f0:33:ce:38:92:67:70:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C7:A6:11:44:B6:49:25:67:51:E1:DA:B3:26:C3:63:31:82:49:59
            X509v3 Authority Key Identifier:
                keyid:E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:8c:55:bc:d8:c9:c6:21:67:07:75:5c:6c:df:d0:f7:65:
         ea:c1:d7:31:6a:2b:7c:73:df:b3:d8:ae:b3:f8:01:80:79:bc:
         42:c3:ed:f2:27:7b:27:88:33:dc:3d:78:6d:42:99:c6:e4:5c:
         35:b5:1f:e4:be:e0:4f:d9:81:29:85:2c:bc:20:61:fe:60:d0:
         ff:34:87:b2:c3:63:57:26:35:8f:6e:73:cd:e7:bf:ae:57:a1:
         09:18:ac:2f:39:a9:66:03:83:e2:3e:e7:55:19:53:c0:4b:42:
         f3:af:60:31:01:63:59:a6:cc:92:31:c5:4e:f3:38:07:78:4d:
         bd:f3:69:6b:95:83:61:ca:9b:6a:8b:e3:ce:62:86:48:76:92:
         52:63:7d:bf:72:0c:14:2f:56:88:60:75:1e:33:17:3a:7d:39:
         53:db:6b:47:9a:ba:db:8d:5a:ba:02:fd:36:4b:9c:ac:bd:b9:
         6f:a5:71:a1:89:85:ff:d6:08:3d:22:de:7e:09:df:bd:70:90:
         6a:c4:8e:02:da:35:de:81:e1:ea:ce:18:64:e3:3d:81:50:e5:
         89:1f:74:78:7f:21:f8:9b:c3:15:12:e8:e5:03:50:6b:6f:55:
         67:41:61:17:7b:33:04:f8:dc:8a:d4:a9:71:ed:78:d1:df:41:
         27:21:9d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:22 2025 by rpki-client