Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File:                     n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier:          MeM43E17xTqKItp2+jIH/zcMDr1C4VA1oe5ZnoT5H2M=
Subject key identifier:   34:B6:3C:31:12:98:D2:D8:97:2C:EC:48:3D:BE:BE:BE:C7:40:24:EC
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer:       /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial:       0197B7B331B1748411DD2BC1724621504E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number:          051E
Signing time:             Sat 28 Jun 2025 18:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:03 +0000
Files and hashes:         1: FKRN7VX-M9zNuJ0Xi5mXAJ-i93Y.roa (hash: tPWo9Bc4jubOwnfbiLhbqZLh4bX+yga6cCmXXhQ2NPA=)
                          2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: hdr8e7IInNS2JOQYpfuYcQdX9yO2bUREPTTgvlvfuTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:31:b1:74:84:11:dd:2b:c1:72:46:21:50:4e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
        Validity
            Not Before: Jun 28 18:01:03 2025 GMT
            Not After : Jun 29 18:01:03 2025 GMT
        Subject: CN=34b63c311298d2d8972cec483dbebebec74024ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:2f:da:4a:a9:79:2c:69:2d:49:65:32:df:
                    4f:c8:49:55:20:57:2d:ca:44:4b:c3:63:19:9e:72:
                    8a:42:62:f9:64:7c:0c:df:2c:11:1d:35:19:6e:90:
                    f1:4c:c4:57:8e:29:15:87:67:08:c7:e6:61:63:f1:
                    f0:c4:99:77:41:ab:f0:00:df:93:56:94:89:ee:4f:
                    74:b9:88:91:f7:be:44:0e:f6:ae:a1:9f:75:2e:c6:
                    27:d8:92:0d:99:9e:00:38:d0:40:60:f4:f8:81:d1:
                    bc:23:ef:01:c1:b8:0a:34:62:ca:f5:b5:a4:d7:2c:
                    30:04:92:f9:e8:60:0c:ef:0b:d7:9c:7c:09:36:03:
                    6e:d0:c3:fc:3f:54:cd:8e:ce:eb:09:3a:cf:be:62:
                    65:94:46:47:38:1a:3c:d2:56:7f:7d:c3:7e:6a:5e:
                    a1:02:37:9c:da:71:bc:5f:0b:72:92:02:49:da:ec:
                    1d:fb:47:bc:d1:6b:c1:c3:8e:27:6d:04:d4:cf:8d:
                    ae:1a:fc:10:71:83:cf:ac:f2:95:ca:bf:ae:40:1d:
                    36:c0:e2:cb:52:84:9b:aa:24:e0:d2:14:e2:21:78:
                    f2:44:d7:42:3d:c9:5c:ab:fb:5a:49:a9:7b:22:c5:
                    5d:a3:4f:68:fa:3f:8c:ac:86:a1:87:03:2e:57:6f:
                    63:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B6:3C:31:12:98:D2:D8:97:2C:EC:48:3D:BE:BE:BE:C7:40:24:EC
            X509v3 Authority Key Identifier:
                keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d0:b5:d1:d6:ee:17:6b:69:a5:6d:56:87:a9:3c:12:15:aa:
         4f:df:a5:69:1c:08:2e:b7:3e:67:15:ce:55:4d:0b:2d:19:3d:
         5c:55:55:c9:d3:7a:d5:b7:cf:8e:f2:d7:07:dd:e4:3b:e4:16:
         8f:02:f1:71:33:04:9b:7e:7a:3d:2c:60:36:fb:85:17:46:58:
         a8:93:b3:34:4e:f7:17:f7:3e:2d:0e:d5:59:99:44:12:2f:e5:
         d4:98:e0:9a:b2:02:bd:11:29:bd:0a:26:0a:e4:8f:ae:15:45:
         71:2a:19:e7:e7:96:1a:41:19:8c:00:15:44:bf:eb:ac:bc:6e:
         b1:5a:b2:b7:b8:7e:6c:ce:82:a0:b3:c2:6a:c5:ee:c3:1e:6b:
         b1:0e:e7:e1:82:00:b3:8d:9d:66:43:a2:c9:c3:0e:4b:d1:ea:
         fb:3f:41:31:9c:a1:ae:30:c8:85:e5:9f:b5:87:cf:37:7e:9e:
         e5:4d:6e:44:0f:fa:17:94:d4:18:a0:29:94:2a:92:c0:b8:ef:
         10:17:15:70:5a:e2:ce:32:2d:ba:28:e6:9f:4e:54:6d:d1:bb:
         04:c5:b8:4c:6f:ca:13:44:87:e7:5c:e7:98:d9:54:d9:27:0d:
         71:be:82:f4:c8:ff:f2:51:4b:d0:be:ff:54:11:c8:80:4b:7b:
         f1:a0:ea:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:51 2025 by rpki-client