Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
File:                     5VNEmgBiicjZNrKcfsWO2AnhgbY.mft (raw, json)
Hash identifier:          Zq3YXma/CmC+BoTfzFoZNUWQ1r1VnhVCQRxI3HPLbLw=
Subject key identifier:   0F:B4:BD:84:A2:97:FF:6A:73:FD:E3:B9:43:79:C4:D6:F7:6E:EA:CC
Authority key identifier: E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6
Certificate issuer:       /CN=e553449a006289c8d936b29c7ec58ed809e181b6
Certificate serial:       0198D4A78840886EE47ACBA877D544628817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
Manifest number:          0330
Signing time:             Sat 23 Aug 2025 02:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:05 +0000
Files and hashes:         1: 5VNEmgBiicjZNrKcfsWO2AnhgbY.crl (hash: 6P9g+VmHKlmUlFE9VijQbhAPrFioq5MLuC7j3zP6REY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:88:40:88:6e:e4:7a:cb:a8:77:d5:44:62:88:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e553449a006289c8d936b29c7ec58ed809e181b6
        Validity
            Not Before: Aug 23 02:00:05 2025 GMT
            Not After : Aug 24 02:00:05 2025 GMT
        Subject: CN=0fb4bd84a297ff6a73fde3b94379c4d6f76eeacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:20:a9:f0:cf:d0:5a:f0:0e:5f:b8:2a:9a:e7:
                    2c:d9:f4:f1:4d:78:94:fc:9d:33:82:12:05:a5:ae:
                    b6:e6:65:6c:da:4e:bc:48:eb:df:1c:68:e2:4c:57:
                    f1:ff:f1:32:b0:23:6a:11:d1:ec:f2:02:78:58:c9:
                    dc:ec:49:77:83:4e:16:78:fe:e5:22:0b:73:e2:7b:
                    8d:27:2d:e8:5d:7a:11:69:5d:fa:59:3d:e2:b7:3d:
                    65:4d:5f:ec:89:94:10:c0:64:51:51:a1:49:95:d2:
                    e5:68:0b:7a:42:56:3d:19:c2:07:22:2e:78:a0:93:
                    01:25:34:5e:9f:46:29:f0:17:f3:fa:ac:ce:ac:40:
                    40:e6:a3:09:80:94:c9:ff:5d:1e:e3:49:0b:1e:01:
                    3f:47:68:09:9d:07:cc:d7:5f:91:9b:f0:0a:1b:59:
                    b5:0c:35:6e:de:d6:50:11:44:ee:28:cd:ee:84:73:
                    f2:36:cb:a3:25:35:bb:39:eb:9c:34:d1:44:3a:23:
                    2d:a3:30:66:88:22:a9:c1:07:73:0e:d6:ce:82:02:
                    2f:20:cc:7a:97:63:01:46:f5:23:dd:83:e6:fa:7d:
                    26:ef:34:2f:67:5c:0f:95:12:60:4b:1e:51:bf:71:
                    56:b8:bb:b3:19:40:ac:60:6c:48:f4:b4:1b:4d:3e:
                    d6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B4:BD:84:A2:97:FF:6A:73:FD:E3:B9:43:79:C4:D6:F7:6E:EA:CC
            X509v3 Authority Key Identifier:
                keyid:E5:53:44:9A:00:62:89:C8:D9:36:B2:9C:7E:C5:8E:D8:09:E1:81:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VNEmgBiicjZNrKcfsWO2AnhgbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9375e-35b1-4268-994c-f35959fe7d4e/1/5VNEmgBiicjZNrKcfsWO2AnhgbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4b:24:c3:d2:96:7f:d3:93:bc:7b:ff:eb:89:28:b5:4d:20:
         2e:aa:e0:df:43:41:64:b5:0f:58:31:04:f7:f4:4a:a5:82:b2:
         b0:62:3b:fa:e0:2e:9d:be:ba:5f:e3:26:4a:ba:13:01:fa:4b:
         20:c2:b1:48:21:ae:7a:2f:b7:20:af:13:ba:d5:48:17:4b:e9:
         db:a1:e8:fb:65:f4:05:6d:a6:3a:c4:98:26:3c:a9:2a:19:c2:
         6b:13:eb:61:79:81:80:08:25:04:2c:01:2a:f8:02:23:1c:ee:
         08:3d:ed:b2:12:a1:4f:c3:6d:0c:7f:97:1d:e8:6a:6e:bc:60:
         44:28:5a:80:32:97:ff:10:22:f5:04:ea:6b:8a:a5:14:6f:99:
         21:22:1f:e4:1c:e9:32:77:f0:8e:11:5a:f0:9e:52:b7:a5:c9:
         1b:55:15:fd:53:e6:47:12:25:e9:6e:bc:a8:f4:9c:90:0e:c5:
         ad:21:eb:21:58:db:67:f2:02:f0:c0:47:3c:d2:71:9a:cb:bb:
         69:57:1f:b2:ca:c1:86:bf:07:d6:d0:37:6c:d3:f9:41:fc:bd:
         f5:eb:9d:d4:dd:f9:8c:99:83:b6:9b:97:31:58:a7:42:10:5a:
         8c:16:4d:19:2c:be:b5:10:4e:fd:43:d9:3e:12:d5:d6:b3:88:
         70:81:2c:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp4hAiG7kesuod9VEYogXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NTM0NDlhMDA2Mjg5YzhkOTM2YjI5YzdlYzU4ZWQ4MDll
MTgxYjYwHhcNMjUwODIzMDIwMDA1WhcNMjUwODI0MDIwMDA1WjAzMTEwLwYDVQQD
EygwZmI0YmQ4NGEyOTdmZjZhNzNmZGUzYjk0Mzc5YzRkNmY3NmVlYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iCp8M/QWvAOX7gqmucs2fTxTXiU
/J0zghIFpa625mVs2k68SOvfHGjiTFfx//EysCNqEdHs8gJ4WMnc7El3g04WeP7l
Igtz4nuNJy3oXXoRaV36WT3itz1lTV/siZQQwGRRUaFJldLlaAt6QlY9GcIHIi54
oJMBJTRen0Yp8Bfz+qzOrEBA5qMJgJTJ/10e40kLHgE/R2gJnQfM11+Rm/AKG1m1
DDVu3tZQEUTuKM3uhHPyNsujJTW7OeucNNFEOiMtozBmiCKpwQdzDtbOggIvIMx6
l2MBRvUj3YPm+n0m7zQvZ1wPlRJgSx5Rv3FWuLuzGUCsYGxI9LQbTT7WewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+0vYSil/9qc/3juUN5xNb3burMMB8GA1UdIwQY
MBaAFOVTRJoAYonI2TaynH7FjtgJ4YG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVZORW1nQmlpY2paTnJLY2ZzV08yQW5oZ2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOTM3NWUtMzViMS00MjY4LTk5NGMt
ZjM1OTU5ZmU3ZDRlLzEvNVZORW1nQmlpY2paTnJLY2ZzV08yQW5oZ2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iOTM3NWUtMzViMS00MjY4LTk5NGMtZjM1OTU5ZmU3ZDRl
LzEvNVZORW1nQmlpY2paTnJLY2ZzV08yQW5oZ2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEskw9KW
f9OTvHv/64kotU0gLqrg30NBZLUPWDEE9/RKpYKysGI7+uAunb66X+MmSroTAfpL
IMKxSCGuei+3IK8TutVIF0vp26Ho+2X0BW2mOsSYJjypKhnCaxPrYXmBgAglBCwB
KvgCIxzuCD3tshKhT8NtDH+XHehqbrxgRChagDKX/xAi9QTqa4qlFG+ZISIf5Bzp
MnfwjhFa8J5St6XJG1UV/VPmRxIl6W68qPSckA7FrSHrIVjbZ/IC8MBHPNJxmsu7
aVcfssrBhr8H1tA3bNP5Qfy99eud1N35jJmDtpuXMVinQhBajBZNGSy+tRBO/UPZ
PhLV1rOIcIEssA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:07 2025 by rpki-client