Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
File:                     53e8jj7CUM6F-5CRPCxJBRBD68U.mft (raw, json)
Hash identifier:          pbHcBdAD6md/5AxvrwTYpDqPhABcfTfLIrre9fZXvRw=
Subject key identifier:   70:5F:0D:7C:99:AC:7A:50:41:9C:56:4B:CA:69:89:72:18:42:4B:4C
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Certificate issuer:       /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial:       0197B70E84BD8527AFDF406F4EAF6E63038D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
Manifest number:          0C90
Signing time:             Sat 28 Jun 2025 15:01:11 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:11 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:11 +0000
Files and hashes:         1: 53e8jj7CUM6F-5CRPCxJBRBD68U.crl (hash: EZ+hv2sxF2CwRye5VdOLWahwCXAySJZDVDhaDXuQcmc=)
                          2: EC7CG7vDGWKuQugmwYX02eAcLyQ.roa (hash: NeWqCf30d/nzXO3lh6RSwAe3lyCWu1HWylCk2It8npM=)
                          3: ZABIQATF12aikgC1O0hDBVjOfyU.roa (hash: DodKV5kgcQUZQo+3v/CpLgDA9tUlP1X5Qg4/U91seR4=)
                          4: c5GR0CvkfkgJP50hkVwQxiZA7C8.roa (hash: H+OOhfte4ViJLC2qWeoEPiaOcajpT6H91Tk+JZt70Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:84:bd:85:27:af:df:40:6f:4e:af:6e:63:03:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
        Validity
            Not Before: Jun 28 15:01:11 2025 GMT
            Not After : Jun 29 15:01:11 2025 GMT
        Subject: CN=705f0d7c99ac7a50419c564bca69897218424b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ee:a9:f8:46:30:8d:33:26:18:50:22:87:95:
                    ca:9f:f1:63:36:01:0f:38:51:5e:a6:20:88:fb:c5:
                    65:1e:3b:8a:ed:b1:2f:95:0d:00:42:4f:53:18:a2:
                    ba:35:dd:82:23:f3:ad:0c:3f:67:46:4b:1d:49:c9:
                    51:fd:c6:4a:27:54:15:7c:51:bf:ae:27:bd:a8:cc:
                    4c:62:41:22:27:e8:03:09:ef:3e:fc:97:4e:de:46:
                    5f:86:b7:97:57:5f:7d:ca:5f:c7:50:a0:8d:41:ed:
                    8a:59:e2:26:8d:8e:27:7b:30:5e:d2:94:7e:bf:14:
                    e5:26:44:fc:9b:55:50:1e:9d:09:5d:40:a7:8d:74:
                    c7:6d:d1:f5:f6:87:d0:69:d8:1a:76:a6:b2:65:3c:
                    06:9e:2d:3b:1b:03:67:c2:ea:e6:04:7d:5f:bd:39:
                    a7:25:f4:09:54:a5:c3:22:e1:40:0a:65:31:29:32:
                    de:cf:ab:97:5f:cd:51:89:02:d3:c9:4c:0b:36:56:
                    b8:de:16:d0:16:f3:dc:5c:a1:b1:2a:9f:ec:f0:6a:
                    68:43:4a:d6:2a:e6:ac:60:e6:26:60:27:03:c2:7f:
                    e0:15:3e:ce:c7:d2:ca:1d:92:5d:1a:04:7d:3f:80:
                    8b:0f:0a:b9:60:96:f9:ba:68:c7:63:64:cf:e1:9b:
                    d3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5F:0D:7C:99:AC:7A:50:41:9C:56:4B:CA:69:89:72:18:42:4B:4C
            X509v3 Authority Key Identifier:
                keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:18:b1:0d:3a:45:a4:dc:82:b3:20:6c:0f:86:90:80:4a:
         6a:cc:7f:8a:0a:70:75:36:ef:aa:34:36:ef:41:bc:12:6e:8c:
         3e:52:a8:e6:b2:ba:82:b9:f6:97:ee:65:18:fd:33:79:c0:08:
         e2:4f:f4:2d:e0:d3:61:7f:7c:4c:ae:b5:db:7f:46:33:14:4e:
         3f:5b:b8:16:be:32:7d:7f:c2:24:92:aa:f5:50:bc:e5:0e:1a:
         f5:11:e8:df:e5:5f:90:98:3b:37:f3:d7:74:19:20:92:39:12:
         b7:a6:00:ac:4c:04:0e:01:ff:1a:52:ec:ad:86:0b:d5:8b:96:
         26:4e:34:aa:39:3d:7b:e4:e7:20:aa:9f:b1:be:46:11:d7:4a:
         41:0f:04:00:bd:fa:ad:0a:e2:16:a5:c9:b4:61:57:fd:23:90:
         39:6d:5b:16:2c:e1:bc:10:31:87:ac:22:31:f6:22:b9:03:8b:
         8a:51:25:59:17:b6:26:92:6e:e3:8e:8d:71:8e:b7:6c:13:26:
         61:fe:2b:48:1f:94:9e:8f:81:20:61:dc:b0:e7:00:2a:4e:a7:
         cf:fb:19:a8:ff:3c:66:42:aa:ce:39:7c:f7:16:f5:16:88:6c:
         e6:2a:f5:e5:25:3a:23:16:b8:2c:88:f3:3b:ee:0b:32:8c:0c:
         d3:dc:dc:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DoS9hSev30BvTq9uYwONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NzdiYzhlM2VjMjUwY2U4NWZiOTA5MTNjMmM0OTA1MTA0
M2ViYzUwHhcNMjUwNjI4MTUwMTExWhcNMjUwNjI5MTUwMTExWjAzMTEwLwYDVQQD
Eyg3MDVmMGQ3Yzk5YWM3YTUwNDE5YzU2NGJjYTY5ODk3MjE4NDI0YjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+6p+EYwjTMmGFAih5XKn/FjNgEP
OFFepiCI+8VlHjuK7bEvlQ0AQk9TGKK6Nd2CI/OtDD9nRksdSclR/cZKJ1QVfFG/
rie9qMxMYkEiJ+gDCe8+/JdO3kZfhreXV199yl/HUKCNQe2KWeImjY4nezBe0pR+
vxTlJkT8m1VQHp0JXUCnjXTHbdH19ofQadgadqayZTwGni07GwNnwurmBH1fvTmn
JfQJVKXDIuFACmUxKTLez6uXX81RiQLTyUwLNla43hbQFvPcXKGxKp/s8GpoQ0rW
KuasYOYmYCcDwn/gFT7Ox9LKHZJdGgR9P4CLDwq5YJb5umjHY2TP4ZvTTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBfDXyZrHpQQZxWS8ppiXIYQktMMB8GA1UdIwQY
MBaAFOd3vI4+wlDOhfuQkTwsSQUQQ+vFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWIt
ZmFlMGU1ZDJlZWJmLzEvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWItZmFlMGU1ZDJlZWJm
LzEvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrQYsQ06
RaTcgrMgbA+GkIBKasx/igpwdTbvqjQ270G8Em6MPlKo5rK6grn2l+5lGP0zecAI
4k/0LeDTYX98TK61239GMxROP1u4Fr4yfX/CJJKq9VC85Q4a9RHo3+VfkJg7N/PX
dBkgkjkSt6YArEwEDgH/GlLsrYYL1YuWJk40qjk9e+TnIKqfsb5GEddKQQ8EAL36
rQriFqXJtGFX/SOQOW1bFizhvBAxh6wiMfYiuQOLilElWRe2JpJu446NcY63bBMm
Yf4rSB+Uno+BIGHcsOcAKk6nz/sZqP88ZkKqzjl89xb1Fohs5ir15SU6Ixa4LIjz
O+4LMowM09zc5g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:50 2025 by rpki-client