Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File:                     5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier:          MWuo3fagLzkSvS0YudjqTsEdE4YCoc/84iOnpUsfeNw=
Subject key identifier:   A6:A3:F6:0B:36:1E:4A:BF:5D:F1:D2:9B:17:95:31:46:BA:EA:3C:66
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer:       /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial:       0196CBE14048CA2BD269595617AA073C7632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number:          0D59
Signing time:             Tue 13 May 2025 23:00:58 +0000
Manifest this update:     Tue 13 May 2025 23:00:58 +0000
Manifest next update:     Wed 14 May 2025 23:00:58 +0000
Files and hashes:         1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: sO/BDj8ZY/o+/eMP/wqMH29T4l6jBkhUms0zpcod0C8=)
                          2: h1D7CnT2PY1NPObHiR4r21lOKxw.roa (hash: FFNEtoxBXjniX9r1DmUch9vHzQqa3zr4aAAiKoIwvtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:e1:40:48:ca:2b:d2:69:59:56:17:aa:07:3c:76:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
        Validity
            Not Before: May 13 23:00:58 2025 GMT
            Not After : May 14 23:00:58 2025 GMT
        Subject: CN=a6a3f60b361e4abf5df1d29b17953146baea3c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:f4:c0:42:09:70:01:03:1b:88:11:b5:b1:
                    72:51:cb:26:24:01:a5:cf:42:a8:3e:c9:4d:d3:c4:
                    55:99:35:a3:49:65:01:c3:a6:98:7a:b0:00:0f:cf:
                    23:4a:37:4f:c7:3d:e0:f0:a9:24:44:2d:36:ef:32:
                    9a:7d:57:96:e0:30:85:61:6e:12:fb:f5:1a:35:9e:
                    d2:98:56:b6:46:95:82:de:d1:f4:8c:98:d4:0b:53:
                    35:55:b6:3e:86:f1:63:d9:c7:bb:49:fa:30:4e:4a:
                    7d:e4:39:c7:0f:2a:bb:3c:f9:99:c4:f7:45:d9:5c:
                    1c:22:ea:a1:39:6e:a9:10:a6:52:66:3e:63:3e:28:
                    23:2c:40:9d:30:91:cd:1a:0a:cd:4d:53:08:69:8e:
                    eb:ee:0b:21:c1:48:51:bc:a3:10:b1:d7:42:7a:bd:
                    e4:80:e8:37:da:db:74:b3:d6:67:7a:36:45:fd:c4:
                    4f:75:6f:7c:16:b7:0b:e0:9a:39:41:32:72:91:d6:
                    90:7a:a3:a9:5e:1c:33:d1:15:96:b6:d3:55:85:b7:
                    f9:85:83:82:16:f0:0f:0b:26:56:67:54:65:85:02:
                    41:75:d0:4c:e4:1a:a9:ca:87:ca:3d:e7:c1:83:e6:
                    1d:1d:d7:69:9a:c1:92:0c:04:52:98:7b:5f:bd:bf:
                    c1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:F6:0B:36:1E:4A:BF:5D:F1:D2:9B:17:95:31:46:BA:EA:3C:66
            X509v3 Authority Key Identifier:
                keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c1:f6:61:a1:b0:b2:3d:f9:8d:f4:21:cf:41:1d:64:0a:f1:
         62:6c:a8:90:0a:2a:b6:b3:d6:f0:cc:10:d1:42:df:27:8a:51:
         c5:69:ff:00:e0:ad:5f:c5:58:7a:1b:54:93:02:2e:8d:b9:a3:
         1b:5d:70:12:df:17:c1:bf:16:ba:ca:66:79:7e:90:33:16:55:
         16:b2:5e:6d:ea:79:4c:ac:42:e9:22:fb:a0:96:1e:f5:2d:00:
         ab:ae:6c:19:77:72:10:0c:9d:95:fc:ca:f3:07:50:79:ec:92:
         5c:55:06:42:4e:eb:b7:f2:c1:d4:d1:6e:46:6c:4d:ae:d3:0c:
         e5:69:7d:80:c8:cc:be:70:41:0e:91:14:44:27:97:3a:62:50:
         f5:26:9f:51:7a:c7:39:de:9a:48:c9:0f:33:2c:6b:8e:0c:70:
         2a:30:95:b8:27:fb:f5:62:a8:fb:56:0e:5a:0e:83:97:73:d5:
         86:1d:db:8f:7f:2b:9c:d6:83:91:03:f3:7b:cf:9c:11:8b:6b:
         46:5b:91:5e:42:83:07:30:cf:2f:40:6f:f9:b7:ab:1f:ca:4b:
         f9:16:6f:20:fc:82:78:6c:03:58:d8:94:f3:e2:6d:f7:60:e7:
         13:f7:86:5f:bc:c9:63:f0:9f:3d:e9:d0:94:e7:77:d8:32:6a:
         28:f1:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:55:56 2025 by rpki-client