Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File:                     5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier:          J7bflpVVNFrApBctUEFtWWC2y/vRaBGjwzWlFJnal+M=
Subject key identifier:   EE:88:58:89:CB:E7:F7:30:93:52:BE:BE:F2:A7:12:A7:DD:87:1E:1C
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer:       /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial:       0196C0EF512D9AB6C40704E44E25AE78BD4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number:          031E
Signing time:             Sun 11 May 2025 20:00:31 +0000
Manifest this update:     Sun 11 May 2025 20:00:31 +0000
Manifest next update:     Mon 12 May 2025 20:00:31 +0000
Files and hashes:         1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: 2hnbF364BpGF9XXq1OFhnkpzsura2RoXgXahmRErm5s=)
                          2: QF9fIw7vy0eAFpEn9gjeokPnPnM.roa (hash: q/KInKHcPLJ4cSVDaCLVjiOhhH/dOxf+Ggq3kQQJxYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:ef:51:2d:9a:b6:c4:07:04:e4:4e:25:ae:78:bd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
        Validity
            Not Before: May 11 20:00:31 2025 GMT
            Not After : May 12 20:00:31 2025 GMT
        Subject: CN=ee885889cbe7f7309352bebef2a712a7dd871e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:dd:d2:20:b3:fd:cc:07:cd:44:0f:de:83:
                    01:4e:5e:2a:88:82:32:63:66:7d:4a:46:81:09:58:
                    44:ff:b7:50:25:0d:81:e1:25:98:e2:cd:12:e0:9f:
                    28:23:bd:88:88:d0:fd:ba:fa:f7:e1:a5:08:ba:8a:
                    3e:42:6c:db:7b:4e:85:69:5a:04:12:07:a3:1c:5a:
                    42:05:d1:3c:24:78:16:42:f2:cc:50:dd:17:1b:5b:
                    58:83:6e:4d:29:2f:4f:47:7d:ee:f2:60:2b:0d:d6:
                    d4:c2:e1:7a:ab:65:cf:62:03:96:54:31:95:e7:40:
                    60:6a:08:0e:c7:71:7c:c2:81:1b:73:08:fc:2d:f8:
                    d9:81:8f:51:38:a7:d8:5c:6a:56:62:b9:0f:6a:40:
                    29:af:1c:85:64:9d:f0:4d:4b:57:15:b8:07:ea:65:
                    07:c4:f0:79:f3:20:f0:2a:39:54:50:cd:9a:df:17:
                    14:08:5d:f9:c7:94:fb:4c:c9:0d:88:b3:de:ce:c6:
                    e4:0d:b9:90:b6:51:8d:a7:41:6d:6e:bb:df:69:4d:
                    09:f2:87:47:98:04:04:7f:7f:9b:6f:75:0e:52:b1:
                    5a:53:1b:f5:e0:71:73:64:79:fe:f6:fc:a5:a9:9a:
                    2a:b4:40:d4:db:49:60:9f:02:ec:2f:a6:77:4a:d2:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:88:58:89:CB:E7:F7:30:93:52:BE:BE:F2:A7:12:A7:DD:87:1E:1C
            X509v3 Authority Key Identifier:
                keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ab:5d:e6:1b:be:61:e4:ef:16:17:3a:4f:3a:c5:73:1a:47:
         3f:67:e6:50:64:d4:14:7d:ea:85:25:31:15:a6:fe:7f:e1:3f:
         50:00:8d:98:f5:c0:cc:0f:00:b3:52:15:8d:f3:f1:d0:5f:6e:
         43:ca:28:20:83:f8:a9:05:e2:fe:5e:ed:8b:af:fb:fd:42:c3:
         5e:01:92:f4:8a:b4:c5:6e:41:cb:0b:bb:61:27:43:cf:92:e9:
         c4:84:bb:dd:ac:db:89:d9:a9:89:8a:4c:fe:a9:67:10:7e:5b:
         13:22:2d:2a:73:0a:c9:3f:49:ae:d3:6e:dc:4b:5c:7e:b2:b4:
         66:63:23:ac:cc:45:b4:85:45:8c:aa:84:af:25:84:ef:4a:47:
         0a:45:73:9b:f2:47:5e:f7:13:87:21:69:91:07:5f:a6:1a:0d:
         fe:a9:79:16:cb:07:ba:35:5a:2d:af:be:3b:98:9e:61:46:ec:
         f7:25:a1:27:33:f9:25:91:ef:f5:9c:5b:31:62:96:a7:fc:24:
         d2:5c:1e:eb:76:2f:84:19:ec:35:2b:ea:fe:4d:62:a5:99:18:
         66:4f:51:bb:33:8d:d1:8b:42:38:40:4e:fb:06:ea:4f:78:98:
         de:de:44:bb:3c:77:29:4e:3e:c2:45:23:9e:e4:c1:98:30:fe:
         8e:f3:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:54:27 2025 by rpki-client