Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
File:                     5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft (raw, json)
Hash identifier:          SGvRNI0w+f1KllaaZIE7Mig7oftQuEQlmjTIUEIzNco=
Subject key identifier:   18:61:41:13:37:FC:4A:2E:14:89:E3:30:19:72:FC:24:40:50:B7:5B
Authority key identifier: E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B
Certificate issuer:       /CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
Certificate serial:       0198D4DFFF5A63EE9706B49B7BCCC78FBC8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
Manifest number:          0903
Signing time:             Sat 23 Aug 2025 03:01:46 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:46 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:46 +0000
Files and hashes:         1: 5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl (hash: XiZuSNq34+FuBa72FFHJ+l9LrY8NhM0Uh79c4ywcaJM=)
                          2: xKaI03GURyzSZb-rRcYioTYAybk.roa (hash: HlTvUY61ftuf4HfBCvEW2aFKorP77hcqRc1NgwCXzCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:ff:5a:63:ee:97:06:b4:9b:7b:cc:c7:8f:bc:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e495acbafe46ef2f4d6c51fcf23bd72f639cfd0b
        Validity
            Not Before: Aug 23 03:01:46 2025 GMT
            Not After : Aug 24 03:01:46 2025 GMT
        Subject: CN=1861411337fc4a2e1489e3301972fc244050b75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:d2:84:db:bf:20:0d:f4:05:48:f2:79:86:
                    50:06:d7:c8:b5:f8:21:36:5e:35:85:47:d4:2f:34:
                    f0:a9:a5:bb:3b:ee:15:dc:57:05:da:b0:71:96:a2:
                    a9:ef:16:0e:fa:bb:86:b4:bb:12:1b:ec:1c:4d:b6:
                    ab:86:62:98:c0:fc:06:08:1a:cc:21:15:4d:d1:0c:
                    be:2b:2d:e5:a4:70:ab:dd:2a:51:f1:4d:78:3d:1d:
                    e1:33:b9:b9:3c:a3:1c:53:44:c4:c7:24:b9:ee:a5:
                    86:db:49:1a:6f:98:01:0d:77:c8:ab:a9:68:d3:3a:
                    90:49:7a:b6:1e:f7:c9:65:13:41:fc:dd:56:f6:7e:
                    2d:ad:6d:e2:a8:69:f3:b6:5c:69:34:bf:8c:c0:02:
                    58:9f:af:7d:58:13:23:c8:cd:0d:2f:93:e2:fe:33:
                    b3:fa:c8:f6:8c:90:57:57:2f:61:d7:14:2e:24:72:
                    6b:10:9b:74:9f:1f:47:e7:53:d7:e6:48:e3:0f:8d:
                    16:26:8e:ba:06:37:4d:ba:df:ff:00:95:57:a3:29:
                    b2:b3:15:00:c4:b7:01:a5:3d:fa:54:2a:ea:db:0b:
                    7b:f3:7e:cf:af:a4:ea:ec:17:5d:72:40:8e:72:50:
                    49:91:40:40:e1:75:20:1b:30:bc:e1:7c:cf:b6:ef:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:61:41:13:37:FC:4A:2E:14:89:E3:30:19:72:FC:24:40:50:B7:5B
            X509v3 Authority Key Identifier:
                keyid:E4:95:AC:BA:FE:46:EF:2F:4D:6C:51:FC:F2:3B:D7:2F:63:9C:FD:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/440877-319d-4630-a691-7991b4e4bfa2/1/5JWsuv5G7y9NbFH88jvXL2Oc_Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f1:07:37:61:a1:c2:d2:83:d6:55:b3:83:b4:c6:8e:ba:b6:
         99:83:e3:a4:b9:44:36:e6:a6:93:aa:fc:94:97:2e:d9:46:65:
         d1:00:79:50:43:ce:8b:8d:88:b8:b1:2a:97:66:27:ba:24:70:
         dc:34:ca:60:53:f1:1b:26:3c:75:7f:bc:49:dd:c5:ab:f7:7f:
         fc:f6:42:23:e9:06:6c:38:f8:86:86:07:29:fc:18:19:4c:a3:
         ef:f1:3e:b6:c1:83:b4:6c:73:46:01:4b:18:95:95:cb:d6:1b:
         57:fd:41:ac:e6:7d:fa:a0:c1:15:46:8f:12:76:8a:a2:d2:99:
         df:22:f7:ad:73:c4:cb:4d:57:94:ee:e0:e2:5d:d8:aa:b9:3c:
         83:72:c8:a7:cc:ae:6d:df:ad:17:b2:65:88:3f:d4:0d:02:de:
         79:89:bb:15:c6:4e:df:1a:94:fd:58:04:c0:9f:68:98:a7:c4:
         a4:cb:1d:a9:7d:85:55:39:20:3a:a6:45:f3:d9:eb:67:8b:d6:
         2b:6a:c5:b5:45:65:09:55:64:22:dc:99:1d:ae:f3:ab:5c:37:
         c9:71:cf:02:d0:41:55:3e:85:3b:94:ef:3e:0e:c7:d0:60:22:
         67:24:df:92:82:8d:44:ad:1d:c5:36:58:8a:1a:7f:62:52:34:
         8d:c1:a3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:57 2025 by rpki-client