Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
File:                     ML5SuuTUjd3Jy-wgdqupHJU64S4.mft (raw, json)
Hash identifier:          UNrysFackYi0elnsOqHpIwIySBdudERdd8z3zFRbQko=
Subject key identifier:   D1:E2:C6:D7:30:EA:41:17:50:EB:3E:12:B3:1A:FE:4F:89:1F:C0:37
Authority key identifier: 30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E
Certificate issuer:       /CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
Certificate serial:       0199FB0F3014BEB5835D689D8C9E49977186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
Manifest number:          1374
Signing time:             Sun 19 Oct 2025 06:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:40 +0000
Files and hashes:         1: ML5SuuTUjd3Jy-wgdqupHJU64S4.crl (hash: m/l5pSWn3FAnl6IcbgpyOzgh13sJO4kly2OH222CreM=)
                          2: VdtZIDR20QBsvLwRhmbNZAq9N1s.roa (hash: ne8PPRk8FY3v9PoVn0H4s7uRgTuomQzFJy3jouG0CbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:30:14:be:b5:83:5d:68:9d:8c:9e:49:97:71:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30be52bae4d48dddc9cbec2076aba91c953ae12e
        Validity
            Not Before: Oct 19 06:01:40 2025 GMT
            Not After : Oct 20 06:01:40 2025 GMT
        Subject: CN=d1e2c6d730ea411750eb3e12b31afe4f891fc037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:9d:ae:98:13:05:50:50:9e:73:9a:92:ca:
                    f1:f8:71:73:88:88:60:88:5f:24:f5:c6:0e:61:f4:
                    ad:95:b1:a8:b7:fe:b0:05:66:ab:00:27:14:d7:94:
                    13:50:79:33:43:ed:19:81:1f:01:32:8e:56:58:75:
                    ca:59:e0:f6:c6:6c:e9:9d:73:46:6f:1d:53:3c:a0:
                    f0:e4:14:da:24:44:4d:7d:a6:de:94:56:49:b6:f2:
                    a4:99:4c:63:72:90:02:5a:f1:a3:e5:c7:ff:1a:9b:
                    88:ba:d7:a5:07:ea:d9:f8:a9:f9:86:2e:c8:eb:fa:
                    0a:2c:1b:5d:74:46:5f:4f:08:19:8f:2a:17:81:66:
                    fe:82:ef:7c:6f:69:13:b4:3e:84:ec:f7:92:a7:d5:
                    cc:77:00:f8:fa:73:a7:67:06:4e:38:10:c6:9c:5e:
                    ab:13:70:88:e7:76:46:5e:0e:b5:19:83:cd:ef:54:
                    90:b6:b1:7c:c1:96:1b:dc:bc:a1:58:45:bd:98:e9:
                    1b:77:71:ea:ed:da:b9:56:38:90:ed:a4:ad:fd:71:
                    f2:15:95:dd:c8:3f:db:c8:3a:70:07:d5:f7:60:b3:
                    88:b3:59:ec:72:0a:d5:ea:f4:6d:40:26:b2:24:90:
                    d5:66:a5:a5:e8:fe:31:fe:76:2a:99:db:09:ff:b5:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E2:C6:D7:30:EA:41:17:50:EB:3E:12:B3:1A:FE:4F:89:1F:C0:37
            X509v3 Authority Key Identifier:
                keyid:30:BE:52:BA:E4:D4:8D:DD:C9:CB:EC:20:76:AB:A9:1C:95:3A:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML5SuuTUjd3Jy-wgdqupHJU64S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5f575f-992c-48e9-9158-d80f5ea62d44/1/ML5SuuTUjd3Jy-wgdqupHJU64S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:90:29:e4:7a:6d:4e:0a:2f:4f:d4:f1:c1:00:da:8a:0a:b2:
         d4:1c:59:87:78:e4:e8:e7:7e:a9:48:3e:a6:45:f1:1a:66:34:
         f9:35:bd:51:a7:a2:bd:0f:b5:85:fd:71:d9:8c:ce:c1:73:c1:
         4e:e6:c2:cb:70:7a:56:78:6c:b8:60:8f:e6:47:e7:ea:f2:20:
         b5:4d:fc:e8:e4:37:2a:3d:94:55:0b:cf:f9:da:2e:ee:a0:20:
         8c:b7:e3:6e:be:34:ec:44:b8:63:d0:ba:00:77:40:07:ab:d3:
         82:db:f8:24:a9:4b:ce:32:8c:ea:fa:62:4d:fc:68:da:4f:16:
         09:ea:f7:f5:f3:84:c6:16:7a:12:eb:90:50:a3:10:d8:64:08:
         ec:75:fd:d8:c9:a9:4e:1a:1b:54:8b:db:7f:20:8f:3a:98:9b:
         38:e0:ee:29:70:be:7f:b0:cb:d4:d7:52:58:89:7b:a9:63:1a:
         cc:51:15:49:92:7d:0c:68:0d:f1:c4:ab:c5:c7:49:db:f4:03:
         66:43:f9:61:94:a0:85:5a:e3:8d:20:a1:72:50:94:c9:5d:84:
         d4:67:0f:1f:a3:50:df:60:6c:29:71:c3:a0:8a:73:e5:a2:75:
         51:56:92:11:34:c4:e6:3a:ff:ac:2e:62:e1:f0:1f:fd:b9:0a:
         15:d0:b4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:22 2025 by rpki-client