Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
File:                     5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json)
Hash identifier:          2k7DRraf7334AYhYaI2DrKTYAQ3PDog9ZCKVjtC4Fyk=
Subject key identifier:   74:25:47:86:FF:B6:1D:87:E8:D2:79:88:F3:4D:E4:61:05:CB:41:34
Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Certificate issuer:       /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Certificate serial:       0198D54DE4F5297AC5C17983EF10A9400F96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
Manifest number:          0637
Signing time:             Sat 23 Aug 2025 05:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:48 +0000
Files and hashes:         1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: mJ3i76Dfnis8bom4swWdQ4EiEps9RQXbShazdlxDiaM=)
                          2: zwhatF5o3yk6nLXIa0yxqzP0ZTc.roa (hash: 9S00G7VwkBsXnXA2C5JQWmhqMbRgsqzBdUuOpwkdR1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:e4:f5:29:7a:c5:c1:79:83:ef:10:a9:40:0f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
        Validity
            Not Before: Aug 23 05:01:48 2025 GMT
            Not After : Aug 24 05:01:48 2025 GMT
        Subject: CN=74254786ffb61d87e8d27988f34de46105cb4134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:6c:2b:10:7e:81:e0:4e:f7:b8:d8:0b:63:
                    f6:52:5c:8e:92:1e:46:a7:7f:8a:be:0d:91:96:a3:
                    c6:ec:97:47:fc:4e:2d:70:aa:75:b9:1a:4a:84:f4:
                    a5:c3:61:c8:cb:bb:fa:f3:59:e4:81:20:95:df:51:
                    28:62:fd:df:0b:1d:9c:54:e5:af:bb:f8:d7:db:4e:
                    0f:8a:1f:df:db:be:ab:db:10:59:88:04:1e:2d:14:
                    da:c6:e6:71:aa:7d:a0:24:12:35:33:03:a0:bd:7d:
                    b9:4a:35:0b:af:0e:4d:79:07:b4:db:f8:3c:ef:d8:
                    69:f6:d6:03:02:96:71:69:cb:0d:aa:20:be:16:05:
                    be:fc:00:f2:8e:e3:3c:13:d5:fb:a6:68:fa:84:5c:
                    87:b2:35:13:af:00:fd:78:38:ac:2d:8e:fb:85:7e:
                    c6:ec:ff:ec:91:b1:49:81:52:e0:8b:05:b8:13:e5:
                    b2:51:73:d1:d0:91:68:50:71:d2:3f:aa:8e:d4:b7:
                    89:b4:97:a8:c8:1b:21:13:64:29:6d:9a:44:63:3e:
                    e3:0a:50:95:00:40:28:41:fe:55:03:76:eb:a9:84:
                    2b:1c:bd:fa:77:98:d3:0e:3e:66:95:5b:3d:bf:6a:
                    5b:dc:46:89:bd:9f:da:9f:eb:8a:3c:5a:6c:c2:ff:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:25:47:86:FF:B6:1D:87:E8:D2:79:88:F3:4D:E4:61:05:CB:41:34
            X509v3 Authority Key Identifier:
                keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d2:b3:f8:97:3d:52:0a:64:aa:df:c6:58:80:a1:dc:3d:b6:
         32:1a:8c:26:79:a7:da:1c:17:fa:5b:06:e3:08:80:8f:9f:d1:
         ca:69:20:77:af:d0:64:5c:2b:5c:55:c9:85:9c:7a:fc:0f:9b:
         49:75:ac:ab:ba:a6:ae:23:bf:ea:c9:d0:a3:c2:c1:81:f9:6a:
         b6:42:7c:49:62:2c:f0:2d:b3:bb:8e:5e:b2:a3:24:73:91:38:
         d8:4b:86:a0:12:fb:7e:78:59:47:8b:98:7f:7f:57:ac:2f:b4:
         7b:fe:40:f8:44:52:59:3a:9e:fd:4f:9b:15:39:dc:24:84:b5:
         16:3e:cf:e8:f4:1f:54:ac:b9:9f:e9:9f:af:32:b0:e9:5d:cd:
         58:6b:2b:99:bc:13:41:cb:8b:61:f0:dc:f0:a3:2b:d5:ef:60:
         3e:3d:a1:6d:a0:cc:e2:e8:33:b2:d2:0b:e5:a5:2f:4a:44:f0:
         08:2e:67:03:70:b0:7d:46:f1:e2:5c:20:65:ba:14:7c:a3:57:
         1e:e9:54:87:17:9a:59:94:4b:83:33:37:29:1c:ce:69:d5:2e:
         7c:1b:bd:ce:b2:ee:2c:79:12:04:7e:71:b9:46:5d:b5:a4:eb:
         eb:68:f5:32:19:d7:e0:af:a8:b5:9c:c8:05:56:03:20:5d:90:
         19:93:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:13 2025 by rpki-client