Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File:                     5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier:          z3GwLO08hFSkimhM/74SoERchKusKzX70On4vsOuK10=
Subject key identifier:   09:F2:3D:E6:06:D9:96:3D:A5:D3:63:D7:2A:D6:01:A2:E2:64:0D:48
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer:       /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial:       0198D6CD7DA271EBA38ED8B8314322F8248F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number:          1651
Signing time:             Sat 23 Aug 2025 12:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:47 +0000
Files and hashes:         1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: N0CWEDU3fBTHgjNEzi2BxkHLzXH29o3IwoVoVMdA94s=)
                          2: 6DW1a6m05hh-gzCp-p2Th_jROrQ.roa (hash: DVwz9dCE2VA6PR9eWz/ZL0YuKXs4l+SQG40TAFfVI+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:7d:a2:71:eb:a3:8e:d8:b8:31:43:22:f8:24:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
        Validity
            Not Before: Aug 23 12:00:47 2025 GMT
            Not After : Aug 24 12:00:47 2025 GMT
        Subject: CN=09f23de606d9963da5d363d72ad601a2e2640d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:f8:89:4f:ce:ea:96:b3:80:58:1b:b9:55:
                    3b:39:49:4f:b1:b9:02:64:02:68:c0:85:e8:12:1f:
                    0b:8f:a6:2a:be:18:da:5f:17:96:38:16:f4:18:23:
                    41:83:b8:9a:88:03:c3:29:32:33:2b:9c:7f:9b:43:
                    f4:e9:c5:e6:1e:fd:f1:a0:59:34:85:5a:4c:66:f1:
                    c5:b6:0d:c9:df:75:ad:d7:e1:10:fa:73:8c:97:00:
                    36:35:51:d8:73:9c:46:95:2a:f7:46:51:f2:93:a6:
                    78:40:e9:8c:6f:46:9e:9b:8a:67:f0:9e:32:f5:82:
                    ce:e9:34:91:34:fb:fb:85:e4:7c:08:98:35:d5:09:
                    95:6a:23:25:b8:55:39:71:42:ac:f8:b4:59:5c:cb:
                    08:82:bb:ab:91:6e:ce:7b:b7:6d:6e:fd:ea:fa:35:
                    b5:26:1d:dd:cd:67:60:c1:d8:99:ea:74:53:47:67:
                    d2:4c:cd:bc:17:b7:7a:90:07:c5:30:70:d2:43:4f:
                    9c:cf:41:c3:e1:e3:dc:41:b2:6f:46:79:99:30:11:
                    ea:5b:dc:3d:f8:1c:3c:8d:ec:d4:06:f7:d7:08:b8:
                    92:fa:41:c5:63:44:f9:42:49:5f:be:c8:93:87:48:
                    d9:fd:2e:69:af:19:bf:59:29:05:7c:6d:9e:3e:0b:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F2:3D:E6:06:D9:96:3D:A5:D3:63:D7:2A:D6:01:A2:E2:64:0D:48
            X509v3 Authority Key Identifier:
                keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:df:e4:87:54:72:d5:5b:21:9f:2f:8b:ba:1c:66:98:c0:76:
         3e:20:18:b6:d4:53:0e:84:1c:1e:97:7b:f7:95:37:cf:09:38:
         b4:dd:f0:97:5e:09:a4:57:99:f5:de:a3:f7:24:2c:d0:59:c9:
         3b:cd:05:09:d6:50:ae:9c:8d:9d:db:ad:a7:e0:4c:27:34:40:
         42:53:6f:63:35:50:77:dd:54:9d:82:ac:7c:af:24:2c:07:e8:
         3e:97:6a:46:81:78:52:86:a9:f0:88:5d:9b:67:cf:e9:f4:a8:
         71:22:2b:15:68:e7:dc:0d:1f:72:0d:7b:3b:dc:2f:42:82:93:
         7f:3c:5a:73:63:22:9f:cc:a5:23:f3:15:7e:22:af:78:92:59:
         6e:f2:b6:5e:25:1d:39:d0:b1:bb:1a:be:c4:2c:6e:4e:07:f9:
         34:0b:42:6f:a8:4c:81:bf:27:42:f7:5f:f8:fb:e7:b8:6e:c3:
         ec:b0:33:48:90:f8:43:f8:e3:b2:7b:cb:d9:fe:38:40:e8:65:
         ed:f2:38:51:97:9e:d7:a7:50:b9:3d:88:a2:96:f4:2b:c7:1f:
         ba:96:67:e4:2b:35:db:08:69:71:ed:0f:c8:d6:63:17:04:a5:
         b9:ca:78:d8:52:26:ce:7d:f2:4d:05:85:48:74:3d:ad:4a:a2:
         7d:45:b5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:25 2025 by rpki-client