Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File:                     51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier:          kccB9rPazEm3dPv6VcuAa9AoLKiXAJNVDBeWaI9k6/k=
Subject key identifier:   F9:95:2D:5B:CD:3C:4F:1E:A4:BB:C3:11:92:90:7E:A4:34:6B:9D:FD
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer:       /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial:       0198D54E7773AD7BA5B7EB8E2653451A4B7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number:          0975
Signing time:             Sat 23 Aug 2025 05:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:26 +0000
Files and hashes:         1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: 1CNywPU+5xObtxsRF3Gleu7QUELQ/qG/mUDH3Pk7R8I=)
                          2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:77:73:ad:7b:a5:b7:eb:8e:26:53:45:1a:4b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
        Validity
            Not Before: Aug 23 05:02:26 2025 GMT
            Not After : Aug 24 05:02:26 2025 GMT
        Subject: CN=f9952d5bcd3c4f1ea4bbc31192907ea4346b9dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:63:1c:c2:bb:5a:af:9b:a6:7f:a1:f6:34:
                    9e:81:67:85:ef:f3:07:99:a7:6b:2c:0c:66:de:04:
                    84:74:88:c4:a3:3a:39:90:3a:a3:f3:94:7d:fd:7b:
                    72:7d:16:22:96:c8:80:fb:21:32:3b:b8:69:a9:aa:
                    45:4a:27:e8:22:c9:74:3a:43:8f:4b:7a:78:9d:88:
                    50:1b:ff:71:09:2c:c9:d8:07:6a:ba:df:d4:b0:a5:
                    ec:5e:c3:d0:04:2b:ce:a9:3f:ce:a1:69:94:b6:4e:
                    c8:b0:97:f9:e9:95:40:ca:48:33:01:7d:b0:48:f2:
                    fe:b6:90:5e:fa:aa:05:7f:66:44:06:a9:1b:d9:9b:
                    d7:42:9a:77:e0:9e:32:82:01:0d:a6:2c:37:8d:ab:
                    b4:e9:dd:39:2d:b6:76:03:c4:9a:4c:c8:65:e4:66:
                    6c:c3:45:4e:5f:a7:75:11:d3:b8:6d:63:23:d6:9c:
                    61:3e:a1:18:3d:b6:81:8a:14:b9:57:86:68:c7:e5:
                    d0:2e:00:9f:4e:a8:ec:cf:ed:7f:e8:3d:cd:0b:8b:
                    30:c5:42:bb:fa:23:bd:dd:fe:c4:ed:21:64:b8:a2:
                    68:9c:19:d0:ed:f0:0c:91:00:ce:93:d6:ac:1f:35:
                    0a:1f:3e:3f:3e:b5:bb:05:9d:71:00:9a:84:1f:f6:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:95:2D:5B:CD:3C:4F:1E:A4:BB:C3:11:92:90:7E:A4:34:6B:9D:FD
            X509v3 Authority Key Identifier:
                keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d8:28:95:82:08:65:18:ab:08:d8:b5:25:a8:f7:9b:0e:65:
         9e:04:a4:24:ed:66:1c:f4:17:5e:22:1b:8a:04:6d:01:7c:f9:
         be:71:c2:0b:b7:4f:3d:c4:7f:1e:d5:aa:57:90:62:1f:4d:c9:
         65:1c:60:b1:cb:9e:d9:3a:a4:55:5a:a3:d4:ab:50:1e:4d:9f:
         94:66:d1:b3:41:fb:ae:de:63:2c:b4:c9:bd:ea:41:b8:5e:dd:
         87:9e:02:dc:cb:bc:c8:79:3f:7a:16:64:79:da:97:f8:1a:5e:
         ce:f7:25:a1:94:2c:6e:63:97:ca:1f:d8:42:07:02:88:db:76:
         29:35:84:45:79:5d:fb:fb:bd:bf:47:f5:3c:dd:45:ac:91:f3:
         b2:56:a1:c6:b1:b5:b5:b0:88:4f:d0:01:b4:62:b6:a0:89:8f:
         d1:af:b1:83:cb:f3:c1:d8:10:0f:87:3e:05:af:19:70:e5:6f:
         e9:f4:30:96:75:4d:44:27:08:ae:b7:92:fb:12:75:40:64:09:
         5a:3f:ea:97:e3:6d:ed:47:3e:27:63:e3:ae:9f:01:31:53:b7:
         47:92:93:27:29:aa:dd:2c:9d:97:01:aa:ae:9e:12:b0:11:09:
         fb:f1:e0:c0:fb:9b:c3:5e:fb:70:e2:d8:25:64:85:49:28:24:
         8d:0e:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:54 2025 by rpki-client