Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
File:                     51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json)
Hash identifier:          iFHYPCzaqcTn/B7lPbnAqOeHGmB20myfLEWgo2KYEwY=
Subject key identifier:   64:99:2F:E4:1F:EE:9C:83:E9:E6:33:55:1B:2A:76:11:96:CE:7D:81
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Certificate issuer:       /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial:       0197B7EA9B3D8A9ACDDA8C072278CA102FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
Manifest number:          0550
Signing time:             Sat 28 Jun 2025 19:01:35 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:35 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:35 +0000
Files and hashes:         1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: By7u6SpH2RyINqPpo7XqMVfcCec+oWkzF8RADY3VoA0=)
                          2: Ylfj2CG1V0DaK4f8uH_BBUtoGWA.roa (hash: CAUuMYHSplNovMOYBe0Qjx/057sd/Jrw0wK6ui3RBo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:9b:3d:8a:9a:cd:da:8c:07:22:78:ca:10:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
        Validity
            Not Before: Jun 28 19:01:35 2025 GMT
            Not After : Jun 29 19:01:35 2025 GMT
        Subject: CN=64992fe41fee9c83e9e633551b2a761196ce7d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:a5:bd:4e:59:e7:92:1b:8a:15:d9:ba:e7:
                    a8:09:45:3b:4b:99:53:e2:c6:8f:ef:e0:f0:41:4a:
                    87:1c:84:3a:11:d1:11:c4:f9:3c:b3:57:4f:1f:1d:
                    7f:e1:18:09:40:08:7d:5d:17:db:61:4e:e6:76:f2:
                    3e:e1:4a:ad:81:43:d1:fe:cb:bb:3a:4c:60:f3:71:
                    5b:78:c2:74:78:2f:b3:56:61:b9:99:7e:ad:00:b0:
                    0a:52:7f:97:4a:c9:77:3b:ca:a9:ec:6a:c0:d5:d3:
                    8b:53:86:a2:f3:f1:1d:7c:35:02:ce:db:5c:de:03:
                    fc:9d:f0:02:ef:1e:28:9b:f0:82:a3:fc:ef:dc:ec:
                    88:92:9f:64:74:91:b2:4b:7c:a2:89:01:07:63:bb:
                    56:4f:76:9b:60:99:06:9b:5f:22:88:b4:ee:91:1c:
                    bc:34:d8:7d:d4:a6:25:81:5f:dc:09:f9:7f:3c:73:
                    87:00:08:51:24:33:10:5e:bd:f1:da:2c:f1:80:91:
                    f3:1f:a4:8f:61:b7:91:8e:cd:3d:8b:cb:3b:25:d0:
                    21:61:9d:5b:00:8e:e6:ce:fd:fb:71:70:5b:d8:da:
                    90:fd:fd:90:4a:6c:7d:87:07:64:07:e1:a1:f6:c4:
                    9c:e7:e3:c6:8b:b3:1d:fb:41:57:1c:63:fa:5e:da:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:2F:E4:1F:EE:9C:83:E9:E6:33:55:1B:2A:76:11:96:CE:7D:81
            X509v3 Authority Key Identifier:
                keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:68:2c:38:63:ab:59:04:ca:40:d8:45:b1:f9:47:b9:22:20:
         c6:9e:9f:ff:48:6e:59:ad:2b:63:10:05:e2:1d:88:3c:76:68:
         b2:eb:26:ec:37:92:79:c2:e9:f5:1d:b9:68:21:a7:f4:3c:a1:
         7e:90:4b:13:7f:4c:cb:d1:8a:98:21:f4:fe:79:e7:6a:45:71:
         24:12:d6:48:f6:9d:f4:4f:aa:af:d7:5a:18:f9:be:20:80:1d:
         56:6c:66:d7:ba:a8:2c:25:30:4b:d7:4d:e9:9e:13:80:d0:c5:
         69:9b:c6:b8:8f:aa:97:3c:b9:a1:6c:ba:c8:51:a5:23:ac:b0:
         66:2d:c1:cf:33:7e:0d:d7:0a:44:6c:0f:f0:80:bb:b9:2e:22:
         f5:c8:ba:80:0e:b3:0e:79:bc:c2:c6:0a:b0:51:da:78:89:57:
         da:fa:3c:39:d9:89:a2:d8:e5:a4:f5:b2:da:33:e2:8f:f2:2e:
         e9:00:e9:09:b5:3e:c2:da:da:14:8a:8b:41:d4:0f:48:48:6a:
         29:94:b7:e0:62:05:e2:97:0b:5a:05:0d:2d:25:5a:7f:56:b3:
         ca:45:bc:90:26:80:3b:8d:05:d5:0e:bb:e0:a1:5c:da:b3:91:
         8e:e9:95:44:d6:fd:98:21:39:34:ba:6c:ad:6f:f7:5f:5c:d9:
         8b:23:c6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:03 2025 by rpki-client