Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.mft
File:                     F5--gq_LTlTH1JcSOlyDcRTFcWI.mft (raw, json)
Hash identifier:          Pzh0F+s2sMZov7XJ3tD48dcdyT2h2SekvaUn3ouXRhs=
Subject key identifier:   23:2F:7E:48:6C:15:D8:54:B5:C6:CA:DE:EC:E3:6A:E0:4C:2D:23:E0
Authority key identifier: 17:9F:BE:82:AF:CB:4E:54:C7:D4:97:12:3A:5C:83:71:14:C5:71:62
Certificate issuer:       /CN=179fbe82afcb4e54c7d497123a5c837114c57162
Certificate serial:       0197B6A11A29BF7E7B490D0A0692B1853C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5--gq_LTlTH1JcSOlyDcRTFcWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 13:01:40 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:40 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:40 +0000
Files and hashes:         1: F5--gq_LTlTH1JcSOlyDcRTFcWI.crl (hash: EAy1Qj1Zf9KHUOR0Ru/ihikHnwVJhsI5Xf5UY75gyQ8=)
                          2: GQa1KY4OcnJ2kHAqD-Cv1b2a-zA.roa (hash: 7NefviQlJAqTcxFHUyy+1ciw9lf4U6rZucgV8KCZKL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5--gq_LTlTH1JcSOlyDcRTFcWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:1a:29:bf:7e:7b:49:0d:0a:06:92:b1:85:3c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179fbe82afcb4e54c7d497123a5c837114c57162
        Validity
            Not Before: Jun 28 13:01:40 2025 GMT
            Not After : Jun 29 13:01:40 2025 GMT
        Subject: CN=232f7e486c15d854b5c6cadeece36ae04c2d23e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:00:7f:15:7a:de:ff:5b:31:8b:b2:7d:a5:98:
                    1b:39:14:f8:c6:7a:e4:44:1b:42:75:e4:07:7a:19:
                    94:9b:8b:ee:50:4a:f7:28:02:05:4b:5b:6a:27:20:
                    2a:9e:f8:f8:a7:96:2c:05:3e:31:9f:89:bc:fa:c8:
                    91:13:2a:65:ee:60:27:87:2b:6f:f0:96:ec:4b:48:
                    49:ba:04:86:d2:cb:11:d9:ba:65:25:a3:14:ef:64:
                    c5:55:6d:18:68:d5:ac:7f:d8:31:51:29:d5:c8:43:
                    fd:75:62:0e:48:00:03:33:c3:b5:64:c3:92:2c:96:
                    c9:98:ed:97:68:f1:a0:c7:af:73:90:81:a5:e6:46:
                    ab:bd:65:21:25:74:22:f2:6a:be:53:87:64:92:74:
                    13:1f:f1:87:27:4e:d7:1b:91:b9:32:1b:c6:63:de:
                    c0:e0:7d:51:05:17:5a:5d:36:25:3d:a9:77:f8:a2:
                    59:6e:eb:be:3f:33:80:9e:1a:a2:a2:94:ca:61:cd:
                    40:6a:fa:29:e8:6d:56:1c:81:80:34:fe:89:5c:2f:
                    99:33:6c:40:02:ca:58:a8:7c:df:a7:a5:34:51:a0:
                    8c:87:b6:90:57:1a:84:2c:19:4d:9f:e4:c8:f4:de:
                    c1:c7:68:fa:7d:59:c8:b3:3a:d7:09:eb:98:ca:db:
                    81:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2F:7E:48:6C:15:D8:54:B5:C6:CA:DE:EC:E3:6A:E0:4C:2D:23:E0
            X509v3 Authority Key Identifier:
                keyid:17:9F:BE:82:AF:CB:4E:54:C7:D4:97:12:3A:5C:83:71:14:C5:71:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5--gq_LTlTH1JcSOlyDcRTFcWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccc1cb-0721-4542-9d65-7e610bab8178/1/F5--gq_LTlTH1JcSOlyDcRTFcWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f5:d9:01:18:bc:b4:e6:99:36:64:5c:91:dd:97:85:78:5f:
         ad:9a:ae:de:a7:fa:c7:40:62:b0:00:aa:a9:78:ef:c3:96:88:
         16:5a:8f:ab:47:dc:0d:cd:66:aa:d5:c2:35:88:19:d6:05:3c:
         2b:b4:c2:b6:42:c3:e4:fc:51:c1:a9:2f:25:58:f1:4b:52:c1:
         d6:06:b0:25:39:84:fa:6c:29:33:5c:51:58:b3:4c:26:93:97:
         84:c2:b0:51:d9:f9:19:72:b7:1e:1f:bd:b1:d2:0c:1c:9d:4e:
         85:03:27:25:d6:25:75:10:f9:30:4b:89:4d:11:b1:9c:0b:db:
         0e:aa:e1:96:bd:9f:f3:47:da:42:4e:b9:90:03:0a:fd:74:f1:
         58:0a:cf:95:25:bd:89:15:1a:82:5b:c2:6e:c1:2a:fd:87:ee:
         c8:51:e9:65:e9:27:75:fb:91:38:29:cb:e7:64:da:fc:fa:e9:
         17:2a:04:5f:ae:e3:ee:b0:e5:07:cc:f1:05:cc:52:3b:9e:c3:
         ff:2c:b4:89:a6:e5:87:c8:87:8c:b1:ee:92:90:da:86:2d:b2:
         59:15:2b:7b:3b:2f:ea:5b:3c:8f:79:55:90:2e:e5:8c:72:1a:
         6a:55:ec:b3:8e:ef:44:7b:c8:0c:9c:41:02:20:0e:73:f8:63:
         d5:a4:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:12 2025 by rpki-client