Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File:                     5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier:          s7xSsn23luOQ/Nrs+ooD60kWIF3/YOFtDL7igpsMX1w=
Subject key identifier:   60:DC:0A:E1:D8:9E:A9:EB:8A:2C:F4:1F:DF:44:C2:14:53:38:58:07
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer:       /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial:       0198D4E09EE9E5CD7E8E476444BE8EF50785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number:          0780
Signing time:             Sat 23 Aug 2025 03:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:27 +0000
Files and hashes:         1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: 6J2mPEcDTKVHMWWjgAU5sHi3wpJYyCAp6UGl6DxkSno=)
                          2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:9e:e9:e5:cd:7e:8e:47:64:44:be:8e:f5:07:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
        Validity
            Not Before: Aug 23 03:02:27 2025 GMT
            Not After : Aug 24 03:02:27 2025 GMT
        Subject: CN=60dc0ae1d89ea9eb8a2cf41fdf44c21453385807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:65:b6:14:ed:eb:c9:f2:01:2c:00:c4:00:
                    04:1f:a8:d1:f3:c1:48:71:e1:c4:6c:af:50:08:20:
                    5d:18:41:0c:9b:f5:18:61:80:1a:f0:5d:2a:2e:bb:
                    90:16:56:eb:de:74:3a:65:39:a3:86:ca:1a:bc:31:
                    bc:7a:b3:2b:f9:b2:a4:8a:7b:f5:e4:47:d1:78:7f:
                    9f:1d:07:fc:91:57:d3:bf:dc:d5:7d:30:72:66:49:
                    d1:63:2a:6f:c1:3a:e1:b0:3f:b1:2d:56:2e:43:11:
                    aa:44:4a:1b:43:73:98:21:a6:27:7c:c4:dd:10:43:
                    c2:ec:6d:0f:82:0e:a1:47:28:75:42:c9:16:60:de:
                    a8:83:9d:b9:96:54:a6:ef:1d:15:66:fa:70:36:87:
                    3e:da:9a:7c:b1:a4:5b:ce:34:00:b6:cf:47:20:bb:
                    1c:16:ee:15:36:86:c5:2b:a1:dd:55:0f:d3:13:28:
                    45:f5:f7:46:38:e1:ca:2e:1f:86:68:37:23:95:e5:
                    90:a1:22:ce:36:3b:62:3d:45:57:06:69:30:fb:e6:
                    27:62:66:84:ed:f3:13:8a:6a:45:ef:02:5c:dd:d8:
                    ab:1a:f2:29:81:cd:cb:b0:3d:f3:12:12:f4:c8:c4:
                    5f:18:65:6e:42:72:71:7d:ab:5e:bd:c5:dd:eb:a2:
                    b5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DC:0A:E1:D8:9E:A9:EB:8A:2C:F4:1F:DF:44:C2:14:53:38:58:07
            X509v3 Authority Key Identifier:
                keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:6d:5e:4b:f4:06:85:a0:45:cd:f4:4a:e1:61:88:1c:0d:af:
         8d:5b:01:ac:c8:14:79:ec:65:67:b1:e2:20:33:5f:7c:10:06:
         db:b5:52:51:68:de:c6:0e:91:4d:f1:4b:7e:5c:3a:4e:7a:76:
         8f:c1:10:05:4c:20:e5:1a:b9:b2:6f:72:98:30:12:ac:51:ea:
         5c:62:14:3f:40:55:43:5e:58:16:00:e3:b8:4c:48:4c:23:3b:
         db:33:9d:a7:2a:67:aa:81:11:d7:76:f8:d9:49:6b:d1:d9:f8:
         b2:b7:5e:b5:7c:74:e4:58:5b:79:86:19:06:ea:b6:06:9b:2e:
         cd:24:7c:ad:14:a6:6e:f2:eb:9b:e0:33:88:4a:c6:26:b6:d5:
         8a:6a:39:1a:2d:f2:c6:2e:96:36:d9:18:d5:4c:f6:5c:e1:f6:
         76:8b:bc:75:4d:dd:dd:52:11:0a:2a:d6:d0:21:ef:f8:f2:92:
         b7:22:a2:43:5f:fd:3f:b2:2d:fe:b5:09:a3:47:7a:4e:4f:e7:
         7d:ac:b4:e2:ed:96:17:da:bc:ba:65:66:17:8a:4a:5d:32:20:
         be:45:96:28:83:52:17:c8:3e:3e:56:b1:54:d0:c7:c1:9c:28:
         d3:ab:80:5a:9b:05:fc:b7:ed:d3:13:ac:29:26:32:98:d4:97:
         62:03:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:19 2025 by rpki-client