Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File:                     5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier:          0rU9ehEaiZRFhbcKcWiPl6n8MtgdLL9J2kEDFCzw7fI=
Subject key identifier:   57:FD:44:81:03:3A:63:CD:07:02:CE:54:72:73:54:D6:6A:4D:32:B5
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer:       /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial:       0196B4B40EFB43AFC8D67C4A7E60A2C42495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number:          05DC
Signing time:             Fri 09 May 2025 11:00:21 +0000
Manifest this update:     Fri 09 May 2025 11:00:21 +0000
Manifest next update:     Sat 10 May 2025 11:00:21 +0000
Files and hashes:         1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: Gt6N+zZ4z6UVY6knXgKVuq1F2QmHndwBFOIM0CQh8GE=)
                          2: d099hTA9N0rBX0a4mIMTtvx7dLM.roa (hash: LT02ny7o04CIcPy2ptlO2f83f/uDQvGL+KruqdAn2tw=)
                          3: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (hash: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:b4:0e:fb:43:af:c8:d6:7c:4a:7e:60:a2:c4:24:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5164534979e60a564701232b2e5200889542606
        Validity
            Not Before: May  9 11:00:21 2025 GMT
            Not After : May 10 11:00:21 2025 GMT
        Subject: CN=57fd4481033a63cd0702ce54727354d66a4d32b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:34:fe:7b:58:16:ef:4a:08:e9:46:ef:a5:
                    60:91:14:cb:84:06:f0:bd:b7:2a:be:ae:36:25:02:
                    3a:0e:8e:07:3d:d4:4a:a9:7e:65:95:e8:55:97:fb:
                    b2:a7:56:84:31:7a:90:03:78:2c:c1:86:21:e5:a5:
                    9f:63:ae:f1:c9:3e:b5:4c:70:bd:0e:e0:c0:7d:62:
                    a0:25:75:be:5c:4f:bc:f4:86:7e:ff:f9:41:77:9f:
                    f9:48:76:56:42:d8:27:93:0f:e5:a0:f6:85:33:a8:
                    2c:d0:19:47:28:a3:08:03:0e:ad:d7:26:2d:e8:9a:
                    e1:e8:8b:5e:a8:14:59:4b:3d:1c:c6:04:56:8a:88:
                    40:be:13:00:0a:39:b1:29:61:72:0f:6c:b7:97:5a:
                    bc:3a:1a:32:5e:f2:db:7e:af:48:14:e3:b9:23:84:
                    b8:2c:b3:11:19:93:ac:c0:66:00:75:f6:77:21:78:
                    b7:c1:35:3f:d7:69:17:43:76:71:aa:45:80:8b:fe:
                    0a:a8:cb:7e:fc:9a:67:ce:69:2b:b9:08:9d:46:b0:
                    06:08:68:a4:c7:1b:7f:22:e5:39:f2:f0:63:33:27:
                    b3:37:5e:fc:0f:38:9f:48:9f:f5:61:09:f2:b1:d8:
                    f4:23:6d:5b:af:d4:6f:f6:7d:a6:30:3c:8a:73:5e:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FD:44:81:03:3A:63:CD:07:02:CE:54:72:73:54:D6:6A:4D:32:B5
            X509v3 Authority Key Identifier:
                keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:98:64:e5:29:d4:35:01:73:98:7c:82:af:0f:90:16:23:dd:
         e9:73:19:f6:78:90:21:da:eb:84:23:22:13:66:12:6f:92:af:
         85:9d:bf:be:9d:cd:81:5a:4f:1d:12:53:ce:c5:15:26:af:25:
         11:0c:03:e4:b7:49:6f:81:1d:3d:0c:54:6d:80:01:8b:a9:7c:
         11:f4:da:a8:91:24:c1:41:e6:62:7f:c0:3b:26:18:ae:e9:f0:
         88:b7:53:7d:9d:55:47:12:e5:eb:f3:e3:6e:74:91:29:a1:44:
         e9:14:d3:96:e1:16:04:40:f5:4e:e9:05:ca:0a:f2:40:42:fb:
         1a:56:45:f4:28:8f:bd:cd:59:2e:db:ab:a4:5c:58:aa:72:c2:
         6c:ad:08:1e:48:10:ed:fe:6e:90:0f:7e:f9:f7:4e:db:3d:ec:
         ad:d3:dd:35:a4:16:05:0c:d9:2f:29:a4:a9:4b:0f:fc:fd:09:
         b7:9c:c4:d9:37:76:f4:21:28:60:4c:2a:8d:c5:43:93:a1:61:
         70:01:15:57:05:ee:35:c3:da:35:ab:0d:4f:73:d2:af:ca:03:
         c5:f1:91:53:ce:d0:70:61:1b:cb:1a:81:bd:7e:38:e5:50:57:
         1c:b3:5e:84:72:91:92:07:e1:d8:77:7a:cd:00:3f:6f:f5:2c:
         6f:8d:da:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:00:53 2025 by rpki-client