Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
File:                     V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft (raw, json)
Hash identifier:          MJyy+1sWAoK+432kzwPAytAm/O8lLyuwToBLjJkdiEQ=
Subject key identifier:   11:0C:3F:32:CD:7B:92:CB:DB:17:4C:D4:E5:B6:69:1E:83:8B:58:DD
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Certificate issuer:       /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial:       0197B6A1EE58CF58D69C4E34EE7375CC7649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
Manifest number:          13FD
Signing time:             Sat 28 Jun 2025 13:02:34 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:34 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:34 +0000
Files and hashes:         1: UZXaw9NBRAkE4GO4DgWv40vOCU8.roa (hash: HEP1k7kYKlUJdDFLP800Gto7Orwjw4zWY5tnNYDqwYE=)
                          2: V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl (hash: CCRxxNs7AohUEbT4ta/CED91Arr0dNDjNYnmeWETbQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:ee:58:cf:58:d6:9c:4e:34:ee:73:75:cc:76:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
        Validity
            Not Before: Jun 28 13:02:34 2025 GMT
            Not After : Jun 29 13:02:34 2025 GMT
        Subject: CN=110c3f32cd7b92cbdb174cd4e5b6691e838b58dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:55:cb:72:d4:2c:9b:81:d4:54:0c:a9:54:
                    c6:56:b1:b4:ee:b7:9e:e3:89:58:dd:34:40:72:01:
                    5f:d8:3c:3e:07:27:96:46:d3:ca:31:de:eb:06:a4:
                    07:04:4c:05:76:35:38:cf:88:ee:b0:b4:96:22:74:
                    5e:d6:aa:1e:50:fe:fb:9b:ff:e1:60:1b:eb:5d:a0:
                    5e:3d:dd:e3:aa:f9:60:f1:ba:99:d8:74:c1:f8:07:
                    a2:56:d3:48:35:62:6e:c4:6e:9d:f9:be:41:c3:0f:
                    0d:5d:7c:b4:8b:53:ce:d5:b2:0a:dd:62:b2:3d:b3:
                    fe:a0:b8:b8:3b:b0:3b:a3:6b:80:00:c1:ec:8a:85:
                    34:e4:24:82:6b:26:62:ff:4c:3c:d5:6e:66:85:97:
                    80:5e:d6:1b:d5:fc:19:fb:4f:74:c2:54:07:0c:2e:
                    54:6c:2b:18:ac:d9:1d:d3:ca:2a:0f:5b:58:6d:6c:
                    b0:da:ea:bc:18:61:0e:a1:19:f8:4c:f4:0f:5b:95:
                    24:37:a6:61:fc:d9:05:90:c5:64:23:04:4b:e2:3e:
                    2f:80:41:77:ce:3e:ef:93:e6:9a:5a:a5:50:31:30:
                    bc:e7:03:16:ca:d5:15:57:49:a9:cd:eb:41:10:d6:
                    cc:17:0f:b2:09:9a:a2:76:01:4f:5b:34:44:49:6c:
                    b3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0C:3F:32:CD:7B:92:CB:DB:17:4C:D4:E5:B6:69:1E:83:8B:58:DD
            X509v3 Authority Key Identifier:
                keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8a:2d:0b:8d:c3:12:e9:6a:20:4e:24:e8:4c:42:16:74:fc:
         cf:65:1c:75:42:6c:e1:2f:83:ef:80:62:13:09:94:49:e4:51:
         ec:0c:e0:c5:f5:49:47:25:6c:48:6a:4d:5c:9b:20:e0:8e:7e:
         70:c1:e1:3b:c0:6f:30:9d:63:9f:89:47:63:94:eb:bb:c0:c1:
         4e:36:4d:f5:f8:7a:4b:3a:11:54:80:9a:b4:29:01:8c:2c:c4:
         a6:c5:65:4b:db:b1:73:ea:be:e1:c5:c2:95:90:20:44:2c:17:
         ba:f5:ee:42:59:63:ab:0a:12:5b:4b:65:8c:a2:50:68:c6:10:
         b8:62:2d:2d:72:c1:c6:d3:6b:a6:27:42:bf:55:37:27:7a:12:
         ab:b8:55:f8:bd:ab:5c:da:39:65:40:6b:2b:2d:70:1d:b3:4e:
         9c:f6:c0:ce:55:91:40:22:e1:3f:ea:79:fd:4e:f7:bd:52:6e:
         cf:41:f8:3d:e5:ea:ab:a3:24:1b:84:cf:44:f7:18:4f:f9:e4:
         e5:35:0a:a1:15:19:a2:00:ad:a0:84:a1:73:19:d1:9f:05:c4:
         b8:03:4c:bd:4e:04:59:94:06:52:6e:68:cb:cc:db:63:89:e2:
         0b:f2:77:13:e4:1a:10:d3:21:78:5e:72:22:9f:f9:46:e5:7b:
         15:63:c2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:02 2025 by rpki-client