Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File:                     5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier:          JnVH9cZRV7IhDwQlXI00ZNO04fL5tgaNC+ZVajGWTmM=
Subject key identifier:   C7:56:26:15:5F:61:F8:D5:0D:50:55:6F:2A:56:15:50:3E:9D:70:B6
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer:       /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial:       0198D5F1ABA19D2B482DF872E5C547A76B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number:          119F
Signing time:             Sat 23 Aug 2025 08:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:41 +0000
Files and hashes:         1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: GWtwS/uwBY7mtU4DDV2FrcWzVa/RdBQSbKwsd4wGLZU=)
                          2: Zi2_IuYzlaIRtsk8-q-uBBtZEgI.roa (hash: VlhL3UjyA76HwKj7J4uOubCMpMfYtpjO6fp5e/1c/W8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:ab:a1:9d:2b:48:2d:f8:72:e5:c5:47:a7:6b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
        Validity
            Not Before: Aug 23 08:00:41 2025 GMT
            Not After : Aug 24 08:00:41 2025 GMT
        Subject: CN=c75626155f61f8d50d50556f2a5615503e9d70b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:b0:cb:ad:31:5e:f5:48:ac:c3:73:12:c6:
                    18:52:19:39:11:39:3c:99:0b:0f:b1:5a:83:4f:ce:
                    2b:89:fd:6b:66:98:8d:8e:cb:6f:27:5b:51:e5:ad:
                    eb:9b:e3:4b:be:2c:23:8a:90:a5:d5:16:6e:1a:45:
                    3a:ff:64:dd:2b:7f:bb:b8:50:13:c5:85:3e:b0:46:
                    6b:2a:f3:03:2a:e3:34:59:b5:e5:9d:f4:a8:35:80:
                    cb:2a:26:7f:48:9f:02:0e:7c:82:02:92:a9:13:cf:
                    b6:b3:25:c1:5f:88:5c:72:95:63:2f:59:b2:70:e2:
                    82:ad:eb:d5:96:1b:0b:76:47:3c:e3:a7:e1:1d:72:
                    d9:f8:f6:7b:3e:26:56:28:68:9f:45:31:05:59:2b:
                    26:66:0e:58:11:4b:3e:96:68:a7:73:ab:05:8f:19:
                    f1:2c:ff:95:8a:a4:6b:bc:03:e4:98:b2:34:3a:36:
                    67:50:e2:4a:34:cd:79:31:81:15:d3:b0:ad:68:b3:
                    91:eb:8a:03:61:b8:25:87:2c:dd:b6:73:13:8b:79:
                    42:5e:7e:6e:64:d7:3e:fe:02:1c:b3:26:8e:59:07:
                    74:2f:54:32:e8:99:b7:1a:d9:d3:db:83:67:97:ad:
                    ee:58:75:f1:ea:36:60:dd:13:2b:bb:f5:18:49:d2:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:26:15:5F:61:F8:D5:0D:50:55:6F:2A:56:15:50:3E:9D:70:B6
            X509v3 Authority Key Identifier:
                keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fa:52:9c:7e:b4:1b:d8:31:fc:d6:c2:c2:0a:85:89:9c:33:
         51:22:ef:0b:9a:eb:89:c7:f0:2c:67:ec:8f:d7:ae:09:92:7e:
         9b:46:63:da:fc:02:cf:6a:ea:c6:1c:ee:66:5c:74:70:ec:4c:
         90:4d:ab:9e:75:86:fb:67:36:9f:78:1b:ce:c6:17:52:30:c1:
         86:91:0d:74:83:9f:79:57:bf:63:a4:89:f9:57:e6:0e:f3:fd:
         3a:c5:0d:e3:ea:29:04:75:df:6d:4f:48:f8:39:fc:b1:2a:ef:
         f8:a6:ef:08:dc:3d:a9:5d:5d:4a:a4:86:8c:a3:8d:ca:43:2b:
         e6:9a:09:d3:c6:9b:5d:2b:29:57:ec:2f:9c:37:67:e8:1e:38:
         d5:b7:74:28:1e:06:8f:53:13:12:4d:96:07:7b:e7:ea:ab:f6:
         79:cb:0b:3b:e4:b8:fe:08:86:7c:df:d4:15:5d:d2:f3:70:7e:
         cc:b0:91:18:06:c7:5a:a9:2d:4c:af:5e:ac:fd:e5:68:fb:c4:
         b4:79:b7:0e:4a:bd:54:d5:21:f2:12:27:8d:f9:a3:9f:fc:bf:
         9e:da:1d:dc:74:dc:1a:e1:30:b9:d4:27:54:db:7b:51:f6:26:
         10:8d:d5:d0:ad:04:74:7c:65:07:23:5b:0b:32:ab:fc:dc:76:
         61:01:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:06 2025 by rpki-client