Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File:                     5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier:          Tb71aIUlFWQGLNyrWqw8rx0oSy+8LtuZn4v/8bbHxBM=
Subject key identifier:   EB:A4:C7:BC:E6:61:28:AE:E3:01:4E:0C:E9:7B:A9:B0:ED:51:E1:B2
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer:       /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial:       0196D2F6005737FCAFEFA883A3E5D1CC5411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number:          0540
Signing time:             Thu 15 May 2025 08:00:59 +0000
Manifest this update:     Thu 15 May 2025 08:00:59 +0000
Manifest next update:     Fri 16 May 2025 08:00:59 +0000
Files and hashes:         1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: /I5CS6CNSdBuIJQ4YpPadx85AYTa49VONxT9u5iWgno=)
                          2: 7C47IJ6PzEDLOdL0QvIP0xqQesA.roa (hash: ISA+HvV+2Juv2ntFCKzEfQOpWZqwF1hA9L7d5xR7Wl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d2:f6:00:57:37:fc:af:ef:a8:83:a3:e5:d1:cc:54:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
        Validity
            Not Before: May 15 08:00:59 2025 GMT
            Not After : May 16 08:00:59 2025 GMT
        Subject: CN=eba4c7bce66128aee3014e0ce97ba9b0ed51e1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:56:a3:52:27:33:3d:63:8b:20:82:42:3a:
                    b6:21:c5:17:05:c2:5c:ee:21:47:25:66:d6:f5:c8:
                    d8:b1:10:f9:91:1e:68:ec:bf:8e:49:9a:68:82:ee:
                    39:59:13:aa:b5:e4:4d:95:5f:87:22:6b:1c:83:2d:
                    67:77:28:e4:90:1a:8a:5c:f2:28:fc:48:bf:fb:e7:
                    ba:96:c7:d3:f6:70:4d:74:32:e4:12:81:f1:f0:91:
                    44:3d:23:05:fd:6a:1e:52:e1:28:4f:78:a1:c9:69:
                    11:ad:e5:1a:eb:58:9f:c1:92:ec:af:17:5d:76:0b:
                    7d:7f:1b:2f:bf:95:16:24:61:8f:7a:e3:d7:95:78:
                    a2:e4:3a:c5:ac:97:34:f3:4a:1e:1f:b1:6c:3a:a5:
                    8b:5b:5e:43:0b:49:42:71:e8:76:05:2f:78:06:2a:
                    f1:26:a2:95:b6:de:02:1a:fe:18:6f:35:b5:86:17:
                    e0:37:ea:54:5b:20:71:a8:09:a7:0b:bc:d9:af:7d:
                    5b:5a:0e:28:a8:1c:f0:77:90:16:ea:66:a2:30:05:
                    d3:75:67:0c:dc:8d:39:b5:de:94:2d:b3:03:7a:c9:
                    63:cd:01:88:e9:96:43:e4:49:06:2b:20:eb:9e:bb:
                    bf:e9:5c:8b:71:06:f1:2e:7a:bb:50:d3:49:97:ba:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A4:C7:BC:E6:61:28:AE:E3:01:4E:0C:E9:7B:A9:B0:ED:51:E1:B2
            X509v3 Authority Key Identifier:
                keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:65:15:9a:d4:83:b2:32:63:8a:e8:08:05:78:f4:fd:71:24:
         51:bd:69:1d:1c:39:b5:91:40:82:9c:91:f8:06:a6:78:c3:cc:
         84:da:6b:61:b3:77:d4:09:b2:a9:aa:1a:13:b3:ea:c5:de:04:
         2c:9c:8f:89:2d:0d:72:08:d3:76:a5:f5:96:97:cc:02:96:52:
         2e:a9:40:b4:d9:15:43:e8:48:f4:dd:a2:aa:f4:3d:7a:b0:29:
         f5:2e:e0:ca:78:44:82:4e:f2:e2:c4:6d:ba:52:3e:7d:5d:73:
         32:b9:77:00:b3:f0:b5:1b:a3:c0:69:51:80:da:ea:fa:3e:f8:
         8e:ad:2e:5b:55:3f:ee:ff:c9:70:a8:73:34:15:26:83:4f:b4:
         9c:94:3f:da:f5:9f:8b:74:73:c0:a0:4d:b9:7e:7c:84:2d:fb:
         a8:b7:7e:6f:90:79:c4:d2:ba:6e:87:8a:a3:af:7e:d2:2d:10:
         19:80:5f:64:8c:40:f4:28:fd:64:52:18:cb:a9:68:66:78:a1:
         87:b2:ac:19:fc:46:aa:82:dc:a6:ec:71:a3:2e:5f:79:a8:4d:
         49:36:3f:76:4a:20:f0:00:cc:e6:17:c9:dd:c2:4a:35:a1:50:
         0a:79:b6:3a:1d:7a:b9:d0:5c:08:93:b2:c9:73:45:28:61:4b:
         48:82:e0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:11:57 2025 by rpki-client