Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
File:                     5e_Rhp7q_m-fA8s0GGibywxpE3A.mft (raw, json)
Hash identifier:          J/U9wFdcnp/4WCHps6GoerpLUYwjmCOn/YEI+tSC1eM=
Subject key identifier:   E5:60:B8:0E:F2:E9:81:27:21:7B:51:65:04:5C:9F:58:F3:88:BD:D1
Authority key identifier: E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70
Certificate issuer:       /CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
Certificate serial:       019A4EF4269381663E714451DACCDD194744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
Manifest number:          1128
Signing time:             Tue 04 Nov 2025 13:00:14 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:14 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:14 +0000
Files and hashes:         1: 5e_Rhp7q_m-fA8s0GGibywxpE3A.crl (hash: G99kwnYzbs8cGeJCpDFRsCfrWhJlfqBhbFHC3HtCIbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:26:93:81:66:3e:71:44:51:da:cc:dd:19:47:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5efd1869eeafe6f9f03cb3418689bcb0c691370
        Validity
            Not Before: Nov  4 13:00:14 2025 GMT
            Not After : Nov  5 13:00:14 2025 GMT
        Subject: CN=e560b80ef2e98127217b5165045c9f58f388bdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:d3:f5:91:11:4c:46:70:e9:28:1d:65:1a:
                    43:61:80:15:d2:d9:0f:0b:53:fe:4e:c6:03:82:86:
                    59:89:2e:af:aa:f9:79:e5:8b:0a:d1:0f:e1:8f:9a:
                    cf:78:7a:ea:eb:a4:c8:00:e8:c0:d2:d5:84:30:fc:
                    11:a7:91:fc:1e:79:71:a2:2a:90:38:fa:d8:e0:7d:
                    39:05:3e:8e:ef:ce:25:38:85:52:98:14:95:cb:07:
                    17:f0:a7:56:cb:81:bd:10:ba:fb:08:79:93:17:28:
                    a8:e2:09:c4:6f:2f:58:49:ee:0a:2b:d7:cd:a7:05:
                    2a:b3:ed:10:70:8e:c7:b2:30:30:73:e2:d7:da:14:
                    6c:07:59:f4:a0:b6:59:a8:1f:90:a3:70:11:11:84:
                    cf:71:67:0b:72:31:66:f5:b6:91:c3:a7:80:00:42:
                    65:3a:93:78:d2:91:87:c6:23:a9:9d:f8:f7:7c:08:
                    19:82:2e:5e:db:c5:33:eb:2b:14:6f:27:e0:2e:57:
                    25:d8:41:da:5e:c3:13:fb:69:31:84:90:ef:f3:1c:
                    fc:46:7b:d1:df:79:ee:f4:b2:17:09:04:d8:e0:f6:
                    26:10:2f:25:b0:2c:14:47:17:09:a1:8b:94:4e:07:
                    48:af:a6:82:e3:61:e0:d7:2b:de:0f:96:56:45:ed:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:60:B8:0E:F2:E9:81:27:21:7B:51:65:04:5C:9F:58:F3:88:BD:D1
            X509v3 Authority Key Identifier:
                keyid:E5:EF:D1:86:9E:EA:FE:6F:9F:03:CB:34:18:68:9B:CB:0C:69:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e_Rhp7q_m-fA8s0GGibywxpE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b47bda-65b6-4a42-990f-024935ddb8c6/1/5e_Rhp7q_m-fA8s0GGibywxpE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2c:71:a4:15:2b:f7:09:4f:2c:e7:ce:d4:7f:d9:72:fd:8c:
         9b:ae:02:28:24:53:cc:52:5b:47:0c:05:85:3d:8f:13:2b:bf:
         c9:da:9d:6a:40:a4:7b:01:27:f5:e0:46:2a:5f:4e:13:86:ad:
         8b:e3:a5:c7:7b:b7:29:35:d0:59:24:94:64:30:8d:02:2f:79:
         72:a6:f4:43:90:12:27:ca:1a:57:ca:e9:5f:ee:d2:65:f3:ca:
         2e:bd:a7:33:40:a0:d4:e8:36:5b:c9:b1:15:2e:d0:52:64:54:
         c0:e6:2b:fc:33:7a:d3:c2:d7:98:86:6d:e4:bc:94:06:4f:7a:
         41:a0:5e:59:cb:2f:0f:f1:e0:b1:37:fb:0c:18:5d:27:52:a2:
         61:71:3b:09:98:0b:33:22:32:a3:7a:6b:f1:c6:e2:da:0b:11:
         54:52:de:38:fa:9c:39:e4:81:23:4d:fd:72:a8:ca:ad:c7:06:
         ff:c0:e0:72:bf:8a:60:04:b6:29:ad:98:95:8b:4f:e1:1b:f5:
         e6:3c:99:2d:c3:97:d6:04:5f:1f:ba:c2:9f:4c:df:42:ab:1b:
         23:80:be:86:17:df:0d:d2:5f:53:e6:aa:21:d3:68:60:f6:8b:
         4f:6d:31:13:ef:59:91:11:bc:16:47:3a:d9:83:60:58:c8:9c:
         0d:d5:c7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:30 2025 by rpki-client