Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
File:                     5cfDmlkS3cIen2tRmJZyV2ISeDM.mft (raw, json)
Hash identifier:          NfL9EDLBAEUa90vZxKhEpg09xUkpa/D/rAMrAOgrGrg=
Subject key identifier:   50:D6:E6:EB:20:40:C4:B1:10:0F:97:2F:C8:21:79:02:89:C4:A2:F7
Authority key identifier: E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33
Certificate issuer:       /CN=e5c7c39a5912ddc21e9f6b519896725762127833
Certificate serial:       019770E342724E33A19140737E55BCB9F730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
Manifest number:          010B
Signing time:             Sun 15 Jun 2025 00:00:31 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:31 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:31 +0000
Files and hashes:         1: 5cfDmlkS3cIen2tRmJZyV2ISeDM.crl (hash: y513Vjl+TwSRw9Xq9hUUNYNY1oi1ci75fTr62LeFnIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:42:72:4e:33:a1:91:40:73:7e:55:bc:b9:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c7c39a5912ddc21e9f6b519896725762127833
        Validity
            Not Before: Jun 15 00:00:31 2025 GMT
            Not After : Jun 16 00:00:31 2025 GMT
        Subject: CN=50d6e6eb2040c4b1100f972fc821790289c4a2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:67:73:4a:37:14:8f:6c:37:be:ff:1c:ef:
                    80:33:e1:54:86:a2:15:97:bc:f3:5e:f0:ee:e2:f6:
                    62:7c:ed:c1:9e:4b:6d:cf:33:a2:3a:08:2b:7e:fa:
                    52:e6:19:cf:2f:37:cb:e2:a1:2c:d6:76:19:31:20:
                    fc:87:36:d0:3d:1e:6e:ef:2d:4c:66:4d:cc:d0:c0:
                    53:b8:4b:15:82:e2:88:a3:f8:10:22:30:01:7a:bc:
                    ff:91:d8:28:e3:0f:74:c4:b5:90:10:81:8a:dd:ff:
                    13:6e:2d:8a:ff:dd:a4:60:2e:af:9a:9d:bc:a0:5a:
                    6a:4e:90:65:37:c3:a9:d9:0e:4a:45:2a:0f:74:80:
                    52:47:dd:c9:f0:a2:02:cb:1a:0f:5a:77:ae:78:66:
                    7e:6b:5a:5c:6c:28:b5:73:b0:ad:31:91:e1:a8:f1:
                    fc:74:02:dd:30:5e:55:c2:34:0d:6c:66:11:e1:02:
                    57:af:a9:c0:b8:36:75:cc:d6:86:38:8b:b4:3e:65:
                    b2:f2:56:25:96:ad:7c:29:3b:ab:4f:85:ae:66:43:
                    01:1a:ea:9a:3e:4a:2b:36:e6:8d:ea:9a:87:79:fc:
                    85:31:74:dc:1f:8c:31:53:bf:af:04:1a:8e:13:63:
                    ff:28:1b:06:dc:ec:67:3b:c0:3e:1c:8d:e4:9c:01:
                    25:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D6:E6:EB:20:40:C4:B1:10:0F:97:2F:C8:21:79:02:89:C4:A2:F7
            X509v3 Authority Key Identifier:
                keyid:E5:C7:C3:9A:59:12:DD:C2:1E:9F:6B:51:98:96:72:57:62:12:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cfDmlkS3cIen2tRmJZyV2ISeDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/10af83-08f5-4919-ba1d-38f864a34b78/1/5cfDmlkS3cIen2tRmJZyV2ISeDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:62:f9:e2:90:97:85:1f:69:24:4d:2e:e1:b3:7f:78:42:b1:
         1c:6f:2b:1d:6f:6d:44:40:5f:f7:a6:84:cc:fb:51:94:f7:7b:
         57:77:4f:dc:76:68:91:01:ea:d6:24:e8:8e:91:af:3e:e8:3d:
         af:95:ad:25:df:1b:d2:2a:e2:3e:d0:7c:46:90:03:e2:03:c1:
         4f:08:7b:d9:09:6e:d3:9e:58:21:bd:d4:9a:62:e0:dc:ee:58:
         74:f9:a3:ec:1c:9b:4c:e4:6d:a3:fb:31:8c:1d:00:da:cf:5e:
         11:78:4a:ac:9f:37:b7:76:8a:26:bb:0b:12:4e:6b:e1:a0:b6:
         12:a5:8e:c2:35:74:e4:30:fd:9e:3c:e2:d6:dd:ce:a3:6d:56:
         32:1b:e6:a4:94:8b:6f:21:fe:1d:ba:b5:a7:73:fa:62:a2:ea:
         f7:bb:ff:b4:00:a2:70:25:ed:01:5c:d7:3e:28:fa:b0:3a:60:
         c9:56:61:37:d5:6b:41:4e:f7:80:a3:4e:31:84:ca:12:8c:47:
         23:26:ba:a0:10:85:82:b9:51:be:07:10:20:c0:c4:19:24:fe:
         76:e5:10:7e:e2:13:10:ba:16:49:80:ea:fb:25:ea:1e:e4:e9:
         f1:29:b0:94:46:32:7c:bf:d5:56:44:02:f4:5e:b6:7d:31:7e:
         0d:23:f7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:47:21 2025 by rpki-client