Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File:                     5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier:          uEB674fcKQwi9D01uek16WLgtax6e/AKRo5ptpSHMlM=
Subject key identifier:   5B:6D:E3:9C:15:7B:F1:D1:81:A0:72:62:8A:E9:79:DE:36:F1:96:16
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer:       /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial:       0198744FD0E41C214D62D42DB8FF572D9D02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number:          06A2
Signing time:             Mon 04 Aug 2025 09:00:44 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:44 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:44 +0000
Files and hashes:         1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=)
                          2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: sIbOsDK4JM2Z+L+Yr2WPNDsKzhm+pXXzm9dqJ4TUU3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:d0:e4:1c:21:4d:62:d4:2d:b8:ff:57:2d:9d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
        Validity
            Not Before: Aug  4 09:00:44 2025 GMT
            Not After : Aug  5 09:00:44 2025 GMT
        Subject: CN=5b6de39c157bf1d181a072628ae979de36f19616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dc:70:99:06:e0:be:29:79:59:93:dc:5e:b1:
                    0d:1b:cc:a8:47:ce:2b:91:3c:6b:a2:66:10:97:55:
                    14:89:17:d1:df:6e:90:69:09:dd:e3:5c:96:5a:da:
                    2c:d2:f4:63:ab:72:a9:6a:89:73:04:92:a5:3c:40:
                    ad:c9:ba:86:85:5d:4d:94:40:59:c2:a5:59:7d:22:
                    12:41:40:76:5a:c9:03:ab:f2:1c:c2:df:c1:94:d5:
                    c9:d0:4b:73:ff:0a:e7:fa:98:e6:0c:fc:1b:27:6b:
                    7b:d6:31:5f:76:95:0f:4e:4b:76:b9:f4:42:52:ae:
                    19:cc:48:55:e1:cf:21:5e:2e:85:fd:a6:40:92:ea:
                    97:61:f6:82:e2:38:ef:58:59:5a:9a:23:22:10:4c:
                    46:01:3c:16:da:c3:f7:2b:73:e0:b5:90:9c:36:e6:
                    02:c9:d2:ae:f4:a8:84:a2:7d:46:bf:12:1f:1e:b7:
                    47:cd:23:9f:00:ba:a8:b3:bc:ee:ad:4d:6c:64:fd:
                    e0:04:1c:17:61:60:e1:72:1d:ce:29:86:4a:43:61:
                    c7:2c:98:35:f8:0d:f5:be:b6:9b:bc:85:6e:5c:f8:
                    13:ee:56:1d:8f:79:b7:6f:f6:06:f8:d1:73:19:90:
                    38:28:06:1d:10:33:b6:f2:ab:cb:3b:e3:94:db:ce:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6D:E3:9C:15:7B:F1:D1:81:A0:72:62:8A:E9:79:DE:36:F1:96:16
            X509v3 Authority Key Identifier:
                keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:77:1f:8e:93:37:59:69:04:d1:c7:25:16:95:88:a2:d4:db:
         ba:ad:f8:1c:b6:c5:e7:16:4b:74:a2:1e:6e:21:b2:76:29:15:
         62:06:9e:aa:5b:ae:f6:29:c4:07:17:69:e5:3e:a7:a8:4f:ce:
         5c:8e:26:e0:a6:24:97:35:a0:75:38:d4:13:82:64:08:fe:54:
         74:fa:ff:8d:16:e9:d7:46:8a:8e:cc:78:fc:46:9d:ab:6d:65:
         cb:aa:41:8c:56:f6:6b:e8:c3:54:a3:67:76:0c:68:d3:f8:7c:
         88:be:17:0d:a9:71:a4:76:19:fe:aa:81:dd:b9:95:3a:d8:c1:
         01:72:78:e7:a1:98:17:8d:e6:c5:ab:dd:f0:b8:98:33:81:2f:
         81:f6:3f:52:ad:36:38:3a:f4:b4:b0:68:1f:6c:34:63:7a:a0:
         a4:ad:49:79:6b:cc:db:26:47:b8:6e:85:ce:bd:0c:d1:7c:ab:
         e0:c6:82:cf:ef:f7:39:9b:d2:34:ed:98:3d:2f:39:40:5a:72:
         6a:0c:15:8b:ba:43:e5:86:9c:bf:5e:92:77:a2:26:3f:f6:38:
         17:6b:3f:b6:05:07:bc:c0:36:82:5b:f5:92:e0:f6:be:bc:e2:
         cf:94:b6:62:74:a1:89:69:77:07:2b:97:a6:04:9c:01:4c:05:
         72:4b:52:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:17 2025 by rpki-client