Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File:                     5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier:          uAlviQy6vga9aLjRULWm6UWayxI9v5ZhaTW7klGQqZ0=
Subject key identifier:   FA:B3:3F:37:D1:1E:F2:AC:1C:70:7C:DA:CC:28:24:55:4D:EA:83:AE
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer:       /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial:       019769CF3BD359306B8DEADFC2AA9CDC0AE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number:          0618
Signing time:             Fri 13 Jun 2025 15:01:18 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:18 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:18 +0000
Files and hashes:         1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=)
                          2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: mZ1eTJkQlkynPIpX7cWD1L5SIr1HEXK6UBIOsQhA1us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:3b:d3:59:30:6b:8d:ea:df:c2:aa:9c:dc:0a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
        Validity
            Not Before: Jun 13 15:01:18 2025 GMT
            Not After : Jun 14 15:01:18 2025 GMT
        Subject: CN=fab33f37d11ef2ac1c707cdacc2824554dea83ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:15:f4:4e:32:19:f6:0b:3f:a0:29:e7:9d:
                    a6:80:f8:d5:ef:c8:49:7e:63:5d:f4:ba:6c:09:6b:
                    d0:58:86:99:a3:96:72:d9:2e:0b:a2:98:5a:49:e3:
                    7a:23:7c:36:0d:66:cb:b0:01:87:77:f8:d4:bd:45:
                    37:3b:00:a6:01:10:6c:2a:02:a8:8c:3f:a8:65:0c:
                    ce:1e:6a:e4:e3:96:71:e2:f5:2f:81:b2:a2:d9:99:
                    72:e1:dc:9d:df:6d:50:29:5c:6c:fa:01:44:33:9f:
                    13:13:60:c7:b1:82:e6:6b:25:4d:28:94:37:d3:c6:
                    62:81:55:a1:a5:57:37:02:c4:df:e5:54:43:34:1e:
                    17:fa:9e:93:48:5f:16:0a:10:fa:d2:25:13:f4:e7:
                    42:93:ad:2f:6e:56:45:12:2a:a2:c5:65:0a:19:4c:
                    cc:51:c8:b8:e0:99:87:ed:74:2e:83:c7:c7:4c:61:
                    52:48:d9:a3:a1:6c:e6:2d:8e:4b:6c:18:d9:34:43:
                    63:67:78:54:d3:30:97:ee:36:f5:a0:a4:49:ba:fa:
                    d8:e0:6f:87:30:53:2d:b1:ce:85:f4:29:18:97:38:
                    58:d8:1a:c2:c5:76:14:f3:6c:fe:53:2e:6c:6b:a1:
                    56:67:a8:f7:58:a4:77:79:93:71:ab:65:cb:d3:23:
                    aa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B3:3F:37:D1:1E:F2:AC:1C:70:7C:DA:CC:28:24:55:4D:EA:83:AE
            X509v3 Authority Key Identifier:
                keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:dd:a5:50:77:69:74:eb:a0:92:bd:c3:f9:47:7b:fa:fd:d0:
         52:76:d2:e6:c0:59:65:0b:dc:aa:5c:a9:98:bf:7c:d7:aa:f8:
         b7:fb:0b:f3:d1:2c:0a:64:73:54:95:9a:9d:d7:5c:8b:5e:d0:
         cf:9a:7b:fd:61:84:00:f5:c2:a6:b9:47:48:a0:f9:b9:1d:07:
         3f:80:ee:96:65:52:0b:fb:58:0e:ba:b7:4a:b5:ff:57:78:18:
         56:a0:0f:8c:47:23:30:0c:83:51:e1:e1:e6:ea:59:17:f8:f5:
         16:bd:b6:7c:0b:e6:93:11:4a:24:8f:ab:3d:f3:59:0b:70:64:
         5c:c2:e2:ef:2e:55:11:2f:9e:d1:1e:8d:80:a8:60:e8:82:a7:
         9c:41:c1:85:55:49:bb:88:c4:18:1f:28:b5:de:44:5d:31:26:
         01:5a:6c:42:71:4d:b3:c4:c5:1e:57:40:4c:6a:ec:74:db:cf:
         39:a5:fd:f4:9b:a6:4d:1d:6d:6c:25:df:b7:dd:c9:fc:ce:b6:
         ac:90:e1:71:50:85:9a:88:98:cd:17:6d:50:ee:e6:64:b5:46:
         6f:49:1f:06:fa:af:13:c7:1a:a1:d4:dd:7f:bc:b3:5d:95:d3:
         b4:50:d9:20:18:8a:7f:24:9b:0a:e9:77:50:7d:aa:b7:d3:5f:
         ad:dd:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:47 2025 by rpki-client