Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File:                     5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier:          DB2cd4lT60nQj5ZUoRJZeIDkijjV87iil2J86S2W9+U=
Subject key identifier:   02:1A:56:0E:E3:74:8F:FD:DB:81:74:C4:B2:ED:48:52:12:F9:E7:B5
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer:       /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial:       01976DABC1B6876E46C1C6D21F217BEFF75E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number:          01FF
Signing time:             Sat 14 Jun 2025 09:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:02 +0000
Files and hashes:         1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: pZtzcJeeGevg/rBbfEnod7QzQiUo0VcPGXGGRUF86qw=)
                          2: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (hash: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:c1:b6:87:6e:46:c1:c6:d2:1f:21:7b:ef:f7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
        Validity
            Not Before: Jun 14 09:01:02 2025 GMT
            Not After : Jun 15 09:01:02 2025 GMT
        Subject: CN=021a560ee3748ffddb8174c4b2ed485212f9e7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:d6:70:1f:a4:5c:5e:98:69:f0:0c:a3:05:
                    7f:80:39:12:69:53:e3:c0:c3:0c:67:32:81:bf:3b:
                    f6:33:2d:59:01:21:f3:e6:2e:e2:c9:92:53:e1:5d:
                    6a:76:41:fb:d7:0d:55:c8:22:22:48:fa:9e:16:ac:
                    be:3f:87:62:91:13:06:fc:54:b8:ac:b1:8a:22:7d:
                    01:c2:8f:be:50:2a:e3:ad:34:e0:fc:1a:46:5d:81:
                    4a:02:7f:56:0e:cd:d2:97:3e:97:e5:87:86:d3:12:
                    eb:fb:29:ff:a6:28:95:9c:f5:1a:7f:38:c8:2a:7e:
                    c2:c8:f5:8a:41:e2:d4:68:8d:4d:d1:39:ef:3f:25:
                    81:fa:b8:7f:55:d6:1b:c1:8a:8f:11:99:c4:8b:ca:
                    5a:5b:59:2c:13:f5:50:d9:5c:88:ba:da:e8:e5:c7:
                    79:3c:4a:2e:97:66:a7:91:cb:66:a8:f3:04:75:e7:
                    48:a8:ed:0e:79:58:cd:d5:ae:f0:72:9c:83:f5:3f:
                    58:e5:4a:36:d9:b1:17:c0:87:42:ed:ff:b2:fc:92:
                    36:ef:67:98:17:92:08:eb:16:32:63:a5:c6:84:10:
                    60:ac:6b:68:56:07:1f:af:bf:fc:9b:c6:62:2f:8a:
                    43:be:43:a5:7c:c2:09:7e:de:05:4d:c5:1d:06:b5:
                    22:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1A:56:0E:E3:74:8F:FD:DB:81:74:C4:B2:ED:48:52:12:F9:E7:B5
            X509v3 Authority Key Identifier:
                keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d0:8b:57:9e:ab:48:fb:5a:ec:82:df:da:47:6b:33:1c:df:
         02:ce:b0:d1:a0:4d:10:82:9b:e7:b8:94:78:90:8c:3a:90:96:
         09:4f:b9:c1:ef:97:43:a4:7e:f5:20:6a:fe:40:3c:1b:c7:97:
         4a:51:b5:12:95:49:61:d6:ba:0a:16:d0:f8:98:51:e5:6c:6e:
         28:e5:10:cb:06:6d:98:ce:9b:08:36:1e:c3:74:ae:19:dc:fb:
         c0:63:df:29:67:bb:41:22:c3:a6:f6:80:51:1d:dc:1f:c5:d7:
         34:81:b3:d9:99:45:f1:0d:e5:5f:21:5c:89:22:62:ac:61:a9:
         6c:3a:58:4d:9e:ba:0a:2f:e7:b4:fa:bf:70:e0:d5:9e:43:9b:
         e7:5a:38:95:6c:9d:12:dc:fa:ad:e6:46:ae:ad:43:00:be:07:
         33:31:93:ef:15:13:50:97:46:4c:4a:5a:04:b3:6d:98:3e:c7:
         fa:16:d4:5a:0f:77:fa:e3:1f:49:ae:97:39:e3:80:18:91:28:
         83:4e:3a:df:ba:4a:c7:b5:4d:4b:18:77:49:b5:27:c4:4e:65:
         79:ca:b8:59:f4:84:76:37:9a:50:67:b3:74:46:99:53:1e:a6:
         6f:03:10:0c:6f:dc:06:b5:13:1f:50:a1:db:0a:fa:cb:b4:cd:
         dc:37:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:05:28 2025 by rpki-client