Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
File:                     5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft (raw, json)
Hash identifier:          QebdxUa0Z1h01KicgbLp+dSwbRhUIVutAIcuxcjvQ4M=
Subject key identifier:   32:69:F9:E8:29:A0:5A:EC:76:35:4B:43:1A:C2:F4:FE:70:D8:1F:C0
Authority key identifier: E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3
Certificate issuer:       /CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
Certificate serial:       019879AF4F1CE97DEB9DCA88B389D92AC6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
Manifest number:          092D
Signing time:             Tue 05 Aug 2025 10:03:08 +0000
Manifest this update:     Tue 05 Aug 2025 10:03:08 +0000
Manifest next update:     Wed 06 Aug 2025 10:03:08 +0000
Files and hashes:         1: 5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl (hash: gDZmxEtzdNGzAhl1hCrqRK1A9Yp/VGYO5AWUnpONsYI=)
                          2: 6xUnoc1wAnSrf2dpU2UTzibFAZU.roa (hash: tiXyyLUhxSiIfoFFtQDRMAVp44XARQDTShxLyIGBRKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:af:4f:1c:e9:7d:eb:9d:ca:88:b3:89:d9:2a:c6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d32a3e18b84ee3c54e34fa67dc68ef19d2b7b3
        Validity
            Not Before: Aug  5 10:03:08 2025 GMT
            Not After : Aug  6 10:03:08 2025 GMT
        Subject: CN=3269f9e829a05aec76354b431ac2f4fe70d81fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:39:43:e5:4e:4a:08:73:17:dd:e5:53:32:
                    2f:b7:70:f9:48:62:8b:6d:b8:a5:57:c9:33:f9:2a:
                    52:75:1a:df:d1:2c:f6:f5:53:74:09:6c:db:44:c1:
                    74:20:30:cc:3b:e1:2a:fd:9c:6b:32:41:04:89:c1:
                    7b:cb:f5:14:5d:45:09:62:07:6f:1b:2e:45:ca:95:
                    0c:b8:ae:5a:01:2b:c7:87:04:2a:42:c4:ce:d0:85:
                    33:5a:00:14:a5:a3:45:db:7f:52:1f:46:53:47:ef:
                    a1:29:97:f7:43:12:e9:ac:0f:9e:fa:d7:87:f9:a4:
                    05:72:c8:ef:3d:02:18:34:d7:25:09:b8:aa:fa:62:
                    72:17:6b:42:15:1d:24:9a:1e:5e:0a:32:f3:95:7c:
                    94:f7:80:d1:94:9d:67:12:66:b4:b4:2e:79:77:f5:
                    95:b3:bc:79:02:0d:3d:50:8d:9a:15:60:4e:33:14:
                    66:48:ab:01:79:a7:23:f5:06:14:12:3c:4f:56:e6:
                    84:db:9c:23:8d:af:f0:c1:7d:b8:cd:48:ce:24:d6:
                    3d:69:de:ca:27:e3:1d:82:c5:7f:cb:3d:0b:55:45:
                    52:e0:e0:8f:3e:06:13:d2:6a:dc:ff:11:0a:b6:67:
                    2d:79:f3:32:15:63:8b:04:e8:c8:e1:e9:9a:09:82:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:69:F9:E8:29:A0:5A:EC:76:35:4B:43:1A:C2:F4:FE:70:D8:1F:C0
            X509v3 Authority Key Identifier:
                keyid:E4:D3:2A:3E:18:B8:4E:E3:C5:4E:34:FA:67:DC:68:EF:19:D2:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e03808-d2db-40d9-81f4-87c2e8f3914e/1/5NMqPhi4TuPFTjT6Z9xo7xnSt7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0d:c8:22:85:4c:95:c9:94:dc:0b:e5:a0:c1:73:28:12:3d:
         65:3a:7a:1c:77:79:90:ad:eb:fe:2a:7e:39:70:6c:9b:58:58:
         81:3d:a0:7c:cc:ce:27:ed:e5:28:b6:32:c6:99:5f:f5:72:85:
         a4:28:91:e1:9a:7f:02:62:19:d0:d5:04:b3:6f:7b:04:e1:67:
         51:9c:55:ef:23:20:d1:60:42:6f:de:ea:51:dd:bd:ba:3b:a6:
         bd:5c:e7:f3:bd:f0:2f:f1:1d:fa:d7:eb:48:7e:14:80:56:b2:
         63:cf:6b:50:7b:3d:07:51:30:a4:a0:99:54:b9:55:ca:16:3c:
         0b:cb:75:2f:3c:a7:d0:57:4c:dd:c7:5e:e5:29:41:6d:1c:59:
         37:28:3c:b2:17:c0:91:5d:4f:e8:e0:26:2b:2a:6d:8b:89:a0:
         bb:fe:58:86:c0:71:ff:3d:4c:74:e7:f2:4c:17:a0:06:c6:08:
         72:10:5f:69:12:f8:6c:7f:5a:19:a2:e8:4f:84:64:56:ef:27:
         88:e8:f4:ce:95:b8:5a:68:ff:2d:ce:61:2b:6e:0a:ea:a0:9b:
         38:c6:b7:e1:2c:c1:e6:7e:72:bf:41:20:04:48:c8:ae:91:8a:
         de:05:ba:a2:47:ae:f5:16:f2:40:c7:59:44:e7:b5:3e:cb:41:
         74:8a:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:39:21 2025 by rpki-client