Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File:                     5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier:          8MdNvZkP72fzQwr7PHINjrbS6Tf+CbOgii+fS4qjEaQ=
Subject key identifier:   30:CB:2F:15:AD:2F:FB:52:EE:BC:48:80:2D:CF:A8:D4:88:46:44:64
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer:       /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial:       01988BB368C69D47700058C877743E370D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number:          1622
Signing time:             Fri 08 Aug 2025 22:00:47 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:47 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:47 +0000
Files and hashes:         1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: X21MY4qIFV9OAzv+d/vMwPMLwDdqkko9+pDUC1Zmh5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:68:c6:9d:47:70:00:58:c8:77:74:3e:37:0d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
        Validity
            Not Before: Aug  8 22:00:47 2025 GMT
            Not After : Aug  9 22:00:47 2025 GMT
        Subject: CN=30cb2f15ad2ffb52eebc48802dcfa8d488464464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:30:ca:46:e2:20:a8:cc:89:7b:34:23:9e:
                    96:cb:b2:3d:d6:c1:42:c1:bb:ae:a5:f2:dd:67:22:
                    22:29:28:f9:f3:bf:45:2e:eb:4d:cd:c6:e9:7e:1b:
                    85:28:6d:54:d2:f7:10:5d:f8:f7:96:e3:7a:24:b4:
                    da:47:14:38:f9:b2:a2:52:07:c5:ae:d1:a1:77:bf:
                    89:de:50:9e:cd:bd:52:02:d7:b0:7b:d6:5d:39:b4:
                    96:2b:0b:8a:69:14:a5:ec:c1:36:bc:20:e0:01:a2:
                    62:3a:1d:1d:2e:a3:e4:c5:a9:6e:0f:53:62:b3:25:
                    86:8d:2f:cc:44:3b:9e:29:51:05:28:0d:94:69:d1:
                    41:f8:3b:f0:0c:69:9f:4b:3f:01:1c:a3:31:e1:ce:
                    c6:67:ff:e9:ec:26:de:5e:62:b2:20:a1:6e:70:7a:
                    bb:0d:ed:bb:d2:23:c8:f6:95:9e:c8:26:a0:d5:d9:
                    e7:c9:c9:ce:8b:e2:9a:b9:70:be:cc:29:10:9d:18:
                    e6:cf:d7:bb:9a:29:d5:04:11:5a:f2:d2:2f:c3:aa:
                    c9:ba:b4:88:f3:d9:77:18:7a:00:23:c1:62:a0:e8:
                    00:1d:d9:c8:10:2d:e9:d6:1d:db:6f:ca:c3:c2:b7:
                    09:6a:6b:87:15:5c:8e:fc:bc:49:3d:3d:78:61:91:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CB:2F:15:AD:2F:FB:52:EE:BC:48:80:2D:CF:A8:D4:88:46:44:64
            X509v3 Authority Key Identifier:
                keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:88:f9:74:46:b3:fe:7c:eb:70:eb:4e:00:5e:d3:0b:f9:2f:
         0f:e9:5a:77:15:cc:92:12:2b:bd:aa:20:f8:5b:cb:e6:61:44:
         fd:28:38:23:a3:3f:45:7f:79:4b:40:7e:ba:ab:56:42:5b:95:
         4f:d0:34:59:a5:53:53:34:a2:28:6d:66:18:c3:5b:e4:7c:54:
         cc:85:95:56:4a:9a:8c:b9:c4:87:af:e4:e7:92:89:37:c5:83:
         8a:52:54:c3:aa:a7:33:75:35:87:a7:88:ec:ed:37:50:81:94:
         bf:c3:b9:02:90:7c:65:e5:51:1c:51:1c:68:ee:1f:35:e6:2f:
         70:fa:51:80:5d:ec:ff:8d:55:a7:3f:61:01:c7:d3:e1:39:ba:
         97:93:2e:d3:df:3a:ec:90:48:77:c1:3d:22:36:be:0d:8b:c2:
         8d:ce:7d:42:88:5f:62:99:8d:b4:6e:f9:4c:80:21:8d:23:ba:
         75:2a:3e:a3:1f:26:7e:0b:6f:c5:bd:e0:06:9f:a1:b2:06:4a:
         72:a6:4e:21:87:a5:8c:bd:a9:de:9b:50:34:26:8a:c5:8f:f6:
         cc:37:6c:8d:fe:e4:32:71:c8:7d:0b:0b:4f:92:94:0e:ae:7f:
         d0:48:86:d5:4a:90:8d:c6:3e:d6:77:14:f1:1c:c2:30:50:eb:
         2f:8c:22:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs2jGnUdwAFjId3Q+Nw0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NzEwMDY3OWYwNzI4MmNkNDhjYjUxMDdiZjk3YWY3YWYz
ODg5YzkwHhcNMjUwODA4MjIwMDQ3WhcNMjUwODA5MjIwMDQ3WjAzMTEwLwYDVQQD
EygzMGNiMmYxNWFkMmZmYjUyZWViYzQ4ODAyZGNmYThkNDg4NDY0NDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowMwykbiIKjMiXs0I56Wy7I91sFC
wbuupfLdZyIiKSj5879FLutNzcbpfhuFKG1U0vcQXfj3luN6JLTaRxQ4+bKiUgfF
rtGhd7+J3lCezb1SAtewe9ZdObSWKwuKaRSl7ME2vCDgAaJiOh0dLqPkxaluD1Ni
syWGjS/MRDueKVEFKA2UadFB+DvwDGmfSz8BHKMx4c7GZ//p7CbeXmKyIKFucHq7
De270iPI9pWeyCag1dnnycnOi+KauXC+zCkQnRjmz9e7minVBBFa8tIvw6rJurSI
89l3GHoAI8FioOgAHdnIEC3p1h3bb8rDwrcJamuHFVyO/LxJPT14YZGqTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDLLxWtL/tS7rxIgC3PqNSIRkRkMB8GA1UdIwQY
MBaAFOZxAGefBygs1Iy1EHv5evevOInJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81YzI2NWUtNDE4Ny00YTc0LTk5NmUt
YWU4YzU4MzBjYzIwLzEvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81YzI2NWUtNDE4Ny00YTc0LTk5NmUtYWU4YzU4MzBjYzIw
LzEvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4j5dEaz
/nzrcOtOAF7TC/kvD+ladxXMkhIrvaog+FvL5mFE/Sg4I6M/RX95S0B+uqtWQluV
T9A0WaVTUzSiKG1mGMNb5HxUzIWVVkqajLnEh6/k55KJN8WDilJUw6qnM3U1h6eI
7O03UIGUv8O5ApB8ZeVRHFEcaO4fNeYvcPpRgF3s/41Vpz9hAcfT4Tm6l5Mu0986
7JBId8E9Ija+DYvCjc59QohfYpmNtG75TIAhjSO6dSo+ox8mfgtvxb3gBp+hsgZK
cqZOIYeljL2p3ptQNCaKxY/2zDdsjf7kMnHIfQsLT5KUDq5/0EiG1UqQjcY+1ncU
8RzCMFDrL4wivA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:38 2025 by rpki-client