Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File:                     5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier:          Gw7YQ3n2rZMpFHXfsFEiKFUQlSMGb/X1tHKrfX8dnPk=
Subject key identifier:   9A:92:4D:7D:05:6C:F0:D2:87:2C:0C:28:DF:8B:12:F0:CD:E5:76:73
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer:       /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial:       019783FC0C41BADD161B6A71426A2334BE45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number:          152A
Signing time:             Wed 18 Jun 2025 17:00:22 +0000
Manifest this update:     Wed 18 Jun 2025 17:00:22 +0000
Manifest next update:     Thu 19 Jun 2025 17:00:22 +0000
Files and hashes:         1: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: DHrDSdHEMfLNhvVmci76/eBMaHxhjY1mENQn0y+iECc=)
                          2: 9wh4IjR2WdijxIEialrBfGScnoA.roa (hash: aGpT2hqWZX/M5kbSljEdFZvRHYfWgQ/Qc0ertXxiLJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:fc:0c:41:ba:dd:16:1b:6a:71:42:6a:23:34:be:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
        Validity
            Not Before: Jun 18 17:00:22 2025 GMT
            Not After : Jun 19 17:00:22 2025 GMT
        Subject: CN=9a924d7d056cf0d2872c0c28df8b12f0cde57673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:07:ae:07:a0:b6:47:bf:16:2c:67:10:0b:8b:
                    c6:60:d8:70:aa:1a:66:d7:20:35:3f:53:e6:b7:f8:
                    37:fd:ff:76:39:dc:92:22:d6:42:c4:00:b0:dd:d8:
                    8b:0a:7b:65:40:ef:2b:53:50:fc:ba:8e:8a:32:68:
                    19:7d:2a:fd:1c:8f:3b:53:bf:f6:10:79:0d:76:51:
                    fe:31:71:e4:ee:ea:6d:19:3a:d6:cb:50:29:b5:1d:
                    1c:f1:e2:18:c9:fc:86:9c:7c:cf:f5:e9:06:0b:1e:
                    e2:24:bb:ea:87:13:00:00:58:c3:27:19:64:2c:23:
                    b7:84:89:c2:4f:0d:9a:df:08:16:57:0c:bf:66:a5:
                    cd:21:a2:04:1b:45:fb:99:8e:ad:ea:d8:49:34:9f:
                    72:eb:4c:6e:95:8a:2e:8b:a1:d5:f8:a1:c3:aa:88:
                    db:29:d2:5f:36:e2:88:1b:a7:57:8f:7a:a1:80:61:
                    9b:0e:75:fb:43:b5:8b:01:a1:08:51:0c:8f:b6:4c:
                    40:8a:14:33:7c:f2:42:b4:2f:3f:5c:85:95:e1:16:
                    67:f0:a1:81:91:3d:50:7c:b9:b7:65:03:2e:b0:14:
                    e3:7f:ce:44:72:35:1c:1b:64:89:20:82:07:23:28:
                    82:11:51:d1:ee:ca:52:6c:c4:f4:98:41:c5:56:49:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:92:4D:7D:05:6C:F0:D2:87:2C:0C:28:DF:8B:12:F0:CD:E5:76:73
            X509v3 Authority Key Identifier:
                keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:60:74:9e:4f:99:aa:5b:11:67:96:72:61:55:6a:fa:07:45:
         63:26:ed:1e:4a:d0:d7:26:07:7d:10:2d:61:2c:9e:fb:69:55:
         69:88:32:cb:b5:fb:97:ba:c1:83:57:f5:71:e0:cf:bd:56:e1:
         51:d2:47:b2:23:9a:ff:d4:bd:e8:fa:68:37:95:86:c4:88:af:
         fd:2a:4d:16:0d:46:f9:96:18:8d:70:8e:8d:8e:9c:a8:2d:36:
         24:c4:17:87:4f:5f:7f:69:94:b2:df:a7:81:d5:bd:d3:12:bd:
         67:6a:75:eb:ce:12:35:84:63:60:bc:1a:ff:85:2b:23:c0:e7:
         45:a3:ed:4b:39:98:89:fb:e1:2d:29:3a:eb:11:b5:e0:f2:09:
         f5:14:7b:c0:3c:78:e4:30:32:55:47:6b:4a:d3:c4:4e:35:13:
         97:41:7d:cf:78:04:4d:14:c6:d9:78:6a:ae:14:6d:b9:7f:42:
         2c:7b:01:f7:d4:8b:d3:a8:91:8e:ce:af:8a:be:35:a1:3b:83:
         78:4d:ac:ad:53:ca:59:a8:7f:c3:cd:4c:ef:e2:fb:05:ea:73:
         5d:bd:fa:54:f2:d4:b2:64:a1:79:0e:1e:17:2a:d3:9e:25:14:
         e1:87:1d:12:9f:3d:1b:b0:0d:5d:53:c4:ad:ac:b2:27:b2:5c:
         94:81:e1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:11:43 2025 by rpki-client