Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File:                     5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier:          59rafIYSQl35GYXagfsH5NgwN2qWkkebrPV0f2I0HCQ=
Subject key identifier:   92:F2:C7:04:22:29:EA:CE:52:F7:7C:B6:9D:65:FF:2C:61:0D:A1:61
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer:       /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial:       01976E1979626C9618850F4EED7A1214C424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number:          0513
Signing time:             Sat 14 Jun 2025 11:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:52 +0000
Files and hashes:         1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: fgaTv3KgMRD6dHwhLaGWxHwGZZ1HpUEGGJWpZ9mJXz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:79:62:6c:96:18:85:0f:4e:ed:7a:12:14:c4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
        Validity
            Not Before: Jun 14 11:00:52 2025 GMT
            Not After : Jun 15 11:00:52 2025 GMT
        Subject: CN=92f2c7042229eace52f77cb69d65ff2c610da161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:2d:b9:46:78:ef:7f:f5:75:e3:47:be:15:
                    43:b6:5e:a1:c5:f8:52:63:83:20:d4:cb:f2:4c:47:
                    5e:cf:65:f9:00:57:ca:ce:f1:c7:f3:59:d0:da:21:
                    02:10:90:5a:75:59:78:90:f5:5a:fe:0c:30:ef:48:
                    99:fd:3f:49:12:b8:61:a7:a9:18:c4:ea:60:e7:99:
                    01:b2:6a:48:79:c1:09:ea:9a:88:76:00:b2:6c:4a:
                    e6:ab:bc:23:b8:d0:15:b6:f8:13:04:8e:7c:10:01:
                    02:38:fa:51:fe:08:92:32:ca:81:9e:22:01:cd:a9:
                    1f:24:02:0e:b2:6a:96:bb:a7:59:e6:71:b8:e5:09:
                    bc:51:ab:cd:57:71:66:c2:71:8e:66:84:d7:01:e3:
                    c9:56:b2:c3:a9:49:ed:8c:61:a9:b6:f6:f4:aa:4a:
                    30:da:24:39:5f:a9:c9:ee:3d:a6:e8:d3:6f:23:65:
                    e9:1c:15:dd:9b:b1:0d:76:f2:9b:d0:2f:0f:ec:5b:
                    1d:5a:40:0c:e7:66:12:4f:37:d1:48:42:86:e9:79:
                    4e:a0:a0:42:5f:d5:00:bc:18:62:f3:e0:ab:45:ae:
                    d7:c1:40:0b:40:27:c9:9e:3f:cc:01:ee:38:82:af:
                    f4:62:42:89:9f:c5:1c:76:c0:dc:d9:a4:c3:3c:f7:
                    67:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F2:C7:04:22:29:EA:CE:52:F7:7C:B6:9D:65:FF:2C:61:0D:A1:61
            X509v3 Authority Key Identifier:
                keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:9f:f8:b8:9d:8d:c7:68:9f:19:0d:f7:6a:9b:df:63:ce:
         1f:4e:49:c6:0b:46:1b:a8:a8:12:be:a0:78:a6:e5:84:7f:7f:
         ea:48:8c:28:36:77:32:56:79:aa:f6:a6:22:d2:71:ac:33:d4:
         78:58:66:ed:a7:ff:97:45:43:34:8b:d8:c0:ce:96:ba:5d:37:
         df:84:f0:b0:52:d7:4b:3c:a1:28:81:c2:1e:17:1b:c2:1e:66:
         aa:8c:8e:b8:f4:4c:42:3a:0f:6b:d7:dd:32:b5:0e:4e:2e:b0:
         fb:17:0d:59:f8:2f:b9:8b:56:27:25:3a:cd:20:48:dd:29:c5:
         d6:5f:e9:85:7c:0e:eb:a2:cb:b4:46:ab:3a:2f:21:02:2b:24:
         fc:b6:ae:ec:43:2d:ba:14:c6:b8:ad:a0:c6:c7:6e:f7:13:cf:
         09:2e:fa:40:7a:ae:43:c1:68:50:51:3b:b5:c5:1f:e7:aa:92:
         c6:8f:da:81:11:d7:8c:b4:3e:6d:69:54:7f:44:10:4b:57:c1:
         29:ed:ac:65:33:2f:fe:73:23:9d:41:68:b6:aa:52:84:a5:a8:
         22:c4:67:ef:a1:e4:e1:d5:0c:21:cf:91:bd:39:f0:b3:2e:eb:
         6d:59:20:fe:f5:b8:71:a6:d5:9f:f4:de:41:40:48:61:e2:9c:
         88:61:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:03:55 2025 by rpki-client