Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
File:                     mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft (raw, json)
Hash identifier:          aNLUFCna/0YNvv5JBNE62ITwLLq+U2kIfjVIr8f9IZg=
Subject key identifier:   14:53:51:93:99:2F:7F:7E:5F:B4:AF:B7:A7:C0:8A:E1:2A:1B:8C:35
Authority key identifier: 98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF
Certificate issuer:       /CN=982b5693b8261fb539fea3b13c817115f00c18df
Certificate serial:       01976EBDD20A24AEFE373FCEFD7A4879673E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
Manifest number:          0507
Signing time:             Sat 14 Jun 2025 14:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:23 +0000
Files and hashes:         1: 8eJjkZcpuWjV5v8rUew7uwzMNnU.roa (hash: yUs06Rtd51ccCs/vsal2jQR2RBqNnF02H0mDpxwGrFE=)
                          2: mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl (hash: 7zhdXybv7Tu5ZxNfXDCipBHrFL4wjrrnZfiQzCUp2ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:bd:d2:0a:24:ae:fe:37:3f:ce:fd:7a:48:79:67:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982b5693b8261fb539fea3b13c817115f00c18df
        Validity
            Not Before: Jun 14 14:00:23 2025 GMT
            Not After : Jun 15 14:00:23 2025 GMT
        Subject: CN=14535193992f7f7e5fb4afb7a7c08ae12a1b8c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bf:c9:45:29:68:d6:5b:02:54:71:32:e5:f7:
                    fc:fa:9e:92:9c:51:de:b3:ec:47:97:6d:45:bd:88:
                    cc:2e:bb:9a:e6:e8:78:23:b0:0c:9d:b7:b6:2f:23:
                    11:3b:87:af:38:24:1a:4d:c0:c2:64:00:80:c5:75:
                    06:ef:02:83:fe:21:4f:0f:2f:55:bd:1b:66:ca:42:
                    66:0d:4d:00:ba:87:09:40:54:ee:cf:ca:18:dd:71:
                    6e:c0:24:ba:f7:06:64:01:42:09:11:99:cc:11:ca:
                    a2:da:0d:5e:43:87:a7:97:3d:70:02:5b:8d:ca:dc:
                    3a:c4:79:c0:b0:5c:6b:f4:de:24:3e:5f:52:82:bd:
                    44:6e:a0:d3:7e:6d:8b:aa:8f:ce:df:7b:53:75:a9:
                    7f:78:b0:d7:f8:47:1d:aa:d1:f7:09:63:bb:3b:38:
                    cc:55:6e:8c:75:32:b4:81:0c:b7:26:8d:74:71:1f:
                    90:e8:87:9b:9b:6e:30:64:a6:43:d1:20:9e:b3:14:
                    ce:3b:52:28:0c:71:c6:12:c3:80:9c:82:f7:03:c5:
                    24:cb:13:05:77:d3:20:0e:d7:b6:4c:90:84:f0:9e:
                    7d:a0:9a:f8:5c:b2:f7:49:de:f9:fc:b4:64:5c:27:
                    53:db:a7:f2:33:3d:eb:35:23:5c:c1:06:b9:98:13:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:53:51:93:99:2F:7F:7E:5F:B4:AF:B7:A7:C0:8A:E1:2A:1B:8C:35
            X509v3 Authority Key Identifier:
                keyid:98:2B:56:93:B8:26:1F:B5:39:FE:A3:B1:3C:81:71:15:F0:0C:18:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCtWk7gmH7U5_qOxPIFxFfAMGN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d505e8-02b3-4d87-94c6-1da4b92799f6/1/mCtWk7gmH7U5_qOxPIFxFfAMGN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:3e:cc:b9:9e:b3:08:d2:e6:73:fc:9c:d6:53:01:e0:77:4b:
         ed:67:5a:e3:fa:d5:bd:65:20:3f:1b:cd:50:4a:b8:ed:61:18:
         d5:d3:ca:bf:ab:a3:91:00:18:3c:2f:88:7e:d2:83:5a:24:91:
         88:e8:21:a7:da:e0:04:21:f5:20:7f:8b:1b:e5:9f:4b:0a:4c:
         8b:88:81:eb:f3:cb:98:1a:26:50:5a:08:62:10:0e:cb:f1:3f:
         c6:73:10:d9:64:cb:9f:c0:7d:d6:71:0c:3a:81:0c:2b:4f:e5:
         54:b6:69:92:f5:b2:80:88:e7:55:d0:30:f5:a7:ba:db:7e:31:
         60:3f:93:fc:d6:da:31:f7:8e:90:35:5b:33:da:9e:e5:d2:e9:
         03:e6:58:8e:35:fe:d5:d7:58:36:19:82:b6:27:c9:79:f5:d2:
         ad:46:49:bd:8e:cf:18:b2:82:24:b6:d2:33:82:04:cc:a6:f7:
         34:db:44:aa:eb:52:3e:ca:ae:6a:0d:99:6e:5b:1a:55:26:c4:
         4d:35:43:fb:0c:17:da:cb:6c:0b:a3:47:11:f5:de:32:6e:cd:
         2f:72:a5:71:87:2c:a0:a6:c8:ee:49:33:bb:6c:06:7e:19:6d:
         e1:3e:b5:5f:3a:74:e7:65:77:a5:34:74:b9:16:b0:74:ef:18:
         b9:5d:ca:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:21 2025 by rpki-client