Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File:                     5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier:          Xy7DGY12OY9A1fs1ItBXcKHKtwaeukAMpyYrqRxgM0I=
Subject key identifier:   F3:AD:A5:A1:05:DE:CF:23:C8:5B:78:E2:F2:A3:F0:37:F6:10:39:9F
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer:       /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial:       0198A04E960F79D1A425B638E35C12EC8950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number:          03B9
Signing time:             Tue 12 Aug 2025 22:02:41 +0000
Manifest this update:     Tue 12 Aug 2025 22:02:41 +0000
Manifest next update:     Wed 13 Aug 2025 22:02:41 +0000
Files and hashes:         1: 3cGSK8NVA9eNtztBrAr51UavoEk.roa (hash: pMEP1TJfXu1V+w800yX1v0YDExi+6bPx0cct+Fh5aw4=)
                          2: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: hL/4yNFjPujRV09dXYWi6gm5dyPmZuowhI0DznLrd0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:96:0f:79:d1:a4:25:b6:38:e3:5c:12:ec:89:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
        Validity
            Not Before: Aug 12 22:02:41 2025 GMT
            Not After : Aug 13 22:02:41 2025 GMT
        Subject: CN=f3ada5a105decf23c85b78e2f2a3f037f610399f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1e:84:ee:82:05:21:c8:e8:63:26:72:c2:1a:
                    f3:b2:e7:d1:22:38:52:44:17:35:17:5d:46:f0:44:
                    62:12:af:67:cd:04:e6:8c:73:64:87:67:b0:ae:8f:
                    02:1b:1c:94:df:93:32:58:44:43:fb:e4:6e:47:cd:
                    a7:26:4a:3a:42:ff:8c:a7:06:67:e5:99:1b:29:8f:
                    7d:5b:d6:fc:fc:5a:6d:cc:84:40:94:01:3b:80:d1:
                    69:28:b0:20:26:29:de:70:da:3c:48:fc:46:01:4d:
                    c9:b9:00:7a:07:db:a0:fe:e9:3f:32:8e:6f:44:ae:
                    0e:5e:24:70:2d:ba:8c:88:eb:32:c9:90:98:d1:f6:
                    3a:ed:84:1a:2d:34:ff:22:4c:51:9e:f0:4f:92:bc:
                    fc:d5:92:dc:67:a0:e4:46:8b:71:bc:ec:88:e0:38:
                    58:fb:92:84:d9:66:a0:37:ce:a8:ef:83:87:c4:99:
                    0b:26:a5:bd:c3:69:f8:3e:27:b6:4e:fd:3e:52:66:
                    43:55:49:cd:df:ac:99:e3:ad:aa:3c:25:05:5f:7e:
                    bb:05:a9:3b:45:09:bb:2d:66:e0:35:eb:0b:29:fb:
                    3a:1d:71:02:6b:f5:45:e1:4f:79:5d:a9:e6:0e:a7:
                    aa:02:6c:a6:c4:e6:56:ed:2c:fb:a4:91:3d:36:66:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AD:A5:A1:05:DE:CF:23:C8:5B:78:E2:F2:A3:F0:37:F6:10:39:9F
            X509v3 Authority Key Identifier:
                keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:32:0e:6a:a7:af:41:39:be:74:39:db:39:3f:87:18:0d:b0:
         23:d0:e4:e7:af:a8:22:61:9e:b5:6d:1d:6c:1e:59:ab:5e:18:
         5e:40:88:47:13:6c:2e:5b:76:27:5f:12:9a:32:84:dc:1c:ff:
         1e:50:3a:83:f5:fd:83:be:2b:cd:dc:ec:99:b0:16:b0:2a:bd:
         f3:f4:63:55:43:ed:b4:55:74:6f:e0:4e:3a:0d:49:ed:83:04:
         c9:12:40:13:1d:b4:05:60:c9:67:51:76:24:c7:f8:b1:c9:72:
         57:13:23:2b:48:82:60:01:0c:19:7b:3a:57:f7:d0:d0:e2:5a:
         c2:36:23:cd:38:a3:ec:d7:13:62:63:f9:ba:05:64:69:c1:0c:
         b6:e0:44:18:de:fa:8b:9b:4e:3e:9e:bd:33:96:4e:90:ed:b1:
         1f:cd:aa:a4:4e:62:53:98:7c:03:8b:92:02:3f:0b:f8:1d:85:
         6d:e6:8f:52:02:94:b5:e1:b1:b1:e6:9f:2d:4f:ce:2c:fd:19:
         7f:d7:b4:90:5e:92:54:fa:13:5e:82:f9:04:2f:4f:06:c6:56:
         4f:b6:e2:ca:8a:63:5c:0a:86:a8:88:f5:84:80:15:0c:de:51:
         d5:5d:f0:e8:f6:57:29:57:97:42:c2:67:c2:b9:c4:44:11:f8:
         7f:42:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:27 2025 by rpki-client