Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File:                     5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier:          DPLDUfcTs0bx8mXdgfnnuyAaMFCAdXs3fi25IqhbBwc=
Subject key identifier:   54:49:D6:A3:84:23:C5:C6:6E:49:62:F8:CC:C7:D6:BB:0A:A4:D8:DF
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer:       /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial:       01988BEA881C0157ACC0A984464FC52C77D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 23:00:59 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:59 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:59 +0000
Files and hashes:         1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: fNqp0smUU278gQFHx2RZ9GsP8rIpCO8oyyf+dqmMbWs=)
                          2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:88:1c:01:57:ac:c0:a9:84:46:4f:c5:2c:77:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
        Validity
            Not Before: Aug  8 23:00:59 2025 GMT
            Not After : Aug  9 23:00:59 2025 GMT
        Subject: CN=5449d6a38423c5c66e4962f8ccc7d6bb0aa4d8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:16:46:74:57:6c:73:a0:ce:08:bc:b3:6e:
                    63:e4:1d:13:38:11:9a:51:7b:8f:54:66:7f:43:ea:
                    70:4c:67:cd:b1:2b:18:79:5a:8d:c7:38:d7:6f:af:
                    e5:34:c7:d4:02:81:c8:f7:97:a1:3a:6c:0f:5f:44:
                    25:4c:9d:cf:b6:6d:39:c8:63:e8:10:10:38:88:13:
                    df:91:ad:fe:98:b0:01:6b:da:48:42:09:34:b2:9f:
                    9b:82:ae:4d:28:57:23:0f:e6:75:9f:92:c8:12:0a:
                    64:f0:4c:73:94:29:83:b5:79:7e:dc:d6:6f:5a:48:
                    38:79:0b:4b:57:6b:af:29:22:ee:16:e0:30:44:fe:
                    6c:8b:ef:ad:75:dc:67:96:9c:90:00:0e:3e:64:ed:
                    48:82:a4:84:0f:76:09:bb:a2:f3:32:45:8a:4e:f2:
                    21:c5:26:01:b2:8e:79:2b:7d:03:ef:ad:f9:8a:fa:
                    52:85:5b:04:38:45:cc:c2:45:c0:eb:7a:b9:73:8a:
                    87:94:63:80:3f:e9:34:90:2c:7e:66:36:e9:d9:a7:
                    21:2b:72:02:70:42:35:ee:6b:c4:35:3a:3e:d0:3b:
                    c2:84:17:e4:08:72:be:d0:c1:2d:fd:bd:8c:e6:de:
                    59:0a:c9:77:10:c1:af:5c:19:f7:aa:5e:6e:01:2d:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:49:D6:A3:84:23:C5:C6:6E:49:62:F8:CC:C7:D6:BB:0A:A4:D8:DF
            X509v3 Authority Key Identifier:
                keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:14:1a:c6:dc:bf:14:13:bd:69:34:ba:b5:79:41:da:30:c6:
         d5:71:45:ff:37:b5:7a:75:b2:1e:7e:d1:83:2d:1e:85:09:65:
         e4:a7:47:07:db:84:1c:ed:3e:10:0e:ca:9d:dd:b8:8c:b1:b1:
         f3:51:28:41:d0:d1:f3:97:ba:8f:fb:be:2a:f1:1b:84:42:7e:
         23:e1:a3:ad:98:23:e7:4b:16:af:fe:04:2c:c5:13:25:a5:21:
         a7:91:b8:9d:97:b2:2f:38:52:30:0b:e2:2c:af:b7:21:05:be:
         66:ac:7a:95:6a:24:a3:60:b6:4f:9f:42:83:58:19:5b:b0:ef:
         fc:cc:84:c1:aa:c8:23:b1:95:6e:31:99:d0:79:2c:70:9b:db:
         c7:72:09:65:9d:a7:d7:56:8b:ea:93:7c:a2:26:26:a4:7f:2b:
         d0:17:05:ba:a7:c0:1b:28:f9:80:d7:9c:1b:1e:cb:d7:54:9a:
         01:04:30:ec:eb:39:b9:86:84:23:b3:15:97:ea:f0:aa:fe:6a:
         1f:e5:26:c7:d8:be:b6:fc:39:1d:40:d8:4c:0a:f5:a0:6b:1d:
         2c:e1:79:5a:aa:c9:c4:97:8d:23:8f:e7:34:60:e2:fb:92:b4:
         3a:1d:d9:43:66:29:d0:4c:e9:cd:4d:3c:f6:dc:b2:dc:2b:1a:
         c8:e4:61:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:27 2025 by rpki-client