Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
File:                     f5tM_cmw2ePDHg67gebxscu9yeQ.mft (raw, json)
Hash identifier:          SzOnzi6tzVWAOndNuM7diHbqghFONbA5si99dt6UzVQ=
Subject key identifier:   8D:6C:85:01:7E:AF:01:7D:0C:EC:71:74:F5:D8:66:60:0A:0B:A3:CE
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Certificate issuer:       /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial:       01989FDEEC279CE666A2688A78D29A6443D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
Manifest number:          0C0D
Signing time:             Tue 12 Aug 2025 20:00:43 +0000
Manifest this update:     Tue 12 Aug 2025 20:00:43 +0000
Manifest next update:     Wed 13 Aug 2025 20:00:43 +0000
Files and hashes:         1: f5tM_cmw2ePDHg67gebxscu9yeQ.crl (hash: KPD8wr6gTtUCcTRo1myyt1+F/ODFmNXoY6R1kj634Mg=)
                          2: zalftAHY0_vxWVcBQe7AUMKmyP4.roa (hash: IBVaMGf4826YIxpRZf58g0sJemKA+k9XLc2S0P/3S8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:de:ec:27:9c:e6:66:a2:68:8a:78:d2:9a:64:43:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
        Validity
            Not Before: Aug 12 20:00:43 2025 GMT
            Not After : Aug 13 20:00:43 2025 GMT
        Subject: CN=8d6c85017eaf017d0cec7174f5d866600a0ba3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:61:bc:73:be:80:be:15:55:24:1f:0e:28:
                    b3:29:11:6e:c7:d0:db:4e:16:ec:3c:a3:32:46:45:
                    a8:54:4b:10:3a:c2:5a:0d:39:c4:f1:f9:3f:ac:08:
                    b9:6b:4b:d2:fc:d4:4b:48:ce:8c:8a:c0:d6:d7:d0:
                    3a:2d:18:da:59:86:d2:43:2e:15:70:9c:a2:36:d4:
                    b2:2a:4b:a5:14:b7:ee:93:4a:08:d4:a4:b9:d8:41:
                    ec:c4:5a:5f:0d:65:44:bd:30:bd:91:8d:c1:b7:95:
                    3b:2e:c9:74:27:9c:c9:0a:66:de:4d:d9:09:af:3b:
                    e9:56:20:21:ff:b2:b3:29:ad:38:7a:70:20:04:24:
                    69:e2:e9:96:4b:6c:e4:48:29:da:de:bf:81:97:78:
                    2b:65:4e:da:76:21:7f:29:7f:59:a9:c3:04:81:8b:
                    9e:a7:d7:60:54:37:38:cc:e2:60:72:c4:97:2a:ab:
                    21:d3:00:75:39:4e:62:36:c0:fe:8a:03:93:59:88:
                    43:ca:93:69:f1:aa:65:9c:09:10:95:88:36:11:28:
                    4c:59:f2:27:12:c0:3a:34:94:9a:fd:17:5b:71:4e:
                    f6:20:44:d2:c2:a5:f2:ca:9d:b7:6e:8c:0a:74:94:
                    34:f2:d8:d2:ce:2a:ab:51:03:af:3d:71:ef:8f:35:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6C:85:01:7E:AF:01:7D:0C:EC:71:74:F5:D8:66:60:0A:0B:A3:CE
            X509v3 Authority Key Identifier:
                keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:77:01:c8:b1:20:20:5d:fa:9a:21:ed:d6:b8:4c:a9:d4:3a:
         b0:5b:33:a8:29:a9:82:f6:5c:69:09:dd:87:eb:5e:79:bb:a6:
         f0:b6:74:1c:0a:ae:7f:f7:19:a1:49:0e:83:a6:2b:58:89:9a:
         34:d1:3b:c5:4b:65:ea:54:8d:2e:b2:d5:02:a4:31:6b:68:ff:
         79:49:ca:a1:eb:4d:9a:ff:0c:44:b2:6a:e8:91:f2:c6:82:c1:
         c4:e9:db:49:98:c4:b1:4c:ca:0d:6b:b0:5a:40:3a:54:5c:9e:
         33:6d:11:2b:5f:b4:76:f8:f0:51:b9:98:fc:f0:4e:eb:68:4b:
         a0:83:2a:83:e5:51:84:31:4b:ec:d0:cb:08:81:0b:03:84:d1:
         85:b8:48:bb:d5:15:34:f5:10:81:97:6e:37:b2:fb:b5:60:86:
         28:22:14:fb:c8:9e:f3:5e:21:af:b6:88:17:5f:fd:0c:4d:2c:
         5f:68:7a:d8:36:51:b7:83:18:42:64:69:ae:13:49:e2:a2:88:
         a3:5d:7e:70:6c:29:82:13:0a:4f:3a:bd:b2:b8:2f:6a:76:3c:
         c2:90:bc:06:70:f5:96:b0:82:1b:be:39:73:ee:66:f5:91:5a:
         3b:24:42:44:04:20:2c:bf:e9:2c:dd:e2:85:be:58:ad:3a:51:
         e6:08:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:20 2025 by rpki-client