Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File:                     _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier:          si/KToFXuQte6pQ5/UMQZcNzls2XyiYikccPkPCZMUg=
Subject key identifier:   B6:59:A1:49:BD:76:E6:E9:3A:35:24:90:6D:F6:4F:E3:93:53:50:10
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer:       /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial:       01976F2C4C00A24504AEC68C7534A387CF0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 16:01:03 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:03 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:03 +0000
Files and hashes:         1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: BU6nJ0O/Aau/Y8eiRrg+25TCpyxThytvWzoBmXv1i8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:4c:00:a2:45:04:ae:c6:8c:75:34:a3:87:cf:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
        Validity
            Not Before: Jun 14 16:01:03 2025 GMT
            Not After : Jun 15 16:01:03 2025 GMT
        Subject: CN=b659a149bd76e6e93a3524906df64fe393535010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0a:2b:19:e7:56:63:ea:82:e9:f0:f9:b1:79:
                    bc:19:3e:44:3a:2a:c9:2f:25:5b:98:80:d9:60:ce:
                    b7:e7:93:72:20:ce:15:77:4a:47:7a:fc:aa:c1:6b:
                    b6:29:99:1a:07:83:0f:19:4f:51:da:af:bb:74:c2:
                    c3:e8:cb:ac:dc:50:19:22:4f:cf:0c:c9:87:de:03:
                    d5:d7:5e:b8:05:ad:0f:3f:33:2b:15:e2:bc:20:33:
                    b5:98:a2:84:49:92:e9:d4:db:d5:75:86:be:6b:4c:
                    23:b4:8b:f0:5a:e6:14:bb:4b:13:8b:21:73:fb:be:
                    dd:e9:f8:a0:49:95:6f:21:86:b0:e1:c6:89:d8:cf:
                    e7:6f:31:fd:bb:81:d9:7b:94:03:5c:08:d7:e1:bb:
                    ba:2c:70:09:7c:af:67:c5:7c:b6:0b:00:c2:65:14:
                    16:24:24:00:44:90:41:1e:e1:8b:c7:8a:b4:db:5c:
                    bb:9a:59:42:b2:8c:d6:9e:14:5c:10:62:17:c6:b9:
                    b0:6a:13:03:ba:fa:ee:48:c2:f6:1a:bf:9b:95:9f:
                    79:bf:19:e5:7c:54:36:3c:1f:34:6b:cd:27:81:92:
                    95:ae:57:a3:c6:9a:bd:85:23:df:dc:2e:a7:16:ee:
                    bc:21:3c:1d:fb:9d:f4:55:e8:2b:db:9d:44:81:87:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:59:A1:49:BD:76:E6:E9:3A:35:24:90:6D:F6:4F:E3:93:53:50:10
            X509v3 Authority Key Identifier:
                keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:91:56:56:45:31:e5:44:e1:2a:e2:09:90:23:25:dc:e5:3f:
         1a:8b:36:8e:e8:ef:ec:9a:17:cd:6f:51:82:c1:0b:31:22:30:
         cb:77:95:1a:ab:3e:9a:ec:12:19:e1:11:32:3c:ae:93:20:96:
         cd:f6:b7:cc:91:a2:f1:91:27:1d:3b:05:75:31:fd:31:6b:1e:
         3f:8d:d8:c1:9e:72:ee:26:90:76:4f:d6:22:cf:d6:05:95:fa:
         d7:08:e4:36:f7:c3:e9:09:7b:18:33:73:a9:bf:ef:9a:dc:80:
         91:c1:46:f3:d5:08:28:44:03:72:6c:12:c8:71:b5:73:47:82:
         13:66:42:c7:fc:e5:8b:6a:46:21:72:8b:df:3a:d9:37:b2:be:
         bc:3e:9b:e4:18:36:48:d6:23:65:c3:6d:cb:2b:9e:bd:16:d4:
         bc:16:3e:2b:87:18:95:58:e2:f1:32:e0:3d:0b:f5:6e:b1:08:
         65:ba:ec:1f:5a:42:27:5a:ac:b7:f9:a4:a3:d2:e5:1b:e8:bc:
         fb:01:56:d6:5d:75:de:88:4b:a7:06:4d:60:e6:c8:44:6f:29:
         25:b0:7c:57:38:a0:de:b0:a2:ca:25:b9:e0:4a:9b:d4:bc:25:
         6c:81:f7:dd:42:ee:b1:d5:a4:cf:ba:6f:3d:19:79:29:7e:3a:
         df:36:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:13:27 2025 by rpki-client