Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File:                     V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier:          WTy03UwyUtNq/jrcv/bkc8XrDuE8Px22w8ELyMaE1mE=
Subject key identifier:   5D:EF:E3:C3:4D:4E:B4:33:7A:B9:C3:58:2E:A2:F2:EE:30:79:5F:4C
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer:       /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial:       019872CF37658C5388E502E6F10BAC9A7605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number:          1301
Signing time:             Mon 04 Aug 2025 02:00:39 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:39 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:39 +0000
Files and hashes:         1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=)
                          2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: 6SQ+Td08E7iCpRHF1A7d890z5/uXgh6wvoR4RFVTkpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:37:65:8c:53:88:e5:02:e6:f1:0b:ac:9a:76:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
        Validity
            Not Before: Aug  4 02:00:39 2025 GMT
            Not After : Aug  5 02:00:39 2025 GMT
        Subject: CN=5defe3c34d4eb4337ab9c3582ea2f2ee30795f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2d:6e:54:ef:66:ca:62:37:29:7b:68:26:1f:
                    35:eb:21:30:4a:54:a6:7f:af:8c:72:65:9c:ab:c1:
                    3d:a2:27:0b:17:87:66:44:e1:12:8e:5b:05:f2:60:
                    07:31:b7:43:3b:cc:1f:2c:d1:ca:8a:b2:8e:3a:26:
                    d6:16:0d:00:1f:bd:97:da:25:71:b7:42:8c:44:0a:
                    be:6c:b7:08:02:ab:51:87:0b:9f:f8:9b:a5:12:a0:
                    06:73:01:98:2a:85:1a:10:a8:fd:f2:a4:21:e0:43:
                    21:f1:dd:ba:74:5a:3e:d4:c6:e8:9e:71:08:77:42:
                    14:27:14:d2:67:01:0f:fb:d1:fd:a0:b5:49:94:83:
                    c6:eb:8e:b2:bf:86:38:7f:da:51:e9:46:0d:97:67:
                    15:3e:42:7b:40:d7:3a:a9:a5:37:c8:b6:ab:28:bf:
                    c1:55:c1:13:55:85:6d:29:73:36:69:61:50:d2:99:
                    1a:46:2a:09:a7:51:15:6c:b4:b8:a3:42:9d:d7:f7:
                    77:4c:95:25:d0:87:e9:c2:15:0a:50:ea:69:3e:4c:
                    42:cd:46:b1:ff:c4:e9:9b:0f:35:b5:ab:85:e0:ec:
                    d8:9e:60:20:61:0b:66:37:85:25:a8:c4:05:c9:fa:
                    9a:59:58:52:80:4f:10:50:91:64:08:f0:6e:06:e9:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EF:E3:C3:4D:4E:B4:33:7A:B9:C3:58:2E:A2:F2:EE:30:79:5F:4C
            X509v3 Authority Key Identifier:
                keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:57:78:eb:33:68:69:dd:f6:ad:e1:fc:43:7c:60:9c:6e:
         c3:d8:6d:c1:75:b5:42:1a:97:cb:4d:1d:34:11:10:08:c2:8b:
         50:13:ff:85:2c:49:f5:06:46:cd:a8:a1:20:54:2d:63:6a:cd:
         f0:31:1f:c7:fc:11:dd:a8:0a:8a:3f:80:bf:ae:3a:25:19:76:
         68:d6:72:8a:5c:93:03:91:d6:fc:02:67:7c:a7:1f:3c:f7:39:
         3d:c6:c4:34:d9:a1:8e:31:44:a1:22:c1:6a:52:b2:41:32:5b:
         cf:26:eb:71:cf:82:e5:19:8e:60:68:60:54:ec:ba:08:18:24:
         e2:c6:e0:67:d3:6c:e1:f1:6c:2a:31:c3:12:20:0c:c8:71:f3:
         f9:c7:52:4e:ee:06:39:9f:0b:15:f4:da:44:b4:71:a0:b8:2d:
         f2:07:96:5e:9d:c5:e6:14:40:bb:e0:9c:81:89:a5:96:f6:cf:
         88:c4:ea:6c:65:d8:6e:d9:f6:c1:10:11:67:93:d0:1b:83:cb:
         df:4d:16:ca:e8:62:65:6e:c0:83:d5:fb:40:85:10:a5:70:62:
         cf:fa:05:b2:74:8a:81:85:74:eb:fc:98:4b:0e:28:fa:a2:68:
         e8:06:8f:d5:d6:61:f8:e5:09:57:d2:b0:bb:7c:54:3b:1d:53:
         42:0d:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:21 2025 by rpki-client