Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
File:                     5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft (raw, json)
Hash identifier:          9Zxhac2ojWgRFhDxDDx7TsM0xnEqIssFARmreRc/bxA=
Subject key identifier:   C3:3E:C1:77:9E:6A:51:EB:85:7B:09:67:98:FE:1E:4B:C3:B5:47:CC
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Certificate issuer:       /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial:       0197789CE9BF4183CDF1E604CBF180F32990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
Manifest number:          159B
Signing time:             Mon 16 Jun 2025 12:00:38 +0000
Manifest this update:     Mon 16 Jun 2025 12:00:38 +0000
Manifest next update:     Tue 17 Jun 2025 12:00:38 +0000
Files and hashes:         1: 2OeHcKfmsEyG-2LRs0NWXFV5C60.roa (hash: jZteFmx9inEQsnxXi9EJKFlZraBJ0Xs80P+ZZvDXyxY=)
                          2: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl (hash: jndqZPkDTCxZ4d6BRWaa+R6chrujqwz/SVtOPcbNmZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:9c:e9:bf:41:83:cd:f1:e6:04:cb:f1:80:f3:29:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
        Validity
            Not Before: Jun 16 12:00:38 2025 GMT
            Not After : Jun 17 12:00:38 2025 GMT
        Subject: CN=c33ec1779e6a51eb857b096798fe1e4bc3b547cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:09:39:49:85:cd:69:8c:01:ab:d7:04:e8:
                    32:da:e0:a7:16:ae:a5:a1:c9:82:1a:2a:f1:fc:96:
                    ee:eb:b9:e1:cb:05:76:4e:81:56:cd:82:9a:19:ce:
                    7c:05:39:6b:1f:39:e1:a0:1e:95:12:4f:e0:66:62:
                    8e:bf:28:59:55:3e:ed:3a:4b:ee:d9:1f:14:47:a9:
                    7d:80:54:3f:7b:2c:d4:af:75:48:d7:19:dd:99:a7:
                    e2:04:42:21:a9:ae:7a:46:9a:83:45:c5:ad:f6:d3:
                    df:7e:5a:ba:ed:e7:02:79:a2:91:90:94:91:a3:b8:
                    41:94:75:0d:e2:bf:aa:b2:0a:63:e6:51:d1:6d:70:
                    1c:44:4a:7d:a9:af:5c:99:d4:b3:0b:b4:ef:16:ac:
                    9c:c6:3f:02:f3:4b:c6:13:37:75:58:32:48:9c:b2:
                    37:3a:46:00:25:41:87:c6:0a:a5:1a:83:f3:c4:44:
                    2f:86:f2:87:12:f9:e2:8c:7d:9e:e0:5a:7a:02:3f:
                    c7:85:db:ff:54:40:e8:ae:bd:ff:5a:0f:5a:8b:6a:
                    c1:ce:a1:1a:8b:38:5c:e3:07:85:b6:a8:2f:14:3c:
                    e3:31:74:8b:2e:87:93:97:02:86:90:ee:22:12:2e:
                    05:e7:6c:ea:2f:dc:71:97:83:63:26:76:02:fa:c8:
                    24:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3E:C1:77:9E:6A:51:EB:85:7B:09:67:98:FE:1E:4B:C3:B5:47:CC
            X509v3 Authority Key Identifier:
                keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:19:a0:ce:48:11:16:a9:c4:56:99:04:96:b7:c7:85:6b:53:
         5e:e0:ee:c7:ae:6f:8d:7f:42:ca:8d:c9:70:78:f2:4a:d3:e9:
         cd:7f:80:7a:df:9e:5d:be:ae:f6:5a:f0:b1:e1:49:08:9a:f9:
         a7:7f:5e:e5:11:ec:9f:2b:9c:38:93:5a:9b:4e:84:80:3c:31:
         64:c5:fd:88:95:b1:46:c0:f0:85:e0:2a:a8:b1:e4:10:d8:0e:
         ff:03:1f:87:8b:68:be:da:a5:77:0a:b9:49:83:45:7b:ac:0b:
         6c:4e:bb:95:77:6c:35:3a:22:ea:70:4a:c4:be:aa:16:8f:8a:
         d9:cc:65:2d:7a:eb:c3:f7:ac:42:06:a2:f7:b8:5e:97:af:66:
         7f:7f:0c:bb:39:78:9e:01:61:21:b9:58:17:87:32:d2:6e:f2:
         df:22:2e:25:13:ad:36:fe:46:dc:2d:a9:5e:fe:38:cb:85:97:
         c4:f9:d2:40:d7:05:7e:a4:b2:b5:36:7f:56:2f:50:4d:e0:8b:
         6a:a0:5c:34:78:24:45:70:52:81:5e:ba:3b:f6:8c:18:ae:0a:
         b4:52:14:04:ff:d7:82:51:43:aa:f2:92:19:59:d5:c3:ba:a1:
         2a:c5:85:4e:18:8e:30:51:f2:7a:aa:e2:7e:b3:7e:24:dd:d4:
         27:b9:5e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:43 2025 by rpki-client