Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
File:                     F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json)
Hash identifier:          /57AZbcVnogtSwC5CWLw2FdsFh8wrqOzRR78T+jBLWM=
Subject key identifier:   3C:2B:47:31:1D:D4:85:9A:A4:5A:9A:2A:96:56:A3:CA:1F:93:27:E5
Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
Certificate issuer:       /CN=1792582aa0b18d6073592f121a6e563fec424672
Certificate serial:       01977F7B001EAE7A65D2DBB98CBF0684E28A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
Manifest number:          0637
Signing time:             Tue 17 Jun 2025 20:00:56 +0000
Manifest this update:     Tue 17 Jun 2025 20:00:56 +0000
Manifest next update:     Wed 18 Jun 2025 20:00:56 +0000
Files and hashes:         1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: OY/qPDSemtlXOwu+Mnr1DCJDaR72DIPDELQmbS/T9/Y=)
                          2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:7b:00:1e:ae:7a:65:d2:db:b9:8c:bf:06:84:e2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672
        Validity
            Not Before: Jun 17 20:00:56 2025 GMT
            Not After : Jun 18 20:00:56 2025 GMT
        Subject: CN=3c2b47311dd4859aa45a9a2a9656a3ca1f9327e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:ea:50:11:95:f3:40:47:b4:11:21:e1:15:
                    8e:f1:ab:d5:1c:56:25:4e:db:39:f1:98:c1:22:18:
                    8b:3c:cf:9d:ee:cd:fa:85:7e:85:5e:75:2e:5a:91:
                    e2:d6:09:83:6f:c6:85:55:d4:ee:3a:2c:68:2b:c2:
                    6a:f7:99:16:b9:1a:ee:4f:b2:8d:fa:88:14:d9:96:
                    2a:54:b7:90:2b:2b:9d:97:a6:cc:95:fb:f2:60:86:
                    5e:2f:41:80:33:84:30:e5:4d:1d:54:4f:c6:04:94:
                    24:ad:39:d4:3b:b6:3d:83:b0:57:40:a4:84:91:a3:
                    c6:1d:44:b8:b5:2f:01:86:79:5b:9d:41:c3:a5:b1:
                    62:6b:9a:74:c8:b5:d6:82:4e:48:0f:2e:be:58:e7:
                    f2:f3:3e:48:7b:d1:81:c9:0d:cb:ac:94:22:e4:ba:
                    3f:0b:66:23:40:3a:32:58:e3:67:25:60:f6:b0:50:
                    3b:72:51:32:d3:26:7f:af:52:3c:b5:3d:eb:b5:55:
                    19:62:a5:56:90:8b:b0:f2:86:62:52:a2:5e:fc:c6:
                    fa:c8:af:d1:16:28:ac:ec:5c:f6:05:d1:01:a3:b2:
                    b1:5d:1d:ff:9f:8b:68:d2:92:e1:7b:f3:86:d6:91:
                    f9:6f:42:f2:b9:3c:28:c2:37:67:16:e3:0a:de:e6:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2B:47:31:1D:D4:85:9A:A4:5A:9A:2A:96:56:A3:CA:1F:93:27:E5
            X509v3 Authority Key Identifier:
                keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:70:42:52:42:b5:f5:d0:d3:18:42:20:a8:e6:95:6c:32:
         0b:4e:41:b2:ba:c6:67:3a:ab:a3:5d:64:0b:74:61:28:cf:07:
         23:c5:0a:09:a1:28:47:44:43:ae:4f:f5:62:e5:ec:0b:57:fd:
         fc:47:05:83:f2:71:d1:fa:dd:3f:6e:13:88:c2:2d:bf:74:a9:
         6b:c5:64:02:c1:bf:d2:7c:1c:1a:38:30:86:3b:70:ad:16:3d:
         b8:1b:06:35:9b:41:bb:08:f6:b0:1f:5b:6d:05:78:2c:81:f3:
         d3:b3:39:6c:41:ee:b5:f3:a4:23:47:c2:d4:e1:cf:f0:29:99:
         82:dd:72:48:03:ca:12:7c:b3:eb:c3:f1:56:27:2f:e3:26:a0:
         af:85:7d:1d:37:fa:5b:e8:33:9e:cb:1d:0a:d7:2f:5b:9c:7b:
         b4:7b:13:69:de:86:f9:16:f7:7f:d4:36:d6:28:b3:8d:ad:11:
         77:ee:03:45:6a:a4:23:2d:98:50:4c:6c:93:1d:d6:0d:f8:bb:
         5e:c7:a9:e2:0f:b4:f2:12:6f:7d:c0:3f:b8:82:12:5d:e0:59:
         20:69:76:be:75:fe:e3:78:9a:ba:2a:64:aa:64:92:57:96:bc:
         09:8f:27:9f:4e:d0:67:22:de:69:f8:d8:e2:6e:ec:85:51:3e:
         9c:d9:76:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:32:05 2025 by rpki-client