Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
File:                     5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json)
Hash identifier:          b9r2tvfmw29dAqJDLF5OtzsBCfcheADmddImCOuve6M=
Subject key identifier:   E2:FC:25:8D:5B:0B:D6:D7:C0:58:75:96:40:5A:84:10:9C:20:91:E9
Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
Certificate issuer:       /CN=e410972cc459568804bb4b791d7c13cfb2283883
Certificate serial:       019891B5362AF1124DCECDA7CEBE45B7E889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
Manifest number:          13F5
Signing time:             Sun 10 Aug 2025 02:00:28 +0000
Manifest this update:     Sun 10 Aug 2025 02:00:28 +0000
Manifest next update:     Mon 11 Aug 2025 02:00:28 +0000
Files and hashes:         1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: nWgrenMv8b7nZoKKReaJ7akuayF84SP1urXBfJ/br/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:b5:36:2a:f1:12:4d:ce:cd:a7:ce:be:45:b7:e8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883
        Validity
            Not Before: Aug 10 02:00:28 2025 GMT
            Not After : Aug 11 02:00:28 2025 GMT
        Subject: CN=e2fc258d5b0bd6d7c0587596405a84109c2091e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:42:4b:6f:9a:68:8f:60:b9:65:14:2f:5c:
                    f0:c1:48:98:fe:c1:0c:cf:20:2f:83:af:1d:0a:f1:
                    df:10:6c:8f:a3:75:6c:b7:28:7c:64:b9:b3:5b:cc:
                    07:02:26:66:fb:ea:13:b0:8d:24:e3:d8:13:57:07:
                    f9:6f:38:00:66:36:5a:ac:60:38:b3:76:6a:3a:1b:
                    91:cc:4e:95:89:60:0a:42:7e:17:8c:dd:a2:ab:78:
                    9e:92:40:1a:34:83:30:9a:54:e0:07:cf:3a:ff:a5:
                    ca:cf:72:ac:06:a2:f4:8c:f3:87:15:d3:ae:76:a2:
                    6f:e6:fe:4b:13:25:7c:21:cc:5e:91:04:22:8f:00:
                    ba:35:62:f0:37:84:14:25:bb:51:dd:01:50:eb:1f:
                    e6:1e:f1:87:66:8e:8f:d0:aa:fd:e9:42:da:b8:ba:
                    f7:83:b8:d3:6d:18:59:2b:c5:df:3f:a2:46:05:8d:
                    4d:5e:86:d9:6c:54:c5:ee:ee:6f:9e:e8:64:9a:c1:
                    f0:00:7c:e4:4e:87:0d:7a:8c:58:c7:c4:13:9f:b1:
                    45:ce:9b:2e:e3:4e:5e:e1:f6:26:a7:54:53:0e:34:
                    e7:56:61:c7:27:29:0e:11:97:69:08:0b:e7:69:d0:
                    70:51:4a:cf:56:56:54:b3:a0:e6:32:fb:6c:ac:35:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:25:8D:5B:0B:D6:D7:C0:58:75:96:40:5A:84:10:9C:20:91:E9
            X509v3 Authority Key Identifier:
                keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:67:68:70:fb:39:e3:fe:fd:bb:9c:a1:f0:6f:73:1b:4a:68:
         94:e8:31:7c:53:8e:09:1b:e3:3c:70:a1:c2:7f:b4:07:6a:84:
         b0:fd:0f:95:bd:14:2a:a6:76:15:fa:f8:6d:6f:59:d4:bc:7c:
         ac:92:63:c3:12:d8:83:58:4a:d7:2d:a8:10:ee:b4:72:9f:51:
         51:59:2e:78:66:8e:20:f5:50:7d:d1:a0:49:e1:97:bf:88:78:
         c9:25:1b:fb:17:61:f8:f4:26:98:c9:d5:81:8a:11:78:12:13:
         f1:d3:63:76:3c:88:00:e4:2d:9e:14:61:ad:92:27:7b:d3:e4:
         13:dc:38:ab:1e:04:94:83:53:6c:10:87:cf:ae:d0:0a:18:de:
         ad:41:ea:b3:27:b0:d7:da:a6:8d:92:32:b6:a4:b8:47:80:e4:
         90:08:93:22:bf:24:c6:63:8d:7a:9f:c3:72:20:86:23:60:7d:
         db:25:51:08:25:8e:d8:e0:a3:d0:10:89:05:d0:49:ee:97:d3:
         ed:2d:b6:57:12:0e:1c:29:05:2b:8d:b7:e9:7f:dd:49:89:b1:
         dd:03:8f:b4:2d:8d:1b:53:b7:6f:f8:3e:8b:e6:a2:ea:23:b4:
         d0:b6:f7:24:63:8b:78:69:60:12:d8:67:b5:63:f2:8d:5c:7b:
         11:7d:f4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:50:13 2025 by rpki-client