Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File:                     i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier:          HZ0Z9ooBwT2uaEJ4uBvsi41irKhVCdVrPO2+Y0Uiajg=
Subject key identifier:   49:9F:5D:BC:A9:34:AD:89:5F:1B:16:B6:C4:BB:67:9B:32:91:C4:23
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer:       /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial:       01987E662A46008FA402C503F5FE7BF284E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number:          1469
Signing time:             Wed 06 Aug 2025 08:01:21 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:21 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:21 +0000
Files and hashes:         1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: 3A0qTaLXg0FeMvEaOv3ZnZR9IaU89oHdYT49R3YQSwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:2a:46:00:8f:a4:02:c5:03:f5:fe:7b:f2:84:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
        Validity
            Not Before: Aug  6 08:01:21 2025 GMT
            Not After : Aug  7 08:01:21 2025 GMT
        Subject: CN=499f5dbca934ad895f1b16b6c4bb679b3291c423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:47:17:e5:36:50:0a:9e:c6:e6:da:67:ec:8e:
                    21:37:80:e8:2d:c0:b5:a8:12:41:2b:2d:f2:4c:72:
                    20:d7:27:07:77:87:d7:16:d6:af:51:53:90:b1:0c:
                    62:46:eb:6e:65:e8:0a:c9:e9:fe:35:80:c3:ac:b1:
                    f2:46:39:bd:ac:86:40:56:06:31:2e:f5:a8:11:23:
                    c4:15:3c:10:14:56:ad:d2:17:2d:b8:75:a3:6a:3b:
                    69:bd:8b:15:e0:89:0f:10:7f:8d:cf:b5:84:67:27:
                    76:05:24:f0:a3:10:2d:3d:55:8e:3c:2c:c8:90:1a:
                    03:c7:d8:b7:21:df:ed:8d:ee:1c:03:5a:9e:0c:55:
                    f3:90:b2:2e:94:36:ef:8a:60:d6:1d:92:ff:31:3e:
                    0b:13:85:b0:66:c5:24:2a:25:e7:c6:db:ad:3b:95:
                    11:9f:79:3b:1c:7a:df:a1:81:2e:7e:06:3a:41:56:
                    76:67:52:c9:6f:32:9d:22:4b:88:24:23:ae:32:53:
                    75:1a:d6:6e:9d:ec:3e:af:87:73:ce:6c:72:78:a8:
                    99:5e:92:4e:98:b9:05:15:fe:c7:02:1e:99:75:d5:
                    47:66:79:9a:05:bf:bb:73:1c:1f:54:cd:af:89:6d:
                    17:1d:0a:60:bc:d5:61:e5:09:ec:d6:5f:c5:ef:c5:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9F:5D:BC:A9:34:AD:89:5F:1B:16:B6:C4:BB:67:9B:32:91:C4:23
            X509v3 Authority Key Identifier:
                keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5d:e2:a6:c1:8c:dc:6a:42:6d:4c:a9:18:71:2c:8f:09:0e:
         15:62:5d:29:1a:53:75:4e:9c:d1:0d:ef:a1:c6:6f:b4:74:3c:
         71:8a:10:e9:0a:9c:98:d5:60:b2:54:e0:0e:4e:71:67:be:eb:
         45:69:2b:5a:0a:74:74:37:08:c1:08:c3:d7:58:93:e5:82:00:
         e8:a9:ef:f2:68:ef:df:40:0b:46:26:75:72:77:d2:d5:ba:6a:
         c3:71:da:54:66:f1:ef:64:c1:ae:2d:da:9c:0c:64:c0:1c:91:
         19:e4:0e:97:20:77:93:32:d0:c5:72:46:20:45:7e:84:37:af:
         9f:d8:31:a6:51:e0:ba:7a:d7:39:ca:22:e6:dd:ef:5b:dd:c7:
         8b:cf:24:f5:e2:ed:2d:c9:1f:aa:ba:36:11:24:21:a8:81:69:
         65:5c:22:3e:fe:9c:4e:cc:50:2e:c7:8e:54:d6:ff:53:25:df:
         0b:e5:5d:e5:b3:96:a1:9c:21:e2:fc:2e:9b:a9:49:a9:92:a8:
         8e:6a:49:62:82:d1:75:0e:ef:53:18:06:39:ba:b8:be:9c:5f:
         7a:2b:75:1e:10:05:97:6d:df:41:1c:a1:40:b1:d9:c4:5c:2d:
         26:93:42:09:aa:d7:d3:a8:3a:be:97:51:99:dc:90:f9:5f:b3:
         a9:85:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:01 2025 by rpki-client