Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
File:                     5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft (raw, json)
Hash identifier:          yloDjL5mf0yGQFSHaBuCQGb+ckKvxJMsumSC5AdzYiw=
Subject key identifier:   3C:D8:39:1B:AF:1C:F9:59:CF:1A:C1:81:91:CE:AA:4C:5E:E6:A5:1C
Authority key identifier: E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75
Certificate issuer:       /CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
Certificate serial:       019A4EF530C3AE74188D2A11A347CF07095F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
Manifest number:          0711
Signing time:             Tue 04 Nov 2025 13:01:22 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:22 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:22 +0000
Files and hashes:         1: 5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl (hash: odtc5BZXtd9ArJDUZ3+gVuK9YSTTBHHOzVa0t0WFr/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:30:c3:ae:74:18:8d:2a:11:a3:47:cf:07:09:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f88630e8a6362e9951dfd9ad59a52c6bf54e75
        Validity
            Not Before: Nov  4 13:01:22 2025 GMT
            Not After : Nov  5 13:01:22 2025 GMT
        Subject: CN=3cd8391baf1cf959cf1ac18191ceaa4c5ee6a51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:12:c2:80:61:d1:6a:63:a8:ce:22:ad:57:29:
                    d6:f4:57:a3:77:b3:e1:b7:f9:3e:8f:a6:92:f6:62:
                    4a:a0:a7:18:34:1c:72:fb:44:c4:f8:5a:7f:03:ce:
                    75:d4:9e:ef:9f:be:37:94:7d:06:5d:ba:db:19:4a:
                    88:cd:d2:e3:f8:39:5d:00:fe:da:3c:3b:10:bb:b8:
                    13:91:ba:a0:88:e7:ca:d1:12:6c:e1:a4:4c:71:95:
                    99:95:a2:11:ce:3e:c0:7f:78:1b:01:f9:03:ea:ec:
                    4f:53:28:dc:41:fd:a0:86:6d:b2:fe:65:00:31:8e:
                    77:44:55:5c:06:5b:64:f4:10:b2:9a:eb:92:bf:21:
                    1d:4b:09:f4:bb:7c:8c:43:e2:96:0f:ee:b4:b0:2e:
                    6c:9d:17:f1:f5:c4:e4:52:48:a1:ba:e1:68:88:90:
                    36:1d:4e:81:43:af:c5:11:a5:d4:45:ab:55:01:19:
                    66:81:41:c3:ee:30:ec:9a:72:45:ea:4b:e9:ab:ac:
                    d5:70:29:45:3b:7c:ce:9b:3c:a6:36:21:44:92:60:
                    3b:28:ee:b2:44:ed:b4:c3:cd:1a:d3:6a:22:bd:3d:
                    cd:8c:45:3d:7c:14:72:94:16:92:a7:3c:5e:95:87:
                    4a:0a:7c:3c:6a:6e:e0:a5:5f:40:16:1e:74:d8:8c:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D8:39:1B:AF:1C:F9:59:CF:1A:C1:81:91:CE:AA:4C:5E:E6:A5:1C
            X509v3 Authority Key Identifier:
                keyid:E5:F8:86:30:E8:A6:36:2E:99:51:DF:D9:AD:59:A5:2C:6B:F5:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/026744-966e-4268-8137-43a049e0b6ce/1/5fiGMOimNi6ZUd_ZrVmlLGv1TnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4c:a0:e9:54:46:15:b4:02:ac:d3:8a:9e:61:36:98:f3:77:
         aa:f0:d4:1a:92:3d:f3:4f:d0:94:e0:a9:d6:06:a6:ac:4c:0c:
         be:c3:94:c3:92:18:bf:ce:db:40:d2:b0:af:15:aa:5a:07:df:
         f4:af:fd:49:0a:b8:92:fe:1b:06:11:6d:cb:59:fe:0d:d4:33:
         1c:d5:3d:62:ae:af:21:63:25:34:4a:21:5c:e2:b4:73:f2:ef:
         4c:59:48:db:73:7a:20:d9:ee:c0:1a:1e:50:ff:78:7d:39:40:
         47:76:67:5d:3c:d1:8a:f3:d5:4a:8c:38:36:d6:f1:ea:64:14:
         28:db:e7:ad:0f:cb:be:0e:2b:d1:e9:10:5b:03:2b:1c:5b:88:
         e8:d7:b8:0e:0e:8f:e0:3e:c1:9f:3c:3d:a3:38:ec:35:d7:b2:
         96:3a:b1:d6:f5:5d:d0:a3:39:4c:56:45:5c:17:cf:f0:c0:d7:
         9a:ee:de:ca:94:8d:d0:42:2c:db:ef:75:dc:4e:76:dd:c2:14:
         a1:73:a7:ab:6c:3c:e8:97:03:51:10:97:42:e6:84:a7:54:4a:
         d2:db:9b:5d:31:bd:d4:f2:3f:8e:7d:b7:8a:87:ad:aa:1c:69:
         41:e0:75:2d:c1:f1:04:c0:db:cd:b1:6f:18:dc:dc:49:a6:f2:
         58:24:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:35 2025 by rpki-client