Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
File:                     51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json)
Hash identifier:          gIVOA5OaBA/V6PrDFZ04HB+wjwiTee4hV3Gi45TLJAI=
Subject key identifier:   CC:67:38:13:0C:58:19:73:DB:F9:55:59:15:11:A2:C3:B5:F1:59:B3
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Certificate issuer:       /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial:       01988A6A5AF24B1C3192A1A360B7DBCF274F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
Manifest number:          05BD
Signing time:             Fri 08 Aug 2025 16:01:22 +0000
Manifest this update:     Fri 08 Aug 2025 16:01:22 +0000
Manifest next update:     Sat 09 Aug 2025 16:01:22 +0000
Files and hashes:         1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: DhTiW8j/5Rr4GZbDWrHw1qXPaKWFojqojdbLVSpwbT8=)
                          2: Ylfj2CG1V0DaK4f8uH_BBUtoGWA.roa (hash: CAUuMYHSplNovMOYBe0Qjx/057sd/Jrw0wK6ui3RBo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:6a:5a:f2:4b:1c:31:92:a1:a3:60:b7:db:cf:27:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
        Validity
            Not Before: Aug  8 16:01:22 2025 GMT
            Not After : Aug  9 16:01:22 2025 GMT
        Subject: CN=cc6738130c581973dbf955591511a2c3b5f159b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:ed:4d:4d:c2:d9:78:de:ae:ce:c9:09:17:
                    64:8f:dd:29:81:d1:aa:53:94:45:08:c7:e8:1e:3c:
                    2f:44:5b:bb:f9:5a:1a:2a:7e:52:e9:39:5f:44:34:
                    58:6e:8c:6f:3f:7c:f8:17:7a:0a:93:03:5b:8a:3c:
                    62:8a:ed:a1:18:d4:c2:c9:28:49:4d:87:5a:7a:e6:
                    63:37:60:e5:31:f1:dd:f5:03:4c:e3:98:30:3c:8a:
                    4a:81:67:88:35:35:92:13:05:b6:34:34:dd:ea:44:
                    2c:61:e1:20:f8:2f:cb:51:82:fe:52:6f:b5:a7:34:
                    ca:86:6e:fc:50:df:d2:08:3f:f8:44:f1:2c:45:b7:
                    2c:ca:60:32:74:5d:95:22:39:4b:c2:ac:e4:e4:09:
                    19:64:f6:e8:67:e3:be:59:23:24:68:ba:9f:68:f4:
                    cd:9f:6b:b5:76:f2:5b:94:0b:28:d2:8f:7c:c3:98:
                    7a:e0:59:5d:fe:ef:71:8b:99:c6:0f:54:90:28:ff:
                    7d:20:72:25:43:d5:f1:1b:cf:f8:6e:34:91:4b:8b:
                    fe:b7:f0:72:7e:8a:8a:4b:ea:67:01:5b:5b:21:38:
                    79:d8:34:e4:b2:19:de:e2:64:20:41:94:cc:ad:95:
                    db:49:f3:69:28:80:5b:c1:cd:30:b0:2c:4a:cf:9f:
                    40:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:67:38:13:0C:58:19:73:DB:F9:55:59:15:11:A2:C3:B5:F1:59:B3
            X509v3 Authority Key Identifier:
                keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a8:e5:09:b8:5e:77:ae:13:a4:13:98:18:d8:12:fe:1c:46:
         62:77:29:13:1e:95:51:46:11:13:31:01:55:64:14:8e:8c:c7:
         0f:19:90:22:cc:b8:6f:15:a7:5f:bf:c5:78:32:62:62:b0:2c:
         49:69:2f:2e:cf:fa:6b:3b:ea:ab:db:33:df:c7:6e:04:75:56:
         6b:19:3b:b4:55:a6:37:2d:c3:9d:a2:f5:a4:53:ab:ff:6d:16:
         b7:d7:a8:9b:f4:28:28:e7:99:71:92:3e:cc:cb:03:bb:5e:79:
         9a:89:fb:ff:a0:1c:b2:ff:48:e8:7c:00:09:1d:21:a4:d4:b3:
         6e:6a:10:59:fe:91:9f:95:03:95:ab:22:2d:41:a2:f3:2b:ef:
         58:2b:e8:6a:b0:41:ed:32:e3:ba:b8:1f:af:ab:0d:75:12:e7:
         9e:73:58:68:91:88:e0:54:54:aa:a5:f2:ba:04:e6:21:05:cd:
         54:88:a6:21:0b:ab:e6:ec:39:63:58:6a:eb:82:3b:17:98:86:
         10:5e:b1:63:d4:c6:7b:84:0f:cd:3b:2c:e1:b6:94:3b:43:ed:
         99:6a:a6:ba:e4:fa:a6:7b:1e:1f:b1:5c:ae:0f:9c:cc:e9:94:
         70:dc:71:ba:b0:23:b8:0c:cd:f6:bd:17:69:91:85:d9:ef:7d:
         be:a7:56:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:44 2025 by rpki-client