Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File:                     5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier:          tcnkJ6L/h0ih5JyWCyqjxhQPsX/4OZCdyx30C8fIqFw=
Subject key identifier:   DA:E7:AE:B8:D4:BA:1A:FD:CC:51:87:1F:AD:B7:E0:D0:B9:05:73:82
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer:       /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial:       01989600B9185AD0F3193645FD8644FEABD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 22:01:26 +0000
Manifest this update:     Sun 10 Aug 2025 22:01:26 +0000
Manifest next update:     Mon 11 Aug 2025 22:01:26 +0000
Files and hashes:         1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: 0RIraW2xSbNYyx9JV/3HjO0/vNcqNQO4aXcM8zxiQ74=)
                          2: orFnLXI1TH7Jt_MUuyCNlezlJcQ.roa (hash: hsQhpxV8CsTitmZs0YwImGnMA+twiLDEhUnDv5rariM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:00:b9:18:5a:d0:f3:19:36:45:fd:86:44:fe:ab:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
        Validity
            Not Before: Aug 10 22:01:26 2025 GMT
            Not After : Aug 11 22:01:26 2025 GMT
        Subject: CN=dae7aeb8d4ba1afdcc51871fadb7e0d0b9057382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:70:6f:e8:30:42:58:d5:4a:0d:84:d6:c8:
                    80:90:5c:1c:f3:5f:ed:a0:32:6b:7b:af:2c:33:89:
                    8a:5f:2d:ef:9a:c8:7e:0a:4c:66:05:38:6b:87:e0:
                    87:74:d5:de:77:a0:37:64:0f:e3:fb:8b:75:73:8e:
                    45:a3:c2:21:d4:39:11:97:e9:ba:1f:2a:19:73:32:
                    e7:4d:e7:0d:d3:c7:47:a4:21:50:86:cd:b3:03:a4:
                    de:d5:d0:79:a3:4f:a0:15:75:d0:55:a4:d9:b4:c7:
                    6d:73:c2:97:f0:73:95:3f:d1:15:01:65:a4:5d:73:
                    90:99:51:af:b4:65:af:3f:3d:b7:dd:9f:71:70:41:
                    d5:a0:2f:b1:f1:fe:17:9e:46:6f:c0:e0:b3:0a:e0:
                    6f:a6:32:95:3c:48:a4:92:5c:a7:fd:ca:cf:9f:fc:
                    39:81:c4:ac:27:fe:fb:c3:08:65:20:26:9f:5d:4a:
                    07:64:06:fa:6d:34:a7:0e:ac:d9:9b:06:24:8d:89:
                    3d:a6:b2:6e:6d:c9:9b:2b:b5:f6:a6:7c:1b:3e:2d:
                    7f:95:2f:58:bf:23:77:fa:f7:ba:41:be:76:b5:92:
                    24:4d:62:d4:eb:99:0e:12:13:aa:27:dd:38:05:05:
                    9c:90:35:d1:91:d1:82:ca:ec:db:b2:3f:eb:ce:e4:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E7:AE:B8:D4:BA:1A:FD:CC:51:87:1F:AD:B7:E0:D0:B9:05:73:82
            X509v3 Authority Key Identifier:
                keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:28:8a:37:e6:5b:f6:bb:ac:ce:4d:6b:97:e3:bb:3d:1f:23:
         76:49:1d:2b:18:8f:f3:14:8e:7c:b9:02:a4:67:d2:1d:16:15:
         08:7f:58:c7:37:16:9f:d4:08:58:c8:a7:4a:c0:25:d3:62:dc:
         d1:d0:96:b6:26:ea:1b:e6:95:f0:da:62:39:98:15:3d:66:71:
         cd:45:68:70:86:6e:ed:27:82:68:7f:f9:3a:d8:17:2d:9e:54:
         ff:1a:06:26:32:99:d3:0c:97:a6:8d:17:4c:3a:57:63:36:c0:
         d7:cf:e9:9f:b7:0f:b4:ce:e8:bc:5a:c3:6a:f0:ce:c9:2d:01:
         2b:da:90:0e:c3:d1:00:70:3f:4e:c0:b6:a2:76:0d:6e:12:49:
         53:98:b9:fb:9b:fe:54:dc:e8:d4:17:8a:82:ee:4f:22:de:b8:
         89:6b:54:07:0f:61:a2:f3:36:da:af:42:d2:0c:93:23:61:49:
         2d:95:1f:b8:78:30:11:b0:b5:c0:21:46:77:7b:f3:35:c5:66:
         d6:83:c4:a6:6d:82:0c:85:35:54:5a:3a:97:62:14:d2:62:6e:
         4e:ff:1b:ce:cc:e6:db:8c:53:3e:61:23:ab:2d:36:e2:d0:46:
         97:df:e3:7c:5f:92:9f:83:ae:9c:39:55:3f:ab:58:11:e0:53:
         20:da:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:18 2025 by rpki-client