Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
File:                     5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft (raw, json)
Hash identifier:          0CwKF/tZLX4/Y9m6zi+5/nEHM72Z7LfrIMe+A6lS0KM=
Subject key identifier:   DC:F2:0E:F7:65:3A:A5:80:4E:B1:30:15:1B:3E:8E:52:88:19:76:13
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Certificate issuer:       /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial:       01988EEBE1A6F77744CD9F7E0BAB99F632D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
Manifest number:          0EED
Signing time:             Sat 09 Aug 2025 13:01:20 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:20 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:20 +0000
Files and hashes:         1: 5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl (hash: SyCZyE2MiQiVZPfeCttM3wkZs4oGGBVlq1TwUAKB1e4=)
                          2: OW3B1N5hPEzvlqiiwwyRQqXGtGw.roa (hash: BA7rjKrivNOmsfVWQtK8ZoacgDY48HHJ2LHTpwM8by0=)
                          3: Zc1OpaEScpUAFoK2KIwQ3bNOjEk.roa (hash: Ycn1+SSx44zVA79knmhpwAl0wsmj/W2NDIoNvR4yRPE=)
                          4: as-zC8jpSJGO4uxCc4_xuMoOOU0.roa (hash: H/3CCPbJG2nng0Pq02AL9scecswnyVINc6vLH8ua4TU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:eb:e1:a6:f7:77:44:cd:9f:7e:0b:ab:99:f6:32:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
        Validity
            Not Before: Aug  9 13:01:20 2025 GMT
            Not After : Aug 10 13:01:20 2025 GMT
        Subject: CN=dcf20ef7653aa5804eb130151b3e8e5288197613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:3a:83:1c:d7:20:5d:d6:07:55:51:a9:e2:
                    79:af:12:71:6e:4b:d2:c2:51:a6:7a:3b:7b:89:7a:
                    94:36:1f:a7:27:d5:02:3f:47:f1:c9:fd:0b:ad:d8:
                    b4:bd:7e:0e:a1:20:a8:49:8c:f3:28:37:ab:9a:f0:
                    5f:79:a1:3a:42:cd:f2:d6:dd:59:6f:e4:a6:ab:d1:
                    82:0e:8a:0e:33:1d:20:50:43:1f:30:98:ff:7f:d0:
                    ac:00:11:63:2c:e2:f7:d5:a9:b0:9f:cc:23:64:b8:
                    08:9f:be:ed:84:ca:cd:c5:bd:b5:5b:df:b4:0e:35:
                    c9:83:5b:18:9a:63:0d:e6:29:39:44:28:dc:d6:31:
                    87:f3:f7:9e:6d:1e:83:62:2c:f7:3d:9e:65:35:08:
                    7c:49:49:aa:6b:9e:7e:54:42:3a:44:c2:12:45:79:
                    67:19:c5:c9:63:e6:9a:47:31:4b:95:4f:f3:1f:57:
                    77:09:f7:44:ae:59:b9:e1:20:aa:05:d7:4c:c8:71:
                    3c:a8:05:24:70:d0:c8:79:43:a1:3c:15:0a:52:42:
                    c9:fe:a4:c9:b5:5c:be:52:39:cf:82:dc:0f:1e:01:
                    c2:46:19:eb:ca:32:ca:47:92:b8:8f:ed:cd:1c:71:
                    8c:f4:8e:c1:31:d7:3d:94:36:6b:c8:b8:e8:2d:f3:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F2:0E:F7:65:3A:A5:80:4E:B1:30:15:1B:3E:8E:52:88:19:76:13
            X509v3 Authority Key Identifier:
                keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:b1:cf:c3:cb:6d:9b:d2:32:6a:9d:1d:88:05:69:5a:4b:
         f9:4a:c0:dd:31:11:02:09:46:d5:61:ec:09:f1:ee:01:c0:37:
         d6:78:f6:eb:dd:4c:37:6f:c0:80:aa:3a:61:f1:4b:13:5e:d5:
         1f:20:7a:3d:cd:55:63:d7:64:74:9d:de:78:e0:74:11:97:c4:
         12:60:83:c6:0a:ea:72:b1:ef:70:25:68:7f:08:96:15:01:a1:
         67:cc:b5:bd:8b:5d:ce:c2:86:c8:8f:81:6d:a8:bc:e1:73:4e:
         ba:5f:c5:cc:59:03:19:4c:9d:4c:32:35:b0:1c:63:76:c7:67:
         f8:d5:08:bf:7d:27:4c:73:2b:72:1a:8b:e3:aa:53:8a:27:f1:
         05:50:4f:c0:5e:65:ee:03:eb:65:80:5b:84:3b:74:fd:c7:71:
         55:83:25:2c:15:f5:a8:59:07:2a:d7:ea:87:a8:43:d0:3e:f0:
         2c:f6:f3:64:21:17:bf:9d:94:1e:d6:53:7a:8a:dd:ef:11:03:
         3a:41:f3:76:d8:97:e4:c7:bc:1b:08:62:69:82:b2:7b:f1:7e:
         ea:5f:58:38:21:35:fb:ff:58:2e:54:b2:41:1c:5c:93:ad:e4:
         f8:e9:0b:95:9e:f3:d2:05:a2:fb:40:9c:12:2d:15:17:4d:a2:
         34:95:f2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:13:19 2025 by rpki-client