Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
File:                     5gRDG1VUd8GaP0xcttEHNljVs-M.mft (raw, json)
Hash identifier:          41atfPUKEO68cWO3uQBehVNlqoafOBd+ZDzMl44uheY=
Subject key identifier:   A6:82:1B:23:26:07:9F:21:F9:DA:8F:64:38:2B:C6:13:6D:74:5D:46
Authority key identifier: E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3
Certificate issuer:       /CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
Certificate serial:       01976FD12FD25E96FF84E05A78BD82EE8895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
Manifest number:          0BD2
Signing time:             Sat 14 Jun 2025 19:01:09 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:09 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:09 +0000
Files and hashes:         1: 5gRDG1VUd8GaP0xcttEHNljVs-M.crl (hash: zAisrjkl9oDjh2lM0o/APFKlLmHm+lEVGvb2iRvrXVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:2f:d2:5e:96:ff:84:e0:5a:78:bd:82:ee:88:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e604431b555477c19a3f4c5cb6d1073658d5b3e3
        Validity
            Not Before: Jun 14 19:01:09 2025 GMT
            Not After : Jun 15 19:01:09 2025 GMT
        Subject: CN=a6821b2326079f21f9da8f64382bc6136d745d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:73:35:cd:f1:33:c6:cc:59:78:01:79:c4:01:
                    43:73:83:37:50:10:98:8d:98:22:a2:16:3f:f8:f6:
                    98:07:5a:b3:58:ee:20:96:0e:6e:91:d0:50:75:09:
                    ee:f4:dd:33:35:af:d4:06:f8:40:c0:b5:ca:18:65:
                    73:51:ca:44:e6:d6:9f:43:47:a3:6e:5d:ed:53:cf:
                    04:f9:a7:02:1b:0c:74:81:29:a4:bc:01:64:df:86:
                    c0:07:6d:82:97:50:7f:3c:89:1a:13:aa:9d:3e:2e:
                    fc:b7:30:91:d1:fe:7f:3d:8c:c2:1b:b7:f7:4a:97:
                    3b:70:4d:30:30:71:35:ea:1a:fc:41:47:06:96:e1:
                    44:0f:d7:a2:4f:96:3a:c0:b3:db:1d:e6:a8:9e:04:
                    03:cd:c9:3c:50:f1:ab:a9:a6:2d:67:05:d7:4f:1e:
                    c9:5a:0e:8e:e2:52:80:38:0f:2d:0f:10:95:20:84:
                    94:4c:ed:86:f8:9f:64:8d:fc:fb:41:61:17:a5:a0:
                    84:e7:9c:29:b5:f5:c6:71:6b:9c:bc:1d:21:36:0c:
                    42:df:b1:21:b8:98:5d:ac:63:28:f8:37:c1:a2:2a:
                    ee:d7:67:5b:37:9d:04:83:27:66:7e:37:8e:dc:b9:
                    89:b3:c5:58:0f:79:9b:97:44:f8:b7:50:58:5f:55:
                    52:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:82:1B:23:26:07:9F:21:F9:DA:8F:64:38:2B:C6:13:6D:74:5D:46
            X509v3 Authority Key Identifier:
                keyid:E6:04:43:1B:55:54:77:C1:9A:3F:4C:5C:B6:D1:07:36:58:D5:B3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gRDG1VUd8GaP0xcttEHNljVs-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d7dc8d-e386-404c-88b4-283ec42c2c94/1/5gRDG1VUd8GaP0xcttEHNljVs-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:05:a2:a4:dc:3b:32:1d:68:7d:e9:4a:ed:4f:7f:30:c2:58:
         4b:0f:3c:36:41:42:63:a9:2b:7f:26:79:e4:0f:63:b9:e1:84:
         4b:58:c5:0f:b7:89:1d:4b:79:29:89:3d:91:25:bb:ca:f3:44:
         7e:59:15:7f:54:f4:85:7e:0c:b1:55:88:c5:52:f4:e4:2d:13:
         7e:a2:21:4e:a9:8f:8b:d1:a8:17:49:2a:47:94:dd:5d:a4:04:
         85:27:e9:94:8f:82:3f:c8:0d:49:04:49:26:c6:f6:aa:f1:fa:
         1c:05:51:f3:38:a1:96:a0:2c:c5:f7:bf:77:0a:81:74:81:31:
         44:f8:e8:b9:e1:8f:99:7f:26:8e:e6:60:06:d9:84:f9:15:36:
         6a:8c:2c:0f:8b:81:b5:b6:c1:27:10:c8:56:dc:b2:8c:e3:bc:
         08:d0:f9:70:d5:5d:ad:95:fe:a6:8c:32:7a:cc:e1:a7:be:af:
         4e:ec:89:e1:1d:84:ba:f9:73:4e:e4:fc:be:19:a8:63:7b:d1:
         cf:0d:56:3b:42:75:54:9a:7d:21:65:27:8c:74:da:98:c6:1c:
         0c:83:c8:76:56:bb:f8:a9:35:92:a2:97:bb:8f:d3:35:ac:3b:
         17:be:6a:83:74:2c:63:9c:1b:c6:8e:cc:62:74:30:94:09:31:
         53:7c:d0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:11:29 2025 by rpki-client