Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File:                     5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier:          M5VMTTFsgE45IxX39ds/Ceh6x2FdE02NsxoNcMvkUh4=
Subject key identifier:   E3:20:C8:6E:6D:AA:F0:73:68:89:16:F3:C0:A3:66:B4:46:6D:98:CC
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       01988BEAEFB19B4C07A718843D05FC58D5FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number:          10FD
Signing time:             Fri 08 Aug 2025 23:01:26 +0000
Manifest this update:     Fri 08 Aug 2025 23:01:26 +0000
Manifest next update:     Sat 09 Aug 2025 23:01:26 +0000
Files and hashes:         1: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: Rwkjl26Hfz4AesYvEGIICTozNz3y8H8RUbVmOoJmDxM=)
                          2: JBD-DCFrrp6DaGm3TKEJ2BZcPBI.roa (hash: Ec0jL54VOo6Fz7NL+ebq98FwJ+8rbJVUpRDjInpAUJI=)
                          3: PhUkNZ598A5ia5-UrJ9vFGUcNjk.roa (hash: KeqPA4mGFwTxFNdg5BKKsJzJk98xcvG22Bir2BXm6sw=)
                          4: hAUqHHOa5zKCAiaylV12xSKmjRM.roa (hash: 8CceZwUGeB+adYsoYQk00qGlq4ULcVFDHiLxSegah5g=)
                          5: k6g8GHkytSOVhgkLjUclPzoVHy4.roa (hash: +6vq3uBdq/4E/WX/WUrN8nWRXc0eqZ/mejCwa+UQTvk=)
                          6: tgxx8eKKt9THon5yuqezJ7Gyv60.roa (hash: uNDSHqnE8JqGtw2yUrw4/9adIpOhVHGi34SjFmkEDYQ=)
                          7: ypuXUHnwj0Si2wTZIoD6wakrPpE.roa (hash: Q3wl4UsBeSP4TzzPez8jeK8xoNzd5ChOWI4pNHLd3Ng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:ef:b1:9b:4c:07:a7:18:84:3d:05:fc:58:d5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Aug  8 23:01:26 2025 GMT
            Not After : Aug  9 23:01:26 2025 GMT
        Subject: CN=e320c86e6daaf073688916f3c0a366b4466d98cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:bf:85:1e:15:ef:ad:45:2e:13:28:8a:c8:
                    83:9e:19:ff:f4:12:94:4e:25:19:85:9a:6d:62:3d:
                    14:fe:31:b2:23:81:b1:cd:23:b7:9c:59:5b:dc:82:
                    4d:96:68:d9:89:e9:7c:57:4d:19:c5:ef:ec:d1:dc:
                    ee:4b:cc:bd:e7:b0:e2:dd:94:b0:cd:92:9b:84:49:
                    62:88:47:22:e2:82:bf:f9:c0:fe:dd:8b:0d:66:d8:
                    1c:d2:72:f7:1c:38:e9:fd:28:08:f1:f8:16:b2:e7:
                    67:f3:7b:e5:70:b4:24:0f:dd:45:3a:0c:65:8c:72:
                    8c:11:bc:9c:13:6c:ba:b3:9d:d2:37:fe:ba:ee:b0:
                    c4:ae:1f:8e:84:6a:19:ca:21:b2:ed:9c:f9:83:cc:
                    d3:7e:d0:64:8f:cb:b3:99:92:e3:f4:ce:7b:60:9e:
                    51:43:a9:42:cc:15:f2:b6:c7:a9:3e:a4:99:d5:d9:
                    0a:e1:3a:f8:93:51:35:36:f2:b9:20:79:dc:04:ce:
                    34:f5:e9:00:db:53:bd:b5:50:a3:6a:2f:9b:ae:45:
                    39:01:2c:e7:97:65:b5:3e:02:73:ae:4d:60:28:75:
                    49:20:41:8a:57:00:35:ac:1c:89:3c:6b:3c:27:c7:
                    87:a5:04:53:b8:01:0e:5b:21:bc:30:ea:05:75:5e:
                    8d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:20:C8:6E:6D:AA:F0:73:68:89:16:F3:C0:A3:66:B4:46:6D:98:CC
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:ab:1a:07:85:c1:4b:64:19:af:e5:fd:9d:aa:70:6d:82:d4:
         55:d1:97:0d:9a:ed:fc:10:17:3f:e3:8f:d5:67:fd:23:36:4d:
         c7:8d:e5:ef:4d:d7:44:7d:2b:09:18:aa:19:61:60:16:c1:d2:
         4f:b6:95:63:8c:35:e6:bb:f8:12:fd:8e:d4:ee:13:6c:57:b3:
         fd:64:b5:30:63:4f:f8:02:2d:d3:49:44:49:14:03:e1:2f:34:
         02:9f:43:33:d2:70:f0:41:94:6e:e5:10:37:5f:97:ec:4e:e0:
         f5:e9:4e:c0:2b:0e:1e:3a:cd:20:a6:e1:80:cc:69:28:0c:fb:
         35:49:3b:95:05:4e:14:f9:e0:67:f9:2c:76:82:92:7d:33:a7:
         aa:2d:0c:46:ad:bc:38:b8:f0:35:e2:d3:77:2d:46:1d:36:4f:
         0d:24:59:b8:d4:6e:1b:a3:16:f9:f1:57:d1:35:ba:ee:21:fd:
         d4:63:b6:85:c2:f3:5d:61:e8:43:4a:b2:26:49:e0:e0:45:95:
         2a:ad:9c:62:8b:de:15:22:10:76:28:e8:47:48:39:79:9c:d1:
         35:5f:77:c0:6a:4a:a5:ff:e2:5e:27:61:9d:6a:e8:bc:c5:c9:
         14:e4:da:8f:10:44:4c:82:2e:f5:4a:97:b9:8a:e7:ed:0c:e4:
         b7:f5:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:18 2025 by rpki-client