Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File:                     5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier:          SzKUBoLn8ZrmRe+KS13BWsEsXdOyxsAKnYUjQHjMQdQ=
Subject key identifier:   CF:DA:BC:A4:2F:A7:7E:4B:67:2E:62:D4:9F:97:B8:9C:0A:52:7E:43
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer:       /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial:       0197756570F8CCBFDE43993B3258EB2F91E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number:          01A8
Signing time:             Sun 15 Jun 2025 21:01:11 +0000
Manifest this update:     Sun 15 Jun 2025 21:01:11 +0000
Manifest next update:     Mon 16 Jun 2025 21:01:11 +0000
Files and hashes:         1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: ycbkAd2evSTNT1owCVWcq6/7EVdvUda4oEVon+0lf6k=)
                          2: s5YaS3VA0T52xJ5l5rFauUbFgwE.roa (hash: JV1GN+4WYVJ18P7z6Hwge46vI+gFA8OZrJth5Bdr90Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:65:70:f8:cc:bf:de:43:99:3b:32:58:eb:2f:91:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
        Validity
            Not Before: Jun 15 21:01:11 2025 GMT
            Not After : Jun 16 21:01:11 2025 GMT
        Subject: CN=cfdabca42fa77e4b672e62d49f97b89c0a527e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:93:05:e8:d0:1d:89:4a:a1:c4:0a:5a:d4:cf:
                    f0:fa:af:15:8d:65:c8:b9:70:46:1a:aa:86:ab:f0:
                    2f:77:12:1b:0b:48:10:31:dc:32:4b:56:dd:b4:66:
                    8c:4d:1f:0c:8a:2c:c5:f7:ba:6a:f0:7a:d9:46:b2:
                    77:92:8b:88:26:f1:00:0e:51:fe:de:d6:7f:cd:7d:
                    20:ba:ba:39:01:a9:26:3b:db:2e:1e:ab:ba:1c:bb:
                    c7:8b:02:2f:a6:3c:53:db:0e:e2:86:df:93:b8:f2:
                    cd:41:89:02:57:af:ee:d0:86:01:8d:f6:16:cc:5a:
                    25:a2:64:53:60:b0:e1:0d:70:21:32:1c:d6:11:de:
                    38:1e:50:fe:02:10:52:be:b6:bc:f4:bc:b8:83:15:
                    f9:57:4b:d8:f9:13:42:b0:28:06:47:6d:47:eb:63:
                    28:cb:3d:fd:43:a7:19:63:9d:25:e5:75:ad:3e:4b:
                    c3:43:9d:55:ed:38:ce:5d:7c:12:ba:68:93:04:3f:
                    39:a8:4c:f6:53:7d:5a:74:39:bb:fd:37:ff:7f:21:
                    6a:bf:85:e4:78:76:93:8b:82:dd:15:34:c0:30:6f:
                    ea:4c:a2:5e:ba:ae:5d:e4:de:d6:04:bf:a3:70:34:
                    8a:07:0e:ec:c7:3f:03:3b:5e:c8:fe:66:30:f4:78:
                    23:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DA:BC:A4:2F:A7:7E:4B:67:2E:62:D4:9F:97:B8:9C:0A:52:7E:43
            X509v3 Authority Key Identifier:
                keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:28:9c:4f:1b:27:15:62:2e:eb:61:a8:ca:66:6b:f1:08:03:
         d2:1a:5e:5e:0d:eb:0b:3d:76:7c:bd:cd:d2:22:4f:eb:ba:47:
         44:96:66:6b:aa:f7:00:bd:21:77:51:59:7c:f9:8a:b3:01:69:
         a2:c6:a5:7e:f5:0a:dd:7a:c8:b0:b2:e1:b2:9c:3f:91:2f:6c:
         d5:c4:32:b1:28:22:4d:72:cb:bc:e9:6d:a6:45:45:ce:bb:a3:
         dd:be:5b:84:a2:fc:62:28:52:fc:8e:a0:09:24:8b:bd:11:ca:
         a1:ef:87:cc:21:d1:ea:ed:3a:77:58:22:e2:67:bf:8e:a4:f0:
         d7:61:2d:00:c6:be:52:3e:ee:ff:7d:8f:9c:af:60:79:ec:8b:
         05:e3:a6:2d:f6:11:d8:fe:62:21:66:82:45:f8:74:99:86:bf:
         ec:48:d1:73:04:44:0c:96:d0:6f:ab:fc:17:00:ae:2b:b5:b9:
         32:93:32:5d:98:bc:11:c4:50:37:ce:c4:30:63:ea:c7:ae:31:
         15:65:49:5f:8b:a6:9f:ed:74:f1:6c:2d:64:4e:39:15:79:05:
         7d:01:30:d1:a5:e8:18:a0:56:47:a8:a4:23:2e:89:11:cf:d9:
         8a:11:21:55:c6:03:17:73:06:e7:f7:b8:7c:f4:74:3d:e4:eb:
         a1:37:fd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:27:10 2025 by rpki-client