Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File:                     XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier:          PfHu17Pw3is26DzkGKaLSr/gqRsLTz7ibr3DJIGEj1Y=
Subject key identifier:   44:98:FB:AD:F5:CF:2E:E7:BE:F0:6E:D2:AC:B4:2C:B8:5F:15:0A:95
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer:       /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial:       019771517F3DC8F570236E442E14020DA91D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number:          04F0
Signing time:             Sun 15 Jun 2025 02:00:55 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:55 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:55 +0000
Files and hashes:         1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: Ma2Ps37N7gAmIlmiZYfy2W0omN4rbuxavK5hWHL+qjc=)
                          2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:7f:3d:c8:f5:70:23:6e:44:2e:14:02:0d:a9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
        Validity
            Not Before: Jun 15 02:00:55 2025 GMT
            Not After : Jun 16 02:00:55 2025 GMT
        Subject: CN=4498fbadf5cf2ee7bef06ed2acb42cb85f150a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:19:f3:d0:6b:bf:ac:a9:86:19:e7:63:d0:
                    e5:d8:a4:33:32:4f:fe:82:57:3c:54:c8:58:f0:4f:
                    14:ac:e2:84:73:c6:83:75:11:c1:9d:94:1d:3a:97:
                    31:7a:80:9f:63:ba:77:17:77:c8:26:8a:b5:58:80:
                    17:27:e5:92:53:1b:d9:98:93:61:9d:a1:87:88:a4:
                    77:d7:0e:1a:b5:b0:4a:a5:65:a9:fd:88:f9:3d:d6:
                    9e:5d:a0:99:d5:de:d2:1b:88:1c:de:70:20:df:8d:
                    b6:35:16:17:95:d3:50:28:4b:4c:4d:cc:74:4f:b8:
                    54:20:fc:fb:a1:a4:75:26:f8:7c:ec:d1:4d:d6:be:
                    ff:02:0b:31:ba:ec:bd:3e:32:75:30:87:11:7e:3d:
                    90:4c:b2:2e:af:65:1f:aa:2d:a7:50:2e:a3:c6:52:
                    dc:73:da:a0:7e:f6:aa:33:3a:5e:82:d5:d2:42:00:
                    01:c1:2d:64:bf:e8:f7:d8:9e:76:47:3d:1d:7e:5f:
                    a7:16:7a:08:0b:41:c6:5c:a1:20:b6:9e:3a:c5:27:
                    51:f7:4a:c1:1a:14:9c:54:f8:00:d3:97:6e:c8:3a:
                    c5:f6:1f:01:07:d6:ae:65:1e:2c:aa:ba:87:6b:bf:
                    95:b8:8b:67:a8:81:91:b5:33:4b:b2:2c:6e:fb:54:
                    18:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:98:FB:AD:F5:CF:2E:E7:BE:F0:6E:D2:AC:B4:2C:B8:5F:15:0A:95
            X509v3 Authority Key Identifier:
                keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c8:33:2f:12:c1:2a:45:45:c4:8f:7f:92:47:4e:fe:32:2a:
         2c:f4:53:7f:27:80:ea:1b:cc:c0:0c:f7:2f:11:ae:a6:f7:a9:
         8d:c6:9d:2e:3f:69:85:0c:77:c3:8a:72:6b:34:20:f0:ce:97:
         b6:b1:0d:3d:7e:1a:cf:41:3f:63:4f:3a:bc:f7:9e:78:96:59:
         75:01:ca:7f:8b:77:cc:a8:ee:50:fa:42:14:f8:f8:62:73:0e:
         d7:0f:11:f1:41:43:6f:03:cd:10:24:9b:bf:86:9a:d8:6b:67:
         41:0a:fe:00:40:f2:40:45:58:11:80:e7:91:dd:c1:c0:58:7e:
         b6:86:66:3d:a5:ac:ff:6f:d0:d3:9c:e0:e6:51:11:47:33:5e:
         72:f4:91:3a:b8:61:77:0b:80:88:ca:f2:e9:39:f9:ff:4b:41:
         82:19:e3:7c:08:dc:ce:ca:d9:ae:6e:7d:05:00:1f:02:da:4c:
         fd:a7:7a:41:8c:38:14:08:df:11:80:29:f7:89:7d:f6:3f:07:
         8d:a2:f4:c6:05:86:72:49:0d:84:23:a6:5a:d8:4d:cb:0c:12:
         89:89:a5:ef:18:b3:77:b3:b8:de:fc:e1:89:8c:b5:d1:8b:34:
         fc:33:77:d3:12:07:7e:3b:90:51:ab:38:8e:3f:97:be:54:01:
         8a:c7:ba:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:37:23 2025 by rpki-client