Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File:                     xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier:          5K1xv1/WOs37sQH/5880FNtLOql0NLFkztnCwBxW18M=
Subject key identifier:   2C:97:FA:B9:F0:CE:85:C6:C4:38:10:65:F9:B7:FD:E7:ED:AF:C3:0B
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer:       /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial:       019773E48E2087982156138058A3B14E783C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number:          118E
Signing time:             Sun 15 Jun 2025 14:00:47 +0000
Manifest this update:     Sun 15 Jun 2025 14:00:47 +0000
Manifest next update:     Mon 16 Jun 2025 14:00:47 +0000
Files and hashes:         1: S4GEAGQpLNuwxd69ASEGW9Vms4c.roa (hash: FsqX6X9yKqotnT07LkiZuZ69e3G5OYb0RnxsqAXswi8=)
                          2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: KYWdoOAdBTw47gl3ql+ZOQnyQuaQg05LvBwLEGSiSBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:e4:8e:20:87:98:21:56:13:80:58:a3:b1:4e:78:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
        Validity
            Not Before: Jun 15 14:00:47 2025 GMT
            Not After : Jun 16 14:00:47 2025 GMT
        Subject: CN=2c97fab9f0ce85c6c4381065f9b7fde7edafc30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:fe:af:58:26:1b:d3:95:f7:53:0a:f3:50:
                    94:d1:d9:1e:78:d7:11:d7:e4:ef:d8:89:42:f7:9e:
                    01:c3:63:eb:c8:e3:94:a8:08:d5:d9:41:76:c4:55:
                    27:7a:17:78:4f:4e:db:82:56:71:0a:43:81:24:21:
                    55:60:cb:45:a2:ae:c5:4e:0a:33:fb:e2:49:c5:4c:
                    9b:3e:90:fb:93:b4:51:2b:d0:b2:1b:1b:de:6c:36:
                    2c:8d:35:37:4e:dd:f7:fe:39:d4:c9:ff:2d:78:8f:
                    c5:c7:11:39:dc:b8:ce:c2:14:2d:b2:39:07:8e:2c:
                    33:21:67:23:2b:52:5e:51:77:01:66:59:b9:ab:fb:
                    43:89:f2:41:88:27:e1:b9:5e:32:9b:f3:7e:51:86:
                    8e:aa:5a:4d:2f:6b:1c:78:4a:e2:48:3d:7e:02:1d:
                    11:b0:4a:bf:33:78:0e:80:60:ec:65:f5:66:3c:00:
                    0d:7d:46:6c:54:26:3e:aa:4a:db:3d:ee:87:3d:bd:
                    f4:ec:fb:a7:5b:a5:1d:14:8b:6e:be:94:c4:ec:2e:
                    6f:1a:03:87:20:d2:42:3f:b1:93:a8:3b:cd:d3:b4:
                    b0:47:d1:d9:5c:93:6f:30:99:99:4e:49:7f:83:e2:
                    26:0c:ab:89:61:32:ad:cc:60:65:df:15:60:d1:af:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:97:FA:B9:F0:CE:85:C6:C4:38:10:65:F9:B7:FD:E7:ED:AF:C3:0B
            X509v3 Authority Key Identifier:
                keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8d:5c:a9:e7:53:8a:c5:4b:0a:4c:e3:2a:a1:47:18:5c:c4:
         39:43:7a:e9:e7:f6:ee:71:c3:d7:65:b8:9b:9b:69:10:7a:a7:
         a2:16:c8:5a:e9:e0:ad:17:5a:e9:94:c8:cf:66:36:e9:10:b6:
         07:af:28:8f:75:44:9f:42:04:c4:1a:a4:03:e6:04:1b:c3:ea:
         91:b5:e8:fa:e9:7f:52:ec:96:2b:9f:8b:d1:7c:d6:7e:e2:8f:
         c5:74:7e:d7:5c:e0:95:23:0e:5c:4a:ba:e8:4e:c5:d3:80:88:
         1b:84:08:16:f8:76:59:8b:8c:97:13:68:c1:53:88:94:99:89:
         83:f3:6f:5e:19:b7:13:ed:21:70:78:f2:f4:8a:2e:a3:6f:a3:
         09:db:1a:a0:46:6c:ec:60:d3:43:ab:c9:b6:de:01:9f:a0:f5:
         d7:aa:a3:56:4e:3e:b4:8c:cb:b1:5d:a1:95:b3:49:84:c5:e1:
         e9:08:cb:fa:a6:90:b0:03:c1:9b:bc:4d:35:94:19:73:1d:14:
         51:ca:60:b2:28:2d:7f:bd:e0:62:cb:dd:23:1f:13:22:7f:af:
         ea:a8:65:e5:66:dd:77:10:58:07:09:75:7f:01:63:12:f1:aa:
         af:58:42:c0:42:15:43:74:c4:70:88:8f:32:ff:b8:fa:5e:4b:
         c7:6a:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:42 2025 by rpki-client