Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File:                     xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier:          OstE0sJ95Rl12xMZHyvmbHAdyhzfj6A7adhYi6jd4AI=
Subject key identifier:   1B:37:CC:B2:0C:0D:C6:6D:BE:47:5B:39:17:44:CA:5D:D0:D1:74:18
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer:       /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial:       01987306B4F355F8383795C4F40F91D931EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number:          1462
Signing time:             Mon 04 Aug 2025 03:01:15 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:15 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:15 +0000
Files and hashes:         1: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: zgOnzxvMU6UpkUqcBiCwxXGAFbSrqCzMHvy7crEYNIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:b4:f3:55:f8:38:37:95:c4:f4:0f:91:d9:31:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
        Validity
            Not Before: Aug  4 03:01:15 2025 GMT
            Not After : Aug  5 03:01:15 2025 GMT
        Subject: CN=1b37ccb20c0dc66dbe475b391744ca5dd0d17418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fb:1b:b9:01:d0:95:21:6d:80:8b:78:94:f3:
                    80:1e:18:7a:29:d5:e7:20:e2:02:eb:7e:40:46:ec:
                    76:c2:2f:fa:b5:d3:90:3b:a2:d6:9c:00:9f:a2:ec:
                    83:d3:f1:51:b3:92:42:98:df:e3:a6:bb:10:cd:62:
                    23:32:22:5e:3f:cb:09:54:49:ab:fd:ff:7e:55:37:
                    f9:86:7f:cf:27:91:92:06:fc:34:12:a8:4b:01:d5:
                    c5:59:6a:e3:fb:3f:3e:fe:bb:18:9b:5c:cd:75:61:
                    e7:5f:0a:90:98:68:65:5f:b1:18:f9:69:9b:93:16:
                    e2:c9:2a:ce:8a:5b:ad:48:f4:e9:88:0c:ea:6a:18:
                    5b:bb:5a:8b:3e:e3:3d:f8:ff:8b:52:93:4b:76:b5:
                    78:5b:09:33:b4:04:65:77:2a:14:39:13:de:1b:82:
                    03:52:b4:48:61:11:9b:ed:94:07:20:83:e0:cf:6b:
                    75:00:de:c7:fe:05:52:99:91:b1:13:f0:4b:e3:db:
                    62:36:6a:6e:96:6b:dc:39:e6:af:b8:34:a8:53:a5:
                    10:6c:1b:af:58:f7:28:35:aa:d6:1a:c4:05:89:d6:
                    df:ce:e1:bb:d4:2b:5f:19:7c:6e:38:ab:24:ff:12:
                    09:92:4e:c3:27:c7:9b:50:cd:5f:7f:c6:41:7b:9d:
                    03:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:37:CC:B2:0C:0D:C6:6D:BE:47:5B:39:17:44:CA:5D:D0:D1:74:18
            X509v3 Authority Key Identifier:
                keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:df:36:76:92:94:78:a4:7a:13:d3:e1:3b:d0:ed:fb:8c:c3:
         d7:63:d8:44:0b:e6:c8:84:ff:aa:9d:ae:ec:ed:00:de:1e:60:
         37:65:e0:77:be:19:5d:a8:b3:ec:5b:17:d9:33:68:53:13:e0:
         1d:3e:21:a4:d1:7e:42:9e:de:f7:a4:6b:89:96:dc:c1:0b:9c:
         ff:15:10:66:4d:f5:9b:6e:76:de:a7:a8:a1:14:2b:8a:76:ac:
         44:60:b6:0d:e3:d1:34:91:84:8a:ce:24:7b:fb:5d:13:73:5e:
         d3:91:b9:83:b8:04:8e:3f:d1:3b:c3:03:9b:4c:79:e8:9e:e4:
         8d:be:df:08:b7:07:a7:02:8d:27:3c:32:b0:78:80:63:16:74:
         a6:49:af:31:b0:34:3d:77:0b:db:04:c6:ca:0c:46:5a:23:5a:
         de:28:5b:85:3f:09:33:18:c7:27:86:a5:19:eb:ad:c9:40:67:
         6b:c0:d0:49:54:8e:5f:9b:64:d7:94:f3:0c:22:2e:c7:55:37:
         0f:c8:7c:49:e2:fc:9e:2b:45:d6:c8:9f:c0:f3:c3:1b:d0:a4:
         21:29:22:1f:71:6c:f1:87:1b:49:08:39:70:96:d3:3e:fc:bb:
         96:02:40:10:87:6b:74:27:86:db:39:52:8b:a6:aa:37:62:f5:
         4d:63:cd:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBrTzVfg4N5XE9A+R2THsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj
ZmJmYWYwHhcNMjUwODA0MDMwMTE1WhcNMjUwODA1MDMwMTE1WjAzMTEwLwYDVQQD
EygxYjM3Y2NiMjBjMGRjNjZkYmU0NzViMzkxNzQ0Y2E1ZGQwZDE3NDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/sbuQHQlSFtgIt4lPOAHhh6KdXn
IOIC635ARux2wi/6tdOQO6LWnACfouyD0/FRs5JCmN/jprsQzWIjMiJeP8sJVEmr
/f9+VTf5hn/PJ5GSBvw0EqhLAdXFWWrj+z8+/rsYm1zNdWHnXwqQmGhlX7EY+Wmb
kxbiySrOilutSPTpiAzqahhbu1qLPuM9+P+LUpNLdrV4WwkztARldyoUORPeG4ID
UrRIYRGb7ZQHIIPgz2t1AN7H/gVSmZGxE/BL49tiNmpulmvcOeavuDSoU6UQbBuv
WPcoNarWGsQFidbfzuG71CtfGXxuOKsk/xIJkk7DJ8ebUM1ff8ZBe50DQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBs3zLIMDcZtvkdbORdEyl3Q0XQYMB8GA1UdIwQY
MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et
YTczMGNjZmRhZGM1LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1
LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATt82dpKU
eKR6E9PhO9Dt+4zD12PYRAvmyIT/qp2u7O0A3h5gN2Xgd74ZXaiz7FsX2TNoUxPg
HT4hpNF+Qp7e96RriZbcwQuc/xUQZk31m2523qeooRQrinasRGC2DePRNJGEis4k
e/tdE3Ne05G5g7gEjj/RO8MDm0x56J7kjb7fCLcHpwKNJzwysHiAYxZ0pkmvMbA0
PXcL2wTGygxGWiNa3ihbhT8JMxjHJ4alGeutyUBna8DQSVSOX5tk15TzDCIux1U3
D8h8SeL8nitF1sifwPPDG9CkISkiH3Fs8YcbSQg5cJbTPvy7lgJAEIdrdCeG2zlS
i6aqN2L1TWPNTg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:14 2025 by rpki-client