Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
File:                     xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft (raw, json)
Hash identifier:          j5hQIWw6PkGpnEWDGHvNuTTsoWgnPcLpAwVTGCpCtY8=
Subject key identifier:   92:54:04:9F:D2:CA:F3:48:C8:7C:E6:66:E8:CF:C3:D7:AB:F5:F8:26
Authority key identifier: C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81
Certificate issuer:       /CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
Certificate serial:       01968E14B6E8F986008CCD30CC3DC850D3EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
Manifest number:          1527
Signing time:             Thu 01 May 2025 23:00:44 +0000
Manifest this update:     Thu 01 May 2025 23:00:44 +0000
Manifest next update:     Fri 02 May 2025 23:00:44 +0000
Files and hashes:         1: V_-yfqXD3xSzuxBuTlTU1rVvM2I.roa (hash: y15uODSxQaZUOAbMdJA7ksT4dYbu04f8NP7jQ2+xKpE=)
                          2: xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl (hash: YHjqeTmXaSR4qNxcAlkFOprivAOaKzROPV5jP45XHGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:14:b6:e8:f9:86:00:8c:cd:30:cc:3d:c8:50:d3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6583f58c7110ad4cc609f4ffb7cab2f80c83581
        Validity
            Not Before: May  1 23:00:44 2025 GMT
            Not After : May  2 23:00:44 2025 GMT
        Subject: CN=9254049fd2caf348c87ce666e8cfc3d7abf5f826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:42:f2:48:29:63:e1:94:7b:f6:d6:98:65:
                    92:df:35:6d:a6:cd:79:39:48:15:16:85:95:34:0d:
                    f7:df:0b:ad:de:60:4c:f7:5c:1c:a8:d8:c5:ae:6e:
                    21:d8:25:01:85:06:b4:c5:9e:2d:8e:ae:10:02:ad:
                    3f:f8:1f:3c:42:25:05:95:82:66:21:7f:1e:3c:3a:
                    aa:e3:09:12:ca:3d:ea:b4:90:a6:5e:f7:1e:55:55:
                    41:11:27:58:4a:e8:50:0f:0c:56:6b:93:96:ad:b6:
                    af:83:0c:0b:19:fc:75:14:fc:bf:53:c6:62:50:bc:
                    cc:29:72:fa:b9:e5:20:55:71:43:84:7b:3e:ff:6d:
                    d4:7a:63:9c:77:01:99:41:f9:ee:0c:7f:16:b6:8b:
                    7c:de:20:f1:70:aa:ac:03:46:f6:d9:b2:11:6e:a8:
                    b1:5d:5e:b1:b3:cf:ea:7d:64:c1:a1:0e:fb:cc:d8:
                    fe:25:86:18:b9:e1:56:db:5a:7a:c5:41:13:c0:cc:
                    72:b3:d7:3e:86:0c:ea:01:e0:76:38:55:5a:2a:bf:
                    b1:4c:88:ba:bb:1c:4d:74:4d:27:53:41:77:d3:f3:
                    32:8f:7d:ec:69:95:cb:81:33:66:a6:98:4b:d8:0c:
                    5a:8c:de:4f:ac:8f:aa:b2:dc:14:50:99:ea:e9:eb:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:54:04:9F:D2:CA:F3:48:C8:7C:E6:66:E8:CF:C3:D7:AB:F5:F8:26
            X509v3 Authority Key Identifier:
                keyid:C6:58:3F:58:C7:11:0A:D4:CC:60:9F:4F:FB:7C:AB:2F:80:C8:35:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlg_WMcRCtTMYJ9P-3yrL4DINYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d0cae-ec13-45fb-9afc-3d593ebe5220/1/xlg_WMcRCtTMYJ9P-3yrL4DINYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:57:c5:a8:4f:da:6c:ce:39:06:36:d4:5f:da:35:04:bf:bf:
         57:c4:22:9a:4f:d5:cd:f6:98:5a:34:27:b4:b3:15:9e:d0:b4:
         5b:26:ba:4f:4a:e9:e7:a6:74:0b:1d:b7:88:2f:00:69:04:7a:
         f0:db:3a:20:d1:9f:cb:a1:3c:3a:5a:6c:7b:98:90:14:36:a9:
         2d:af:ad:0c:c1:be:7f:50:56:56:69:b8:43:8f:ad:d5:75:44:
         6d:80:64:d9:07:6b:de:fa:c7:ac:17:6a:26:99:d6:cb:a6:e1:
         92:8c:17:11:98:43:e4:3e:c2:84:f7:39:03:7f:ee:3c:de:59:
         9a:a4:d7:77:9f:c5:31:8f:48:69:6c:18:6d:93:9d:db:84:59:
         b3:0e:26:a5:08:b2:2b:fd:21:54:85:85:11:0e:1f:6d:8c:56:
         78:24:68:54:02:32:fb:60:8f:df:40:4b:7b:22:6a:d0:5b:2f:
         d7:d9:c3:73:b2:bb:2b:a8:e7:b3:8b:04:34:bf:e3:84:f9:b2:
         e5:9e:1a:68:a7:83:dc:fb:f3:a3:53:94:9d:e0:02:f8:bf:c5:
         97:ec:a0:6f:da:cf:2c:d8:46:1b:d6:ab:7e:f0:a0:a2:f2:fb:
         2e:7e:16:b3:04:85:3e:81:82:ea:30:82:8b:f0:e4:54:af:dd:
         77:bd:c8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:06:45 2025 by rpki-client