Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File:                     XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier:          eX1U4GdDVsolRab+y2SafmQkKWAUxDY4DrPJY+5KrM8=
Subject key identifier:   07:D9:B1:90:A8:C3:C1:8D:39:57:10:26:7C:87:6B:50:38:65:DB:B4
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer:       /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial:       0196809011427534C6321856F331B4509025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number:          0355
Signing time:             Tue 29 Apr 2025 08:00:47 +0000
Manifest this update:     Tue 29 Apr 2025 08:00:47 +0000
Manifest next update:     Wed 30 Apr 2025 08:00:47 +0000
Files and hashes:         1: B7HcX8a5R4VJ0aJu7BcgMxsPGeM.roa (hash: +dMXfXtmqoKsILaxrYWUxAUDipxnRmqzhhjRXeSfmOo=)
                          2: Vv1ze4oV_8jujUNihoptQXR-XLA.roa (hash: L3WLtaibPG3x61zfWcu415AL/a1HwynhXMRR//VRus0=)
                          3: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: Q+WO/NVzmfm+H4zq8b3BV8tAghEsy13qs3kFcTmr9XM=)
                          4: wwZy967K0kaiULGURPRIujSTcOo.roa (hash: vNjif0ZJvkMUe2G7dAUGl4j4TYsS+I8BRRbofJk7BNE=)
                          5: yXSI300Xb0fHUGX2H4LyzLugHJw.roa (hash: lfxMflPHK3x8X2DTET3r/QnFen44eiLQvcUftmVoo/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:90:11:42:75:34:c6:32:18:56:f3:31:b4:50:90:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
        Validity
            Not Before: Apr 29 08:00:47 2025 GMT
            Not After : Apr 30 08:00:47 2025 GMT
        Subject: CN=07d9b190a8c3c18d395710267c876b503865dbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:69:77:fe:4f:bf:5c:57:f5:17:32:b6:d8:96:
                    26:e1:32:63:16:28:f8:9e:b6:af:b2:fc:3f:da:f4:
                    cd:07:63:ac:6f:30:00:1c:0d:c1:75:9c:d8:c1:2c:
                    42:d0:cc:f5:dc:53:ff:f2:98:62:fd:4d:04:44:1f:
                    07:40:e8:df:67:a7:d4:de:54:93:62:da:b0:2d:fa:
                    c7:70:c5:a3:df:64:07:e4:4a:f2:76:a0:f0:70:56:
                    40:9c:c4:3e:dc:aa:a8:b2:6f:68:6a:97:90:60:7d:
                    fd:f4:ac:ac:cf:ca:fd:f1:91:e8:05:71:97:fa:a8:
                    b1:27:5d:3d:bf:c1:93:b7:91:45:9f:58:20:0e:29:
                    f1:0b:dd:f9:9e:69:c3:ed:42:d1:20:cf:f6:f2:f1:
                    d4:c8:c4:ed:2c:30:bc:08:62:57:80:d0:5d:07:78:
                    5f:06:5b:46:be:50:43:1e:92:1d:c1:f2:f2:01:de:
                    a7:e4:29:f0:e6:33:4e:6e:a6:4d:a6:05:3a:1b:f5:
                    9b:bb:f5:f1:d7:66:18:e3:dc:5e:83:3e:46:2f:b1:
                    41:11:b0:a3:75:46:10:da:1f:4d:df:0e:18:ff:d3:
                    95:0c:b8:ae:fc:25:e0:a6:fe:5e:7c:d7:c0:c1:94:
                    28:9e:e5:ab:24:53:bc:79:6f:1e:14:58:a5:15:34:
                    05:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D9:B1:90:A8:C3:C1:8D:39:57:10:26:7C:87:6B:50:38:65:DB:B4
            X509v3 Authority Key Identifier:
                keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:eb:f4:df:20:a9:d0:0f:49:3d:5e:5e:3b:90:fe:df:b4:8c:
         a6:79:6f:17:a0:a9:98:34:e5:60:a5:16:dd:f3:ae:59:b7:24:
         ff:4f:58:95:ef:f6:4c:7f:00:01:dc:b3:54:91:14:3a:66:36:
         dc:e2:53:be:e3:ca:69:b1:56:a4:5a:21:07:28:7d:7b:1c:59:
         a3:02:1e:40:e4:02:a3:36:35:f8:55:fd:af:37:66:cc:d5:46:
         e9:5e:8b:b9:43:d6:16:fc:74:1c:36:a6:e6:7c:b6:ae:20:d7:
         62:7f:20:5c:2c:7f:50:f1:d8:6e:7d:74:4f:a9:cc:58:06:79:
         5b:dd:0f:4d:2f:1b:75:76:3d:de:b6:0d:fc:65:99:77:05:b9:
         87:f7:3f:2a:e8:b5:a2:01:56:7e:9f:44:15:f7:9f:70:ae:75:
         12:80:62:38:ea:21:9b:a3:f6:29:70:c8:4a:38:50:52:21:06:
         14:e6:29:45:e5:1e:96:f4:25:e5:1b:c8:2f:46:cb:6f:25:b3:
         13:3a:50:e9:34:61:88:dd:66:3f:05:69:4e:02:58:64:f7:52:
         08:e3:17:84:46:c1:b5:4b:27:32:8e:72:af:fe:e5:24:1f:e2:
         ab:8d:d3:de:bc:fa:9f:8b:70:c1:40:28:55:cf:bf:45:a4:6b:
         1e:be:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:26:21 2025 by rpki-client