Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
File:                     Xw_ZDZhyl8td1OB76EDSgNHizEo.mft (raw, json)
Hash identifier:          j4paag9wx6acSgbasYOF8dSsh1tuC3pYiGBOlKlW2NI=
Subject key identifier:   26:4E:0E:2E:45:06:33:B2:B7:00:B9:1E:F3:34:27:8E:73:8E:8A:E5
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Certificate issuer:       /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial:       01976E870E2F1F8BC10A303C170868338BBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
Manifest number:          08E9
Signing time:             Sat 14 Jun 2025 13:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:33 +0000
Files and hashes:         1: 05UqSuwLBRqPCroKa-NSlHo3suk.roa (hash: rVUvpxf5/0qhzBCE7eXYV4m07Wn+wX0M/lyBozQz/Xs=)
                          2: 5Jf5ASTD8jlbm2kLARHgQd2Uhpg.roa (hash: E3lbfmXYIuXSBdLAP3yH+RdxLJCz+3LRF0JUsGgut1Q=)
                          3: ATvSFhFd_CAncUPhZRgYI8HQ5vo.roa (hash: LjPhXG/jk9vLP7Tlf0sh6p1Ib2Ym30X7fvGZjIomxZg=)
                          4: PXKLJWRK5JT5xqHPiU1wVHkKhag.roa (hash: f7UVVCkNNrYtkhi2nz2OzhGEpHRkcJKbi1gQjPZ3lQk=)
                          5: Xw_ZDZhyl8td1OB76EDSgNHizEo.crl (hash: ZERVCdiZumFm8Z9JV9cQTtdSF1lbcFSbqxIDMVSaa9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:0e:2f:1f:8b:c1:0a:30:3c:17:08:68:33:8b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
        Validity
            Not Before: Jun 14 13:00:33 2025 GMT
            Not After : Jun 15 13:00:33 2025 GMT
        Subject: CN=264e0e2e450633b2b700b91ef334278e738e8ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:37:84:b0:35:43:fd:10:e4:29:f8:fe:02:
                    42:ca:b8:46:95:f8:07:65:d0:6a:ad:ff:5c:44:16:
                    c0:a6:c8:b9:d0:d7:b5:9c:d7:a9:dc:0c:ce:7d:7d:
                    7c:ed:50:7e:ec:a0:e3:1b:a5:c2:20:aa:d5:c6:dd:
                    5d:89:fa:d0:a0:42:04:18:16:8c:a1:ad:e8:30:5d:
                    68:0a:d1:30:dd:c5:bf:2d:de:e0:e7:3b:45:49:06:
                    49:f4:00:93:54:0e:a7:13:85:6b:3a:07:96:ea:b1:
                    b5:48:7a:31:40:da:73:1c:7b:c7:a1:58:b5:c8:75:
                    6d:c4:67:99:43:01:c6:13:e1:2c:a0:b7:55:6b:ff:
                    d0:b8:fe:66:11:80:97:92:0d:37:2a:99:1e:d2:8c:
                    81:bb:38:e1:5f:0e:80:2d:a0:b7:de:be:89:35:9e:
                    e2:fa:cb:b9:05:41:73:b4:9c:ae:1e:1e:31:6f:d9:
                    ad:58:00:ac:a4:b1:d4:9e:4d:e2:ea:83:32:75:32:
                    c5:52:5f:13:8f:16:33:9e:cb:73:4a:11:35:41:03:
                    76:62:b5:e1:ed:72:26:ce:7a:36:e3:ed:a9:1e:2b:
                    71:f5:50:23:ec:a2:cb:60:b5:de:40:14:3c:1f:cf:
                    43:39:01:98:af:8c:f8:0a:f3:99:c3:bc:4e:4d:55:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4E:0E:2E:45:06:33:B2:B7:00:B9:1E:F3:34:27:8E:73:8E:8A:E5
            X509v3 Authority Key Identifier:
                keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b5:46:65:05:f1:90:a7:21:08:ad:b0:30:43:04:b8:88:aa:
         43:f3:44:f9:e5:d6:ca:b2:47:b5:fb:2b:dd:4f:25:66:ae:50:
         17:e6:d5:ca:48:10:77:a4:95:92:cc:6e:0f:0a:19:21:d9:ae:
         97:a2:ce:5d:cc:15:03:d1:85:9b:f9:70:e4:62:4d:c7:61:3d:
         8f:b3:51:b7:a5:63:08:a6:00:4e:fd:f6:ed:a2:35:1f:f3:62:
         80:70:93:02:27:0b:ee:f8:8f:e8:a8:9e:10:7e:ba:31:44:7c:
         42:d4:d2:03:63:b5:5f:94:31:df:86:d4:71:88:6a:7f:34:2a:
         dd:55:0e:cc:52:85:70:77:08:5b:31:47:62:92:f5:22:18:13:
         63:7a:3d:b0:f7:2a:e0:19:7c:03:ea:9f:70:16:d0:fe:88:14:
         db:63:4d:0d:04:1a:0a:6b:b4:37:36:ec:82:17:f9:a3:df:dd:
         44:14:9e:c0:5a:4b:cd:ab:c3:98:13:cf:72:13:f2:f2:e7:eb:
         1f:30:fe:fe:10:f6:07:ac:f4:71:4e:22:91:ea:96:8e:5a:b7:
         87:e6:2a:c4:d0:4c:bd:d6:93:94:06:0b:7a:a7:0d:c7:78:62:
         fe:3b:b2:72:40:90:3f:6d:40:37:64:a5:3e:0d:05:0b:40:a9:
         55:ee:ab:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:21 2025 by rpki-client