Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File:                     x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier:          QenOKhqecCXis9CTwRXOurcnNdWd8x3fH3xP16bDZKk=
Subject key identifier:   98:D3:93:0A:0F:CA:79:79:BB:2D:34:D2:93:AA:83:9A:74:CA:F6:A1
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer:       /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial:       01976F2C264C8FD4FE825B56B502EBC740DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number:          0D5B
Signing time:             Sat 14 Jun 2025 16:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:53 +0000
Files and hashes:         1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=)
                          2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: cZ586BisWXlINLp5x4vnhjSqSezc7TmAKdN+tcxH2M8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:26:4c:8f:d4:fe:82:5b:56:b5:02:eb:c7:40:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
        Validity
            Not Before: Jun 14 16:00:53 2025 GMT
            Not After : Jun 15 16:00:53 2025 GMT
        Subject: CN=98d3930a0fca7979bb2d34d293aa839a74caf6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b0:ca:52:90:14:85:11:90:5a:6b:31:1a:8f:
                    04:f6:76:b4:ee:97:24:3a:40:21:0c:0c:a9:b8:89:
                    96:64:d0:4c:fe:5b:68:61:35:0f:12:18:18:82:67:
                    63:46:b9:41:83:a9:f9:f3:85:b6:40:6d:c1:b1:d5:
                    8a:e7:df:59:88:b8:77:dd:60:56:c3:fe:f7:9a:10:
                    7f:b8:d1:9c:a0:66:15:c9:2e:b2:c5:53:9f:64:61:
                    f8:eb:45:13:3a:27:5d:99:63:d0:27:0b:4c:c3:a4:
                    67:25:c1:69:8c:95:9f:74:d3:e5:32:c3:e4:b9:10:
                    5a:d7:b9:36:27:8e:35:01:86:7c:81:7e:a0:0c:00:
                    a2:24:ef:dc:24:04:c6:2e:df:5e:98:fa:4d:bf:d4:
                    8a:b5:b7:e0:49:75:9b:31:a7:97:3c:71:ac:b6:eb:
                    83:4f:a7:4f:79:e1:6f:72:ce:f9:c9:79:60:8d:70:
                    70:32:09:35:b6:5e:d1:0e:c4:34:cd:eb:37:40:63:
                    77:87:37:0b:e5:fd:ed:25:4f:e4:3d:61:dd:21:92:
                    bf:bd:3f:ed:45:42:88:fc:dc:22:9d:2b:9c:74:b3:
                    1d:1c:09:42:3b:21:4a:b4:52:a6:f1:ae:f2:ea:b8:
                    07:bf:df:36:4d:20:dd:d4:47:f7:15:58:2f:d5:10:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D3:93:0A:0F:CA:79:79:BB:2D:34:D2:93:AA:83:9A:74:CA:F6:A1
            X509v3 Authority Key Identifier:
                keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1b:a9:21:c1:e4:0c:0f:70:43:af:6f:ed:22:83:f2:df:8b:
         70:d8:65:f3:08:a7:8b:f1:3f:10:f0:0b:67:08:41:2a:09:ff:
         33:fb:72:04:40:7f:14:11:de:09:c8:52:41:21:0b:5e:a1:85:
         18:22:a6:cf:ab:67:18:d0:94:15:0a:5a:3f:c0:0c:06:70:6a:
         83:1f:31:a5:7d:87:7a:f8:78:7f:ea:75:ac:1c:5e:b7:a5:a4:
         9f:66:6d:19:e1:dc:86:69:5e:69:4d:3e:dd:9b:67:5d:6b:7d:
         a0:1e:66:74:e3:4b:9f:ab:c7:21:9d:30:b8:52:53:0f:bf:07:
         3c:31:49:4b:f0:a7:35:bf:ff:ed:cf:f3:8e:4c:a0:62:f2:f3:
         43:87:d9:8a:24:30:e8:f1:78:7f:09:6a:21:f8:cd:01:77:f2:
         c6:70:24:cb:6c:e0:d3:51:42:e9:fa:7b:da:4d:e9:3d:e4:6e:
         9a:d0:98:7e:bc:79:87:84:2d:cb:47:ba:57:7d:0e:53:19:ae:
         88:43:77:56:a6:29:0f:83:f4:a7:9e:70:5c:57:36:0c:91:50:
         ca:80:8e:8d:87:85:8f:71:56:5c:f3:59:f8:85:39:4e:77:22:
         29:ff:70:43:e2:20:84:e9:0b:22:0a:32:8e:35:27:82:66:ac:
         65:62:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:19:05 2025 by rpki-client