Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File:                     xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier:          nEqY5/WdpeugNJIPxtRdy7OC/8clsPciCJsLSyz1+9M=
Subject key identifier:   96:B2:52:72:7A:8A:DF:E1:3B:F1:C7:66:FC:A2:FB:D0:AE:97:B9:F8
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer:       /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial:       01977FB1CAE7556548BDBBC4ABD51789CE6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number:          0161
Signing time:             Tue 17 Jun 2025 21:00:47 +0000
Manifest this update:     Tue 17 Jun 2025 21:00:47 +0000
Manifest next update:     Wed 18 Jun 2025 21:00:47 +0000
Files and hashes:         1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: KLNactJ0yyhG1FVophfEB9Nolld2Sz3X7FurctYO9V4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:b1:ca:e7:55:65:48:bd:bb:c4:ab:d5:17:89:ce:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
        Validity
            Not Before: Jun 17 21:00:47 2025 GMT
            Not After : Jun 18 21:00:47 2025 GMT
        Subject: CN=96b252727a8adfe13bf1c766fca2fbd0ae97b9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3c:43:92:71:26:54:e7:f8:b6:05:3f:08:12:
                    6e:3c:79:17:85:d3:1b:d5:96:74:8f:9f:f1:bb:29:
                    a2:59:ac:11:95:0d:de:7f:9c:e7:9a:ea:41:aa:04:
                    6a:3a:87:0a:18:0f:e1:92:93:b8:ec:29:4f:31:49:
                    d1:0a:e4:4e:3b:19:95:82:1b:f2:04:77:bd:6a:e4:
                    b5:99:d9:6c:ef:64:45:98:6f:83:ef:88:66:8a:18:
                    6a:9e:49:79:95:03:d5:b4:de:be:b6:c0:1f:15:91:
                    e7:6a:ff:d8:12:33:29:f5:55:cd:e0:bf:c9:b5:e3:
                    43:09:7d:31:16:37:e0:b6:79:0c:a1:b2:ae:15:81:
                    44:82:5a:4f:da:1d:e8:fd:b9:4a:62:d8:c5:1e:38:
                    b8:53:69:16:86:23:48:f6:63:6d:8b:94:ec:64:63:
                    f6:98:ca:40:da:72:3d:59:bc:3b:26:ca:c0:c2:ac:
                    c7:07:ca:6e:a0:4c:6c:8b:7d:bc:05:4f:77:e3:c9:
                    04:54:f2:01:67:92:da:32:5e:08:1d:a9:e8:db:87:
                    1c:ce:d9:a6:5d:82:21:54:21:9a:66:50:df:f9:7a:
                    f3:27:c1:6d:c2:0f:6d:8f:40:48:a7:42:96:7c:39:
                    38:3a:21:25:bf:e0:68:5a:59:8d:62:56:b7:d4:ff:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B2:52:72:7A:8A:DF:E1:3B:F1:C7:66:FC:A2:FB:D0:AE:97:B9:F8
            X509v3 Authority Key Identifier:
                keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b7:69:d0:a1:c7:6d:c4:b9:55:99:d8:2e:bf:7f:b8:3a:fe:
         4f:c4:64:37:99:3d:ce:0a:0b:3e:96:60:0a:fb:c2:e8:07:6b:
         92:fa:5b:b3:f6:a3:3e:ae:82:e1:c5:b8:a9:d7:c6:14:15:50:
         4d:96:59:df:cc:6f:a5:2d:33:5d:c7:0b:c0:04:fa:21:c9:86:
         cd:81:ba:a8:10:51:5b:6e:7a:e8:0b:00:63:5d:1b:db:f9:56:
         52:e1:10:39:6c:f1:bd:be:6e:36:34:8f:99:8e:37:24:be:ec:
         28:8a:42:fc:5e:26:22:81:ce:16:b2:73:10:ab:94:ba:a4:46:
         c4:a8:89:63:a1:ef:32:4e:f3:f2:a3:01:28:57:7c:6c:43:54:
         9f:4b:d5:9d:7e:e5:c8:80:df:a2:d1:41:bf:f6:00:4a:73:91:
         c5:ef:17:94:da:ea:b9:b1:7f:47:a3:07:3f:d2:7d:90:db:f5:
         ce:77:8e:4e:85:c6:b6:ec:07:e0:b6:81:49:f3:2b:b8:f5:91:
         29:1a:58:38:45:2a:ec:72:f1:b0:47:05:14:e8:95:c3:e7:87:
         f3:98:45:86:45:1d:6c:08:b1:07:f7:44:58:b1:49:ff:9e:c9:
         9b:dc:b4:c1:82:7b:46:f1:13:8a:92:b6:1b:34:e0:d4:ca:53:
         2e:14:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:03:40 2025 by rpki-client