Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
File:                     iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json)
Hash identifier:          JX3LcFlKstdDKNa5OmRJmxOK4fxA84hHk92L9poKFTs=
Subject key identifier:   78:C7:8E:00:FB:81:3C:99:9A:38:F3:96:B3:48:6B:B3:68:7F:FC:B5
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Certificate issuer:       /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial:       0197820DD6B6D65C828B1EABFA5A33990F68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
Manifest number:          152B
Signing time:             Wed 18 Jun 2025 08:00:34 +0000
Manifest this update:     Wed 18 Jun 2025 08:00:34 +0000
Manifest next update:     Thu 19 Jun 2025 08:00:34 +0000
Files and hashes:         1: h4rlWsGQyp7l9eg6oqaTJSAFMT8.roa (hash: uarWJUMCX+17tjbtXPupyY/SCv5UIEMVh4slAsONpPQ=)
                          2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: G/0Zvyu5Y2KBsr7248H9YhIHHedsE/5PMWh5qCz/bBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:0d:d6:b6:d6:5c:82:8b:1e:ab:fa:5a:33:99:0f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
        Validity
            Not Before: Jun 18 08:00:34 2025 GMT
            Not After : Jun 19 08:00:34 2025 GMT
        Subject: CN=78c78e00fb813c999a38f396b3486bb3687ffcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7b:d6:71:14:e3:89:e6:0d:36:11:0b:3a:2c:
                    e1:fa:67:4a:cd:f8:12:9d:1f:14:bc:29:90:31:56:
                    d7:15:37:37:c9:c9:78:12:fa:7f:52:56:91:45:7d:
                    6a:7e:bc:16:f2:1a:f3:f5:e2:7a:c7:41:79:40:e9:
                    e6:12:29:91:62:4b:54:c2:52:07:7e:c4:66:c2:8a:
                    b0:06:18:1d:91:fd:bd:20:58:76:7d:57:07:fb:74:
                    72:cf:eb:1b:4e:69:2e:f3:e1:b8:9b:ed:30:9d:5a:
                    68:6f:26:2d:75:12:f8:97:0c:f4:1e:78:7e:dc:47:
                    52:17:e8:6e:4e:65:64:ec:1a:9f:e7:e3:8c:5e:3f:
                    56:24:7e:fd:53:ca:76:46:06:3b:e5:b9:fb:5b:bb:
                    64:bb:4b:24:3c:44:5a:7f:80:02:59:5d:c6:ce:3f:
                    d3:20:3e:ff:01:0d:7a:51:84:58:c2:a3:b7:6c:28:
                    01:2f:66:ff:1b:21:5d:b6:e4:50:e7:88:51:1e:c7:
                    a7:22:5a:83:f6:13:52:6c:44:6b:4f:a9:1c:27:14:
                    8e:de:bd:20:6b:ae:ef:74:ae:a2:ed:b8:fc:8c:b6:
                    10:bd:86:55:15:37:47:e2:bd:5c:7f:16:b8:65:e6:
                    79:b4:a3:b0:a3:7a:40:ef:fa:98:7e:ac:c7:07:38:
                    55:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:8E:00:FB:81:3C:99:9A:38:F3:96:B3:48:6B:B3:68:7F:FC:B5
            X509v3 Authority Key Identifier:
                keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:de:d9:96:30:a5:0f:e8:30:63:cb:ed:86:56:e0:7b:e6:39:
         fc:69:c3:c8:88:14:ed:8e:3c:24:3c:a0:fc:3f:7a:96:63:49:
         ba:03:0a:f9:10:3b:72:7b:bc:20:9d:e9:6a:da:19:9d:75:c6:
         60:dc:07:26:2c:f8:8f:7b:70:a7:64:a6:a9:b4:94:cd:e5:48:
         87:39:d3:a2:38:ab:8f:24:bc:d9:7c:73:a5:ad:cc:04:0c:29:
         f5:df:cf:ad:03:11:30:45:53:7e:0d:a6:83:2d:49:bc:e6:fa:
         5c:d2:06:d5:30:35:b3:aa:1a:ce:27:29:33:4d:e5:bc:91:4e:
         b0:e9:b7:c9:d3:d7:34:3a:88:15:67:13:23:29:12:fc:d4:93:
         77:37:7f:45:78:df:5e:97:94:76:26:7b:45:8b:1d:45:19:19:
         3d:72:f2:b3:04:fb:80:33:43:d2:ec:d8:c8:ab:26:a4:d4:d1:
         ad:40:fd:3b:69:fc:0b:1f:ae:18:25:17:8c:07:01:9a:3c:11:
         45:e8:5c:11:9f:8b:fe:c7:61:e7:7a:4f:31:c5:de:05:2f:0a:
         f7:bd:12:32:b5:05:3c:fe:f5:d8:d5:c2:05:32:10:be:25:ed:
         b0:2b:9f:fd:f0:49:7f:39:ec:16:1a:d6:93:ca:f1:eb:7e:c1:
         3e:b7:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:51:24 2025 by rpki-client