Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File:                     Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier:          lCFUGPEGh1tfDanph7n3sOREFBawJNAfs0MvDiWUab0=
Subject key identifier:   45:77:C4:29:D7:EC:A9:1A:0C:0A:25:44:7F:AA:D0:03:F2:7C:56:34
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer:       /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial:       019771888FB08810CE0E258F58D80FB1018F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number:          1591
Signing time:             Sun 15 Jun 2025 03:01:04 +0000
Manifest this update:     Sun 15 Jun 2025 03:01:04 +0000
Manifest next update:     Mon 16 Jun 2025 03:01:04 +0000
Files and hashes:         1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: P6EgViVV66+mu3TItWnoUW8uO16zt2oiw6IghpAtUS0=)
                          2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:8f:b0:88:10:ce:0e:25:8f:58:d8:0f:b1:01:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
        Validity
            Not Before: Jun 15 03:01:04 2025 GMT
            Not After : Jun 16 03:01:04 2025 GMT
        Subject: CN=4577c429d7eca91a0c0a25447faad003f27c5634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4f:5a:9a:d7:91:d6:54:74:1b:ef:d3:61:83:
                    4e:f8:11:97:3f:48:fa:8c:d6:75:b0:41:b3:75:6d:
                    ef:67:09:b0:d1:05:08:25:d7:a7:19:16:ba:5d:1f:
                    9e:12:65:89:15:d2:42:1f:79:e5:ba:10:54:bb:d7:
                    5d:25:69:40:af:0b:71:45:5f:ff:ad:8b:0a:52:be:
                    0f:aa:db:f6:01:ce:32:74:a5:e8:a8:41:60:94:e8:
                    a1:bf:de:e1:5f:52:bf:53:64:c8:e2:94:15:3d:37:
                    47:99:f9:2d:41:a4:24:94:09:cf:37:5a:d2:14:fc:
                    48:59:1a:2a:0d:fb:7b:e6:c1:19:15:f3:93:41:37:
                    ce:88:79:11:e7:d4:55:ba:48:bf:ac:9b:3a:92:d0:
                    2d:75:8b:1f:22:5f:32:62:8d:69:07:10:dc:9a:df:
                    51:1a:28:c6:d7:a7:8a:5d:ea:cd:7e:f1:78:2a:68:
                    83:2f:96:35:ef:05:fc:f2:60:d0:24:88:1d:72:42:
                    bd:aa:bb:fe:2e:89:9c:cc:ba:d2:9c:9c:b8:e7:8f:
                    36:5a:34:5f:24:79:01:55:a3:19:29:6b:bd:5d:d3:
                    67:39:78:33:eb:1c:e8:d0:ec:a9:1f:20:b7:3c:da:
                    ca:03:33:4e:cd:e4:7b:cb:0d:21:a5:c2:36:42:e0:
                    8d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:77:C4:29:D7:EC:A9:1A:0C:0A:25:44:7F:AA:D0:03:F2:7C:56:34
            X509v3 Authority Key Identifier:
                keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:29:b1:93:33:8d:2d:1c:8a:53:2b:7b:9c:8e:05:18:b3:c3:
         e0:96:67:51:18:a6:44:8f:ef:14:0a:3d:ea:91:c9:3f:e4:6e:
         18:29:80:e1:87:d0:f3:31:02:31:f9:cb:a3:ed:8c:1f:62:65:
         2c:ae:50:cd:ca:30:cb:16:30:d4:49:9c:91:af:ee:9e:78:82:
         31:35:ab:d7:84:ef:f3:83:f6:53:93:0e:96:aa:42:36:72:18:
         80:77:57:94:87:5c:a1:9a:61:22:91:58:72:3f:ec:52:1f:40:
         ab:f5:20:73:61:24:b5:d4:1a:da:ca:9e:cc:0e:91:94:69:f3:
         23:fd:a4:1f:c7:f3:1c:e5:ce:33:d5:4a:d1:8a:6b:df:1e:b0:
         f4:b1:a9:57:76:ae:35:00:96:64:d7:6f:31:5f:bc:9c:b5:d0:
         8c:75:f9:cf:44:07:c2:e9:f4:94:cc:c3:46:bf:83:32:aa:1e:
         d7:ce:0a:e6:7e:aa:7b:c8:6c:02:0c:69:f8:c1:45:bc:f1:2a:
         31:c5:53:30:fa:76:e9:c0:5f:a4:6f:09:d1:57:54:af:71:cc:
         73:2c:d2:79:10:51:f9:ce:59:05:62:53:0c:aa:78:80:06:f9:
         42:f4:36:16:ae:10:45:78:e3:7f:28:2c:a9:8d:96:dc:38:3f:
         c5:7a:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:47:19 2025 by rpki-client