Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
File:                     xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json)
Hash identifier:          hWXDK+CV8BuF7KawfPDUIbCetlT5af+2mvPn1w941To=
Subject key identifier:   CD:DD:E7:FC:C5:31:29:43:BF:60:16:22:65:23:D3:77:AA:50:FA:D9
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Certificate issuer:       /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial:       01976E875C20FCEDBB857F48FEFD26F19DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
Manifest number:          0B8F
Signing time:             Sat 14 Jun 2025 13:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:54 +0000
Files and hashes:         1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=)
                          2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: ueHDEwUGBM14Q/gueDrpWoZkxt8oXBGwtXQvVRNv1Gc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:5c:20:fc:ed:bb:85:7f:48:fe:fd:26:f1:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
        Validity
            Not Before: Jun 14 13:00:54 2025 GMT
            Not After : Jun 15 13:00:54 2025 GMT
        Subject: CN=cddde7fcc5312943bf6016226523d377aa50fad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:5d:5b:b9:2a:b2:c8:c2:b8:d5:f6:3b:45:
                    2a:bb:41:1f:8f:9f:91:74:0b:52:d5:ea:99:21:8a:
                    1c:a6:83:f0:4c:95:f5:7c:4a:0e:7b:e5:96:cc:3b:
                    3e:c4:60:a6:b2:a3:6d:5a:cf:03:35:9e:8d:cf:97:
                    8e:fd:fe:45:78:0f:f3:bd:5f:2c:9b:89:b7:f7:3a:
                    3e:1f:00:ae:65:77:2a:fe:0c:b5:6a:06:3e:82:76:
                    dc:0f:cc:9a:fb:26:01:83:80:98:42:a4:0d:08:07:
                    46:a2:04:54:0a:e1:0f:e1:b6:7f:20:75:96:d5:7a:
                    8e:6e:ff:30:2b:3a:79:37:9c:8f:a1:1a:99:0f:eb:
                    55:a6:b1:8e:ec:08:db:3e:2e:45:81:1d:b5:d5:2e:
                    86:7f:9e:e8:a2:9c:00:20:c8:64:ed:fb:9a:a9:34:
                    81:b6:53:58:e5:5a:75:94:48:6d:70:ee:a5:69:2a:
                    c4:a6:cc:23:29:6b:e4:2e:cf:79:ab:f8:e0:28:5e:
                    ad:f3:30:aa:17:88:e6:5f:08:a9:ed:9d:a9:aa:0a:
                    1c:b3:ab:7f:77:2f:8d:04:99:9f:dc:13:a5:37:b7:
                    54:20:b5:4b:2e:28:32:5c:11:ac:e0:51:ac:ae:b8:
                    b8:28:ef:a6:9a:9a:e7:8c:3c:76:88:f8:64:2a:1c:
                    d3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DD:E7:FC:C5:31:29:43:BF:60:16:22:65:23:D3:77:AA:50:FA:D9
            X509v3 Authority Key Identifier:
                keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8e:40:66:a1:6c:fb:48:ab:a4:17:7c:8f:d8:4f:18:48:e3:
         84:99:1e:71:56:d0:2d:58:ec:87:44:46:ba:e1:1e:cb:c3:86:
         4a:65:c1:c4:72:11:4b:d7:08:45:2e:26:7c:b7:f6:3a:78:da:
         14:2e:ac:45:28:a2:49:d0:0f:f3:5e:4f:cb:70:df:93:f7:58:
         e6:ba:3f:09:ef:79:f2:33:b3:77:bc:ec:c9:40:8b:fe:c1:3c:
         f6:5c:62:60:ea:02:7c:c2:92:d4:48:72:93:1b:df:a2:79:e4:
         b2:de:27:ba:6d:58:c3:0d:b2:0c:da:51:b7:ca:aa:d4:81:d7:
         de:dc:83:22:d7:b4:3e:dc:5d:11:b5:be:72:59:00:85:4d:fa:
         dc:db:00:36:6f:4b:39:be:c1:e2:8a:db:cb:c1:54:24:6a:d1:
         f0:63:f6:07:63:2f:ea:48:1b:cf:ce:6c:d1:c7:d6:1a:4c:22:
         08:c7:74:c7:8c:85:41:bd:3f:54:94:88:42:1d:64:61:e8:10:
         33:b0:8f:f7:16:8f:d9:ef:b6:c9:3f:a5:36:39:de:85:83:71:
         a4:d6:32:3b:7e:64:34:e4:29:5b:c0:52:c3:42:73:e3:7b:52:
         83:f5:7f:27:8d:a2:d5:fc:ed:d0:f5:aa:09:1a:a7:2d:3d:90:
         87:67:00:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduh1wg/O27hX9I/v0m8Z2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1M2Y0Mzg4YWFkZjBhZTRmZjVlZTdiZDM3MjYzYzlmMWU4
NDY3YzcwHhcNMjUwNjE0MTMwMDU0WhcNMjUwNjE1MTMwMDU0WjAzMTEwLwYDVQQD
EyhjZGRkZTdmY2M1MzEyOTQzYmY2MDE2MjI2NTIzZDM3N2FhNTBmYWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIxdW7kqssjCuNX2O0Uqu0Efj5+R
dAtS1eqZIYocpoPwTJX1fEoOe+WWzDs+xGCmsqNtWs8DNZ6Nz5eO/f5FeA/zvV8s
m4m39zo+HwCuZXcq/gy1agY+gnbcD8ya+yYBg4CYQqQNCAdGogRUCuEP4bZ/IHWW
1XqObv8wKzp5N5yPoRqZD+tVprGO7AjbPi5FgR211S6Gf57oopwAIMhk7fuaqTSB
tlNY5Vp1lEhtcO6laSrEpswjKWvkLs95q/jgKF6t8zCqF4jmXwip7Z2pqgocs6t/
dy+NBJmf3BOlN7dUILVLLigyXBGs4FGsrri4KO+mmprnjDx2iPhkKhzTYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3d5/zFMSlDv2AWImUj03eqUPrZMB8GA1UdIwQY
MBaAFMU/Q4iq3wrk/17nvTcmPJ8ehGfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUt
ZGRhMzUwYjExZjAyLzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUtZGRhMzUwYjExZjAy
LzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEI5AZqFs
+0irpBd8j9hPGEjjhJkecVbQLVjsh0RGuuEey8OGSmXBxHIRS9cIRS4mfLf2Onja
FC6sRSiiSdAP815Py3Dfk/dY5ro/Ce958jOzd7zsyUCL/sE89lxiYOoCfMKS1Ehy
kxvfonnkst4num1Yww2yDNpRt8qq1IHX3tyDIte0PtxdEbW+clkAhU363NsANm9L
Ob7B4orby8FUJGrR8GP2B2Mv6kgbz85s0cfWGkwiCMd0x4yFQb0/VJSIQh1kYegQ
M7CP9xaP2e+2yT+lNjnehYNxpNYyO35kNOQpW8BSw0Jz43tSg/V/J42i1fzt0PWq
CRqnLT2Qh2cAfQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:00 2025 by rpki-client