Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File:                     X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier:          dMq5BL1euL0rS+iK061uVDb+UlZw5p430wVTVC69Dsw=
Subject key identifier:   58:BE:B5:A2:E7:82:F5:E2:2D:7E:DB:E4:CB:03:8A:B8:20:BC:0D:EB
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer:       /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial:       019774BFE00C42A0962B2D0582537454BDC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number:          07B6
Signing time:             Sun 15 Jun 2025 18:00:21 +0000
Manifest this update:     Sun 15 Jun 2025 18:00:21 +0000
Manifest next update:     Mon 16 Jun 2025 18:00:21 +0000
Files and hashes:         1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: lZKz6dJaBbDwXgdgX0kTZZ9rxIHm2vekiFYkrq9By7w=)
                          2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:bf:e0:0c:42:a0:96:2b:2d:05:82:53:74:54:bd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
        Validity
            Not Before: Jun 15 18:00:21 2025 GMT
            Not After : Jun 16 18:00:21 2025 GMT
        Subject: CN=58beb5a2e782f5e22d7edbe4cb038ab820bc0deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8f:17:8d:bf:6b:31:70:2f:54:94:31:06:1a:
                    6e:b6:b4:11:01:ae:a0:ac:dc:49:2f:26:95:d6:b8:
                    a9:ea:42:54:a5:94:53:1a:ce:f7:7a:5e:f3:68:86:
                    79:2b:9d:2a:5f:ed:12:27:b3:8b:91:6a:be:28:af:
                    71:d3:82:24:9a:ea:88:fd:16:fc:49:85:cb:99:56:
                    04:5c:06:94:b3:ae:82:da:2d:79:f8:27:f8:a3:6c:
                    2d:84:68:87:32:29:e9:26:65:ed:4f:90:50:ba:fc:
                    df:57:ec:5b:ac:b8:1b:a5:50:dd:07:d6:25:d2:18:
                    2f:d2:bb:73:c7:a9:40:d8:6d:37:7c:9e:00:6d:54:
                    ec:4b:36:c2:c1:77:9f:1c:f9:75:24:29:a0:83:21:
                    9e:32:6b:87:b6:8b:cb:60:ab:ce:cd:a1:0c:86:53:
                    ce:ff:4e:22:87:93:53:f5:72:a0:a1:29:23:c6:7e:
                    99:72:0a:22:a3:f6:3d:0b:02:f4:5d:c0:bd:11:56:
                    f8:d5:8e:5a:c6:82:4a:a8:c7:e2:9a:4f:5d:0d:a2:
                    94:34:58:60:f7:f5:eb:94:39:39:a6:a9:c4:29:d2:
                    06:04:f5:ba:ae:21:91:4a:3b:41:5f:f1:77:17:a8:
                    d1:58:ca:b5:0f:0a:98:32:28:a9:93:9e:8b:10:de:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BE:B5:A2:E7:82:F5:E2:2D:7E:DB:E4:CB:03:8A:B8:20:BC:0D:EB
            X509v3 Authority Key Identifier:
                keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6b:bd:ac:4c:4c:71:5f:e7:8b:8b:be:60:01:c7:2e:91:29:
         8e:6b:a6:0a:b8:b8:05:37:dd:c5:ed:27:13:b7:e8:50:36:1a:
         07:42:56:85:ae:71:3b:4c:c7:97:54:8f:5d:a6:7c:a4:0e:ab:
         bf:8e:0c:92:47:6d:15:4d:04:42:e7:ae:bf:6f:bb:05:1c:cc:
         25:c2:7d:c7:e2:23:18:0a:7d:a2:55:44:1f:a5:3c:ce:ad:e5:
         65:e5:a8:ec:52:35:45:4d:a9:29:20:83:ba:68:61:a9:3c:54:
         04:e7:a6:6d:8a:41:90:ab:45:58:53:41:40:1e:33:2d:f0:c3:
         08:11:51:e5:d3:ef:47:4b:c3:78:e3:dc:57:0c:07:2c:3b:0d:
         e8:dc:f1:00:e7:7e:9a:1a:2a:f0:e1:e3:e4:a6:ff:bf:1a:14:
         8f:c2:fb:54:e8:05:ce:39:ee:fa:fe:ee:83:5a:a9:0d:f7:ef:
         43:3c:03:a1:b5:78:73:b6:58:6b:90:2d:6f:59:30:0e:5e:16:
         05:1f:0d:bf:0d:f4:9c:27:02:8d:47:1d:5f:03:d1:2d:90:27:
         e0:d4:5c:a6:02:5c:41:00:31:38:7d:69:4f:d5:e7:74:5d:a4:
         7a:6e:e1:5a:d5:b3:b6:a9:85:fe:89:14:1a:74:94:e7:44:35:
         a4:f5:81:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:50 2025 by rpki-client