Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File:                     XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier:          Yz8pZcR2Exh6TyBym6uqLdF6X8cojB4DM6ks43Y7lRE=
Subject key identifier:   C9:4B:D2:49:3F:41:F7:89:6D:94:55:1C:44:ED:73:04:1A:33:69:35
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer:       /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial:       0197C07F8B90164F6B987FA7712D13A68138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number:          0519
Signing time:             Mon 30 Jun 2025 11:01:13 +0000
Manifest this update:     Mon 30 Jun 2025 11:01:13 +0000
Manifest next update:     Tue 01 Jul 2025 11:01:13 +0000
Files and hashes:         1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: ktZKp+91j9EWvAL22l+uO5HkqHWzCYqTMg8I+DuBGWE=)
                          2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c0:7f:8b:90:16:4f:6b:98:7f:a7:71:2d:13:a6:81:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
        Validity
            Not Before: Jun 30 11:01:13 2025 GMT
            Not After : Jul  1 11:01:13 2025 GMT
        Subject: CN=c94bd2493f41f7896d94551c44ed73041a336935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:60:2e:73:fb:c6:8c:c2:09:ab:4c:0c:dd:
                    8e:1d:56:6a:02:5e:49:ac:2b:15:02:c2:80:5b:54:
                    8e:d5:1d:9d:da:22:4c:31:01:d9:47:f7:cf:e3:95:
                    47:61:a0:04:e9:05:69:3f:61:03:17:0d:24:48:26:
                    8b:8e:ce:5f:69:a4:5a:49:c7:b0:68:6c:0e:07:94:
                    bb:83:21:ea:1c:8d:ba:4d:ec:a6:9b:31:a1:da:cb:
                    0a:00:3d:d7:76:05:01:9e:ca:4d:6e:51:b9:94:f5:
                    f0:3f:e1:11:4c:d4:d2:77:15:b0:00:13:ef:b7:bd:
                    43:05:d4:fd:f2:e5:34:95:9e:8b:e6:b5:fd:e2:70:
                    b5:09:4d:35:9e:81:0c:fb:f4:ee:cb:0e:c5:d8:43:
                    de:1c:ad:18:ee:51:01:15:08:d1:cd:63:33:bf:a4:
                    5e:74:6b:a3:06:19:71:bc:39:d8:4f:8f:bc:f3:76:
                    43:62:be:9c:16:8f:66:07:b9:cf:e0:00:58:c7:bb:
                    0f:14:d7:86:4c:18:45:93:95:28:b2:ff:9f:24:78:
                    d3:fe:61:2d:df:9f:27:c1:ac:9a:1c:09:67:bf:e3:
                    60:b4:8f:65:35:e8:f4:d3:8e:4f:c5:f9:9e:25:85:
                    33:ca:ed:bd:e9:95:a4:35:4d:56:f7:9c:22:82:ab:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4B:D2:49:3F:41:F7:89:6D:94:55:1C:44:ED:73:04:1A:33:69:35
            X509v3 Authority Key Identifier:
                keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:51:a5:e6:73:61:3a:a0:17:c8:83:0d:e2:1f:b2:97:ad:ab:
         82:13:cd:56:d9:51:8e:8b:17:a6:21:0d:f5:3f:bf:ca:82:13:
         49:74:92:4c:75:6e:8f:e4:dd:9e:32:56:8f:ea:3d:27:47:25:
         38:08:b6:6c:72:95:5b:8a:c0:47:e8:8e:ee:0c:ab:17:0c:98:
         a5:3d:64:a9:73:20:11:b3:b7:d8:30:d5:8d:43:40:f3:00:29:
         7e:6d:8c:ab:65:32:b5:c4:b3:bb:9f:9f:df:17:67:82:08:e2:
         1a:c4:fb:48:7a:b7:53:65:e8:4d:02:9f:c4:ab:2d:a2:43:18:
         31:57:a1:61:37:17:72:d0:61:85:0b:49:a4:bd:08:50:d8:9f:
         ab:e2:54:20:cd:3c:cd:50:a1:58:2e:86:e0:55:e7:f7:9f:68:
         33:79:e8:ed:e9:58:59:24:00:69:5d:47:4b:40:b9:3d:5f:de:
         ce:f4:08:84:c2:6c:dc:0b:9a:0f:89:b4:54:a5:bb:ea:78:c7:
         dc:6a:5d:60:5c:11:f4:03:82:96:ef:7f:f7:dd:0c:43:c2:fb:
         f9:a7:75:2c:fb:06:c9:26:1a:ae:ff:3d:20:5d:01:bd:8e:42:
         91:49:9f:61:5b:3a:de:5e:0d:62:b1:8a:2d:90:6f:f4:bb:0e:
         75:29:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:06:17 2025 by rpki-client