Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File:                     XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier:          MmOCqtnIj58GqIqk0q8VZR/PBWuIcozbR7uno7tXUjk=
Subject key identifier:   9B:A3:94:85:F3:D2:43:E6:C8:E9:2A:09:5F:0D:3A:1E:12:CA:61:2E
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer:       /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial:       0197B77C3EA6431AFB8EDA16C1C879ABF42D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number:          0B67
Signing time:             Sat 28 Jun 2025 17:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:02 +0000
Files and hashes:         1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: 7A/jb9GBT4tgjzO3opu+v58zEeIy3g1hkJ09f0ey2/I=)
                          2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:3e:a6:43:1a:fb:8e:da:16:c1:c8:79:ab:f4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
        Validity
            Not Before: Jun 28 17:01:02 2025 GMT
            Not After : Jun 29 17:01:02 2025 GMT
        Subject: CN=9ba39485f3d243e6c8e92a095f0d3a1e12ca612e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:21:30:b9:7a:2c:c3:d1:04:f2:2d:09:d0:b8:
                    81:e2:ad:33:c7:39:77:f5:67:eb:f5:ef:33:6f:1a:
                    6e:bb:0e:a9:f3:14:cf:7c:a2:2a:40:91:e7:24:2a:
                    b2:44:0d:b6:99:40:64:89:aa:cb:0f:19:d6:99:6b:
                    ed:1a:f2:99:f2:d9:92:72:02:d3:99:f1:23:fd:04:
                    83:3b:b1:11:62:43:cf:01:18:50:da:71:86:ad:d6:
                    15:b4:ed:83:7f:a8:a8:ba:54:ae:52:71:c6:46:de:
                    2d:2d:c5:38:19:89:98:48:71:0c:ca:74:fb:1f:d9:
                    f7:91:6b:05:78:bd:72:47:22:96:14:19:38:3c:df:
                    e0:1a:49:52:db:33:5b:dc:ec:de:70:3a:ab:5e:f3:
                    c9:2d:8c:b4:89:39:46:4c:94:e4:fb:94:75:67:d7:
                    c7:54:d5:7d:e2:05:77:50:1d:d7:20:b0:31:89:c4:
                    ec:d5:fa:b7:a3:9b:51:13:4d:c6:c9:41:d0:83:b4:
                    5c:af:84:61:19:6b:8a:a3:1a:cb:1b:69:46:06:c7:
                    34:75:c2:6c:4b:9a:c0:fc:d8:25:34:40:67:5b:b7:
                    ca:3c:1d:03:91:a9:17:a7:69:cf:02:56:3d:e5:52:
                    58:22:b6:3a:e4:b5:71:36:04:b1:0b:30:93:25:70:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A3:94:85:F3:D2:43:E6:C8:E9:2A:09:5F:0D:3A:1E:12:CA:61:2E
            X509v3 Authority Key Identifier:
                keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:73:5e:e9:fa:c6:ca:12:0b:af:8d:a9:02:da:16:53:df:36:
         bf:11:8e:fb:58:9a:82:31:d6:c2:6c:cc:77:e5:a9:ef:7b:92:
         2f:9f:f6:a5:6d:f8:bc:ec:20:f6:26:5c:7e:42:a5:2f:bf:01:
         11:88:6a:ed:1e:3b:05:1a:e3:02:e6:dd:ef:9d:54:08:65:a4:
         43:c4:e6:1e:a2:37:2e:45:f1:56:58:8f:74:32:02:14:8e:90:
         95:a2:cb:4b:24:b1:02:5e:d3:81:3a:aa:7b:fe:56:56:af:22:
         4d:5d:c6:7a:7c:04:c7:30:8a:1e:0e:9b:06:ea:c7:42:d7:29:
         f1:35:41:3e:e8:65:11:de:63:19:90:0f:2d:26:d6:5d:5a:17:
         0d:ed:4b:1c:61:31:9a:41:bd:5b:c0:80:e9:c7:4a:b5:2c:4c:
         62:49:f4:5b:43:1e:b8:f5:15:f8:06:a9:2d:ed:eb:81:bc:f9:
         b6:1e:04:3f:1e:f7:9a:e8:54:b7:92:43:f2:09:01:fd:5b:f6:
         d8:46:a9:8f:ce:01:2c:81:5a:89:87:62:38:0e:0f:0a:d2:35:
         b7:34:b3:a2:3f:b3:b9:a2:8b:fa:00:a2:b7:af:d3:1f:d0:8f:
         f4:68:e4:57:98:24:82:14:cd:b2:e7:01:25:33:96:d0:ac:81:
         16:d5:56:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:11:03 2025 by rpki-client