Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
File:                     XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json)
Hash identifier:          kIPTMiRLNBjjHz5V2WRLlDAbBoYYbiTjYoiqILGwfEU=
Subject key identifier:   82:46:59:4D:32:21:8E:2C:A6:4B:48:8A:41:B7:36:6C:CF:18:72:F1
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Certificate issuer:       /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial:       0196C4279FB11B7A991BF25BECF04D6B9B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
Manifest number:          06F4
Signing time:             Mon 12 May 2025 11:00:53 +0000
Manifest this update:     Mon 12 May 2025 11:00:53 +0000
Manifest next update:     Tue 13 May 2025 11:00:53 +0000
Files and hashes:         1: LDDIaTBR1fej7cpOLEZhnI_qSEE.roa (hash: hQxFsYpuJ6NMu49tchYpm+6BQ9fOGR3Z//8DQxrcOIY=)
                          2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: PAwdSs8tQlZPoYxlNwJEOjxqSdiqRtAIZsI8Xs231cA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:9f:b1:1b:7a:99:1b:f2:5b:ec:f0:4d:6b:9b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
        Validity
            Not Before: May 12 11:00:53 2025 GMT
            Not After : May 13 11:00:53 2025 GMT
        Subject: CN=8246594d32218e2ca64b488a41b7366ccf1872f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:d5:f9:10:07:9f:5f:88:46:d3:74:c0:a8:
                    cf:f4:c0:03:44:68:06:05:e1:89:f5:18:1e:53:b8:
                    a9:00:0c:b9:e9:ac:60:3a:29:e7:a3:41:a6:42:16:
                    41:a5:c7:45:af:de:56:4c:47:4e:cd:2c:3f:dd:fa:
                    37:00:eb:a1:e6:5b:a9:25:20:f6:f9:23:43:48:55:
                    7c:b4:bb:ad:bc:ae:b7:65:1d:5f:22:fa:6d:0d:c9:
                    c5:6e:e1:c0:06:ba:a1:e4:1e:61:aa:46:6d:f4:e4:
                    4f:5c:79:70:db:76:9c:e8:8b:af:00:d4:9e:93:19:
                    3a:ee:27:dd:d8:98:0b:7d:c7:05:39:1e:c9:a8:63:
                    0e:15:7a:78:42:90:2f:73:53:77:b0:90:52:29:c4:
                    a8:69:95:0f:df:8b:e7:c5:64:ba:0e:67:7b:a8:8e:
                    eb:d3:95:91:64:a6:c8:b4:31:4b:75:89:fe:13:60:
                    23:98:0b:2f:2a:5b:8f:f5:cc:f9:54:c8:45:a9:85:
                    f4:d3:8c:55:7e:2f:e4:39:00:5d:c0:19:b4:3b:55:
                    fb:00:e4:fa:d5:40:d1:e5:f6:81:cc:a0:9d:93:6a:
                    87:31:28:91:08:b2:31:68:61:05:1d:4c:b4:ee:04:
                    81:98:24:5f:08:2d:25:5c:0b:72:b8:b7:15:fb:62:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:46:59:4D:32:21:8E:2C:A6:4B:48:8A:41:B7:36:6C:CF:18:72:F1
            X509v3 Authority Key Identifier:
                keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:6c:82:a7:95:7a:b0:9b:a0:49:79:c3:89:21:89:3d:1a:
         5b:6f:55:32:59:67:07:21:3b:49:45:8c:2e:66:cf:21:18:30:
         da:43:04:4a:14:43:44:50:e3:a9:d4:06:6b:fa:7c:32:ea:f6:
         cf:2b:42:d0:18:ce:ff:73:3b:c4:c2:8e:40:89:94:12:b7:a4:
         4b:8d:eb:7b:44:cb:40:48:28:b6:b1:48:60:ce:b6:5a:e7:3c:
         10:90:d5:dd:2a:d6:a8:3b:ce:8e:8b:48:81:86:d6:7a:ee:ed:
         14:69:6b:9a:62:c8:f1:19:4a:c3:89:f7:03:2a:3e:0c:bc:4b:
         de:64:59:eb:5a:9e:05:bf:1f:03:fc:41:47:0d:5a:70:51:bd:
         de:77:7e:2c:98:92:4e:5e:d2:59:89:d9:02:3b:79:f1:9c:80:
         b8:c6:16:6b:43:94:a3:37:42:5c:d5:b5:e7:d8:bf:78:0c:4f:
         50:f7:b1:c3:b3:21:35:e6:fd:60:b8:03:c1:51:9e:7f:70:42:
         41:4f:62:bc:7c:c0:26:5b:c6:4b:51:16:ce:d1:2a:4d:0a:1a:
         99:ac:59:78:2c:83:07:8d:ad:96:f9:76:e3:a9:09:fc:2e:19:
         aa:c3:ee:44:c5:22:e6:81:7e:25:57:b6:25:e3:dc:1d:91:ca:
         a4:91:12:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJ5+xG3qZG/Jb7PBNa5t1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZDhkZTA4MjA2NGViM2ZlYjQwMmE4NzNlNThiYjY4Y2Y1
ZDQ5MWUwHhcNMjUwNTEyMTEwMDUzWhcNMjUwNTEzMTEwMDUzWjAzMTEwLwYDVQQD
Eyg4MjQ2NTk0ZDMyMjE4ZTJjYTY0YjQ4OGE0MWI3MzY2Y2NmMTg3MmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvnV+RAHn1+IRtN0wKjP9MADRGgG
BeGJ9RgeU7ipAAy56axgOinno0GmQhZBpcdFr95WTEdOzSw/3fo3AOuh5lupJSD2
+SNDSFV8tLutvK63ZR1fIvptDcnFbuHABrqh5B5hqkZt9ORPXHlw23ac6IuvANSe
kxk67ifd2JgLfccFOR7JqGMOFXp4QpAvc1N3sJBSKcSoaZUP34vnxWS6Dmd7qI7r
05WRZKbItDFLdYn+E2AjmAsvKluP9cz5VMhFqYX004xVfi/kOQBdwBm0O1X7AOT6
1UDR5faBzKCdk2qHMSiRCLIxaGEFHUy07gSBmCRfCC0lXAtyuLcV+2JD8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJGWU0yIY4spktIikG3NmzPGHLxMB8GA1UdIwQY
MBaAFF7Y3gggZOs/60Aqhz5Yu2jPXUkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYt
YWVhMmM0ZTI2NzcwLzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYtYWVhMmM0ZTI2Nzcw
LzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOlsgqeV
erCboEl5w4khiT0aW29VMllnByE7SUWMLmbPIRgw2kMEShRDRFDjqdQGa/p8Mur2
zytC0BjO/3M7xMKOQImUErekS43re0TLQEgotrFIYM62Wuc8EJDV3SrWqDvOjotI
gYbWeu7tFGlrmmLI8RlKw4n3Ayo+DLxL3mRZ61qeBb8fA/xBRw1acFG93nd+LJiS
Tl7SWYnZAjt58ZyAuMYWa0OUozdCXNW159i/eAxPUPexw7MhNeb9YLgDwVGef3BC
QU9ivHzAJlvGS1EWztEqTQoamaxZeCyDB42tlvl246kJ/C4ZqsPuRMUi5oF+JVe2
JePcHZHKpJES5g==
-----END CERTIFICATE-----
Generated at Mon May 12 14:32:32 2025 by rpki-client