Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
File:                     Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json)
Hash identifier:          +tQZ1YMlhGx6/2NwWhu61lb64ywAnUjyLKS/CZEJPmU=
Subject key identifier:   C0:35:81:DB:53:20:16:30:86:F4:A8:F7:C7:C6:C9:49:CC:19:A9:03
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Certificate issuer:       /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial:       0197D2864214775B7B8C9EE4FA5B80A4B96F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
Manifest number:          15DC
Signing time:             Thu 03 Jul 2025 23:01:43 +0000
Manifest this update:     Thu 03 Jul 2025 23:01:43 +0000
Manifest next update:     Fri 04 Jul 2025 23:01:43 +0000
Files and hashes:         1: 4QRA_fiIHZYB5EZuskrPHiYUUDc.roa (hash: ezfV7W42FiizqjUq0E689olr+lhYHTNnecCcrOQrwAs=)
                          2: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (hash: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=)
                          3: DabYXvkPXs2hMRDEyX4PYlbXIAE.roa (hash: R2xE23w7lL76/16oIpYK1R1COeQ1JGJ7JM3U0zJz/2Q=)
                          4: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (hash: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=)
                          5: OFV1r1QJow53fRZBggEbIKMbl2g.roa (hash: rW/jUWytgGfLF3WCPUKqcjsSdM1E9Dkl4C0j/GKMBjY=)
                          6: Ov50TFrizn532f_ZE8aau7TMbys.roa (hash: nOGVoxUNvtV+g309971HIHoTUGiX5Ek05HSumAxnkhU=)
                          7: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: 5y3SNE6BLdayNWyo4fV+X/snPaBG/ijU+gNlogPABY4=)
                          8: cId8V7j1DXooq_T1g9EFQ0FCvzw.roa (hash: QJXoETg4tOT8lLS3JnVPNBwPS3l57Eztn4NIz3Sxb1s=)
                          9: hj80hnb2niBBNHp22xfNPpXEbQM.roa (hash: rD1+7098X87+oRFyY0knEf0O3QAd6XMqFszyW+lBKlM=)
                          10: pu79fYTs8S-_ETZOL6jX4YhwZhM.roa (hash: xtfR6o8dNy7mSVduqBKsC6j7R+5Nj8AS1EPRTZznQGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d2:86:42:14:77:5b:7b:8c:9e:e4:fa:5b:80:a4:b9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
        Validity
            Not Before: Jul  3 23:01:43 2025 GMT
            Not After : Jul  4 23:01:43 2025 GMT
        Subject: CN=c03581db5320163086f4a8f7c7c6c949cc19a903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:dd:89:05:af:23:b9:f1:21:b2:7a:32:be:
                    6b:9f:9d:17:07:5f:ab:92:2e:df:13:59:53:99:7d:
                    c1:61:86:87:20:b8:4f:ae:73:ff:19:ad:9e:ca:b1:
                    c0:58:3c:50:7a:be:83:23:0b:c6:89:00:82:1e:50:
                    07:9a:dc:d1:e1:c0:ef:00:f8:bb:39:fc:cd:06:53:
                    97:07:af:e5:7b:cc:7e:68:e9:15:24:56:c1:b9:72:
                    37:59:96:2e:f8:29:3c:ce:d5:8d:cd:6b:46:bd:05:
                    bd:0d:25:73:84:d0:58:f6:ac:b9:60:bb:22:8d:fa:
                    c3:88:e1:72:39:9d:64:77:aa:cc:91:fc:ee:f2:62:
                    5d:36:a4:4b:70:44:e5:6e:45:a3:0d:66:70:8c:9c:
                    03:44:2b:64:95:78:24:e6:08:c6:6f:01:e3:ec:73:
                    23:d2:07:0f:0b:a3:d4:94:f5:99:e9:bb:03:47:37:
                    f7:f3:06:fc:32:25:fb:5c:49:e2:2a:62:1a:8f:fb:
                    c5:af:2c:22:f0:51:2f:27:ca:24:26:cd:a4:97:fb:
                    9e:61:71:8d:a8:95:d5:e8:45:83:21:b4:90:e4:30:
                    d1:84:41:e0:07:8c:2a:24:0a:d4:4f:af:e1:b8:86:
                    6a:ef:62:ef:db:7c:5d:8f:c8:42:19:e9:ac:a1:bc:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:35:81:DB:53:20:16:30:86:F4:A8:F7:C7:C6:C9:49:CC:19:A9:03
            X509v3 Authority Key Identifier:
                keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5c:6b:15:5e:dd:15:01:f3:3e:52:88:6a:23:22:a1:c1:f7:
         41:79:bf:f7:43:67:4d:e4:9d:32:5a:f2:d8:c8:ed:b4:84:bc:
         9a:de:34:bc:d0:68:18:8f:39:ed:02:57:97:15:94:a2:b1:4f:
         97:4d:f9:f6:2b:48:a6:85:e1:5e:58:5e:21:db:43:a6:31:be:
         3a:4b:da:f0:49:8e:8f:44:d6:04:c1:04:38:50:16:e2:01:b4:
         db:d1:ce:f1:95:f5:d9:e4:ea:24:25:25:be:42:35:6b:6a:9a:
         9d:8d:5d:8a:15:55:ee:53:5a:8a:bf:a3:0e:1a:2e:2f:52:d3:
         4c:02:e9:78:22:eb:c6:c9:82:99:67:b1:7d:40:68:38:44:f0:
         ad:f9:0f:48:17:68:aa:f4:27:3d:d4:77:de:52:d4:81:f7:a2:
         6e:f4:c9:c6:27:33:d9:1d:81:e5:7d:50:fb:ad:b1:83:df:85:
         b2:80:00:d3:3e:e1:16:e7:49:b9:1d:a8:3f:5f:16:f0:64:ea:
         0a:17:87:25:4f:f0:81:f7:d6:1b:be:74:44:4b:5b:9b:10:e5:
         a8:72:07:de:93:9f:29:40:9e:4f:f1:22:1b:34:c6:df:81:29:
         36:1b:d6:64:f6:b2:4b:0d:01:f3:5c:86:4b:5c:e6:6e:dc:d7:
         0c:46:c6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:53:28 2025 by rpki-client