Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File:                     xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier:          TrUovwfkAcNjT6AExxmH82F8Wdb7S55mXaqG6Xy0zOs=
Subject key identifier:   12:24:7F:7A:E1:A8:8A:C6:76:FC:08:95:78:EC:A0:45:D7:7A:81:43
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer:       /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial:       0196ADD652626D8FF6A9A3E2AB29D3EB6535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number:          0481
Signing time:             Thu 08 May 2025 03:00:26 +0000
Manifest this update:     Thu 08 May 2025 03:00:26 +0000
Manifest next update:     Fri 09 May 2025 03:00:26 +0000
Files and hashes:         1: n5CLi01m2wEwkEwNJimVxySnb68.roa (hash: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=)
                          2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: lJhyrP+YNqJK6nKYVl9EuSf25MngAORfNdL2l8CzMg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:d6:52:62:6d:8f:f6:a9:a3:e2:ab:29:d3:eb:65:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
        Validity
            Not Before: May  8 03:00:26 2025 GMT
            Not After : May  9 03:00:26 2025 GMT
        Subject: CN=12247f7ae1a88ac676fc089578eca045d77a8143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:d8:40:85:35:98:89:f7:75:c8:0a:53:88:
                    f3:08:9c:e9:34:3f:bd:81:ff:bb:00:ea:ca:a1:34:
                    06:74:5e:85:c8:9c:45:00:c6:d1:8c:86:5c:b6:40:
                    74:00:ba:49:de:b1:c3:bc:16:cc:2e:6d:27:b7:16:
                    97:01:bb:9d:56:90:be:b5:da:41:f5:6b:be:d1:65:
                    28:8c:40:b4:d7:ec:a5:6b:c0:54:c0:55:9a:b4:1c:
                    16:bc:5c:30:2a:1e:f8:d8:1d:f3:d4:2d:01:81:87:
                    d0:88:da:cf:c1:41:c4:61:bf:ff:3a:34:ed:4c:7f:
                    45:a4:c0:aa:96:d4:15:e7:2a:3d:be:09:86:86:fe:
                    3a:0e:eb:a1:d1:06:e6:c3:e7:b5:32:f1:4d:db:4b:
                    a9:c7:46:28:63:b1:ee:12:33:46:9a:55:88:50:43:
                    eb:4b:5f:5b:c0:1f:36:01:e3:88:3b:47:6c:4b:ce:
                    e2:77:dc:6d:cf:b1:7f:9b:74:78:39:a5:55:98:60:
                    42:47:d2:08:ad:e1:2b:14:db:e5:2c:ba:72:d3:4b:
                    94:05:d7:af:da:b8:0f:64:50:af:21:ef:15:42:3e:
                    f2:be:2b:86:10:40:51:71:f7:1a:f1:f8:9e:02:53:
                    aa:79:50:44:5c:79:b8:ba:65:6f:60:b0:ab:08:a9:
                    49:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:24:7F:7A:E1:A8:8A:C6:76:FC:08:95:78:EC:A0:45:D7:7A:81:43
            X509v3 Authority Key Identifier:
                keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:62:59:9a:62:c4:c8:81:fd:80:a6:48:68:58:9a:34:a9:8f:
         39:0e:95:3b:fb:46:83:d7:51:f5:a7:8c:5b:76:a0:2e:67:10:
         53:0c:fc:f1:13:32:09:c7:1b:03:b1:70:41:de:08:59:ec:a6:
         a2:bc:51:eb:6b:e1:3c:b0:13:1e:af:9b:93:dd:d5:f1:81:03:
         12:0e:5b:42:51:05:0c:a5:60:ed:1b:21:fd:6c:b8:bb:9b:74:
         78:7e:cb:28:10:19:05:e3:ee:82:00:0d:70:46:66:9e:84:a6:
         1d:c7:f6:ce:84:eb:86:f9:7e:99:44:5e:cf:4b:7c:18:b5:c4:
         36:d6:60:3b:e1:3c:f0:b5:88:d4:ef:d3:0d:31:eb:0d:95:9f:
         5a:76:fd:c2:83:7e:33:eb:00:2d:06:7b:e8:23:16:ee:81:8d:
         61:cf:44:7d:75:ce:66:ba:49:86:f1:81:09:09:84:23:eb:b3:
         36:eb:86:3a:4f:94:31:16:5c:07:4c:a5:0b:15:c4:88:3d:0e:
         74:4e:90:de:1d:16:47:1e:45:22:44:60:e8:1c:77:51:b5:2b:
         0d:34:07:69:3a:43:54:48:24:22:22:01:f8:11:f8:11:f1:e8:
         17:97:3c:58:6b:76:17:4c:0a:08:8d:99:44:ec:7c:b7:68:3d:
         6d:29:ee:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:33:45 2025 by rpki-client