Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File:                     xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier:          zkgBq0fKXrH/98rNDPvrRTtcoBuA+BhRhdB6y/UfeJc=
Subject key identifier:   0D:12:66:04:29:56:DB:4E:44:9E:27:7B:BD:97:79:9C:02:3F:26:7C
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer:       /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial:       0197C537DFB8E66D70757B27051A42FD8C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number:          0185
Signing time:             Tue 01 Jul 2025 09:01:02 +0000
Manifest this update:     Tue 01 Jul 2025 09:01:02 +0000
Manifest next update:     Wed 02 Jul 2025 09:01:02 +0000
Files and hashes:         1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: aBH9I7xV1lFWZ72mHDEakxDsmxDMLID+THudpWfEqa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c5:37:df:b8:e6:6d:70:75:7b:27:05:1a:42:fd:8c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
        Validity
            Not Before: Jul  1 09:01:02 2025 GMT
            Not After : Jul  2 09:01:02 2025 GMT
        Subject: CN=0d1266042956db4e449e277bbd97799c023f267c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:31:4b:09:bf:ec:92:a4:b6:35:5b:d3:6d:af:
                    7b:8d:af:cd:e7:73:72:a3:1d:62:a4:13:3c:1e:5f:
                    1e:54:4d:ed:90:58:d6:e7:36:ee:e3:53:6b:2f:a2:
                    07:90:52:2f:3a:39:f7:c8:c1:b0:32:49:5c:f4:97:
                    c8:58:49:c3:3d:39:cb:9f:f8:3f:83:38:8d:e1:07:
                    04:b0:ea:b9:50:7e:8d:19:31:8a:e8:fc:1f:72:51:
                    9e:45:55:b3:bb:31:fa:df:8f:21:31:88:17:e1:3a:
                    91:cf:1d:63:98:c2:89:07:fb:86:cd:2f:6c:5c:06:
                    54:6c:55:33:dc:c7:46:4e:6c:a3:e2:a5:51:b3:39:
                    bc:50:ed:84:11:8b:36:a8:15:2b:9a:2c:93:a7:18:
                    72:3e:6b:b3:62:7c:69:ae:3f:1e:12:83:48:03:76:
                    09:80:a8:e5:91:8c:c7:79:51:8e:0e:5b:74:67:16:
                    ac:fb:f3:c4:da:c8:20:6c:4f:a1:ce:b7:4c:60:0b:
                    ba:cd:d5:3a:34:79:e0:5c:ef:8d:5c:8b:be:90:26:
                    37:4e:a6:38:67:14:3d:17:23:15:5d:0c:fc:f3:ef:
                    17:3b:01:25:bd:8a:f8:96:74:7e:f7:5b:c5:a8:8d:
                    b4:6d:27:36:54:c1:f0:04:c7:ea:6b:bb:91:7a:87:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:12:66:04:29:56:DB:4E:44:9E:27:7B:BD:97:79:9C:02:3F:26:7C
            X509v3 Authority Key Identifier:
                keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:51:6e:88:b4:36:8a:0f:44:e4:80:6d:42:90:9f:41:f2:af:
         c5:58:1c:52:2d:0a:71:69:34:82:1b:3e:c4:b6:74:cc:c4:32:
         49:87:4c:a7:db:bc:a8:c7:55:c2:f4:dd:c3:35:0a:45:a6:e7:
         a0:1a:29:0d:ad:73:67:c4:c0:7c:db:b3:01:a2:c3:15:d7:79:
         2e:0d:eb:a3:2b:3e:9f:19:83:ad:28:9a:ab:3c:e4:7b:5e:a7:
         46:a0:f2:58:c7:60:af:ba:f4:79:32:e0:0f:4b:10:55:f3:76:
         aa:f0:17:83:8b:47:2e:32:11:90:fb:1e:a3:13:c5:64:78:80:
         a7:1f:0a:0e:6e:d2:35:6a:ae:76:1a:49:24:c5:0c:cc:f1:65:
         1f:d8:bf:34:9e:80:dd:4f:3e:83:84:de:cd:aa:0c:63:1c:8e:
         b3:2d:1f:88:00:2d:57:41:c5:53:e5:38:0c:01:9e:3e:84:39:
         cf:4f:31:20:17:88:b5:6c:07:16:a0:f3:df:27:a1:1d:09:f4:
         d1:d6:61:fb:5c:41:a5:a2:dd:81:a2:20:74:16:46:76:27:3b:
         e9:d0:8e:f1:e8:a6:ac:36:ee:ae:de:8d:cc:bf:bd:4a:35:16:
         22:55:0f:bb:43:71:fe:d4:9f:64:4a:da:73:5e:81:bb:82:26:
         86:57:9e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFN9+45m1wdXsnBRpC/YyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTcxNzQ1MDE4N2ZmZDM4ZWY0MWI3MWFiYzAxZGNlZDhi
YmJlNjQwHhcNMjUwNzAxMDkwMTAyWhcNMjUwNzAyMDkwMTAyWjAzMTEwLwYDVQQD
EygwZDEyNjYwNDI5NTZkYjRlNDQ5ZTI3N2JiZDk3Nzk5YzAyM2YyNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DFLCb/skqS2NVvTba97ja/N53Ny
ox1ipBM8Hl8eVE3tkFjW5zbu41NrL6IHkFIvOjn3yMGwMklc9JfIWEnDPTnLn/g/
gziN4QcEsOq5UH6NGTGK6PwfclGeRVWzuzH6348hMYgX4TqRzx1jmMKJB/uGzS9s
XAZUbFUz3MdGTmyj4qVRszm8UO2EEYs2qBUrmiyTpxhyPmuzYnxprj8eEoNIA3YJ
gKjlkYzHeVGODlt0Zxas+/PE2sggbE+hzrdMYAu6zdU6NHngXO+NXIu+kCY3TqY4
ZxQ9FyMVXQz88+8XOwElvYr4lnR+91vFqI20bSc2VMHwBMfqa7uReoecrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0SZgQpVttORJ4ne72XeZwCPyZ8MB8GA1UdIwQY
MBaAFMWXF0UBh//TjvQbcavAHc7Yu75kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NjhmODItOGUzNS00ZWIzLTgxMDQt
YTgwMmQ5ZTZiYzE2LzEveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NjhmODItOGUzNS00ZWIzLTgxMDQtYTgwMmQ5ZTZiYzE2
LzEveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFFuiLQ2
ig9E5IBtQpCfQfKvxVgcUi0KcWk0ghs+xLZ0zMQySYdMp9u8qMdVwvTdwzUKRabn
oBopDa1zZ8TAfNuzAaLDFdd5Lg3roys+nxmDrSiaqzzke16nRqDyWMdgr7r0eTLg
D0sQVfN2qvAXg4tHLjIRkPseoxPFZHiApx8KDm7SNWqudhpJJMUMzPFlH9i/NJ6A
3U8+g4TezaoMYxyOsy0fiAAtV0HFU+U4DAGePoQ5z08xIBeItWwHFqDz3yehHQn0
0dZh+1xBpaLdgaIgdBZGdic76dCO8eimrDburt6NzL+9SjUWIlUPu0Nx/tSfZEra
c16Bu4Imhleegg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:29:51 2025 by rpki-client