Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
File:                     iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json)
Hash identifier:          ZRQ71S6u9WH5npXX4mqsswbkBoQrb3cW2VbbdJrojo0=
Subject key identifier:   67:B9:2A:B0:7E:81:5C:F5:9B:B6:06:57:67:0E:A7:08:E6:D5:85:70
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Certificate issuer:       /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial:       0197BFDA886D0E5442F5454312DE6D19A9CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
Manifest number:          154B
Signing time:             Mon 30 Jun 2025 08:00:59 +0000
Manifest this update:     Mon 30 Jun 2025 08:00:59 +0000
Manifest next update:     Tue 01 Jul 2025 08:00:59 +0000
Files and hashes:         1: h4rlWsGQyp7l9eg6oqaTJSAFMT8.roa (hash: uarWJUMCX+17tjbtXPupyY/SCv5UIEMVh4slAsONpPQ=)
                          2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: H472oUfkOVAHCHUjwLqLmdXkPQ2vu8hWJrDBbuzNvmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bf:da:88:6d:0e:54:42:f5:45:43:12:de:6d:19:a9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
        Validity
            Not Before: Jun 30 08:00:59 2025 GMT
            Not After : Jul  1 08:00:59 2025 GMT
        Subject: CN=67b92ab07e815cf59bb60657670ea708e6d58570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:a3:f5:04:50:25:8c:7c:45:59:17:14:5d:
                    c0:4c:17:eb:cf:31:50:53:99:29:dc:bc:b3:0b:fd:
                    91:69:84:a4:fe:28:36:7d:8f:04:55:81:42:3c:e0:
                    94:c5:32:62:82:a0:d9:fa:87:17:5e:a4:db:7c:52:
                    12:46:29:3e:af:80:f1:9b:33:8b:1c:21:e3:bf:55:
                    ad:ff:da:20:af:ed:0f:24:70:81:bf:f4:7b:b8:bb:
                    fa:39:f4:fc:25:5d:c4:1a:36:85:12:d8:7f:7f:d1:
                    82:d1:1f:e6:d9:16:a9:f9:23:f1:35:72:95:3d:7a:
                    51:2f:db:77:5f:ae:25:e6:ae:24:55:06:d4:c8:39:
                    a5:b5:86:c5:63:35:ee:03:ac:8d:43:52:5a:8a:b8:
                    ba:ba:8e:9d:61:7c:0e:3b:49:cc:ce:1c:91:44:87:
                    46:8f:ed:2a:83:29:32:f2:12:ab:13:ee:09:d3:4c:
                    64:3a:8f:01:81:76:f6:6c:e3:34:9a:02:5b:e4:dd:
                    8b:92:6e:07:b7:95:4a:78:0f:7d:e9:66:d3:38:de:
                    1a:40:bc:26:3b:ed:46:f2:4d:23:0c:17:fd:ba:fa:
                    b8:d0:d3:b8:39:96:89:f5:32:c6:a4:d9:74:ee:cf:
                    54:64:63:3f:39:c5:f1:69:cf:8a:1c:09:6a:4d:12:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B9:2A:B0:7E:81:5C:F5:9B:B6:06:57:67:0E:A7:08:E6:D5:85:70
            X509v3 Authority Key Identifier:
                keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b6:f5:63:f6:ec:48:42:a9:40:ec:df:52:45:69:ed:dd:d5:
         40:87:97:cf:56:5b:70:6c:17:c8:c2:7e:b9:7d:36:6b:e4:a4:
         b6:79:40:ab:a3:e0:e3:15:c0:17:fc:94:e9:59:49:db:24:12:
         b3:73:66:aa:0a:2f:fa:30:d7:69:99:44:87:9a:a0:e5:0e:83:
         32:9a:ac:33:3f:3a:66:be:a7:9d:69:f5:ed:57:eb:1a:32:0f:
         15:bf:59:6f:2c:5c:36:47:cf:19:e5:1e:ed:2c:1d:44:7d:4a:
         ef:6b:73:93:1d:88:53:9a:20:6a:8d:ba:fa:a7:9b:3d:d6:b6:
         a4:c8:f2:1b:f0:4c:f8:3b:43:e4:d4:e9:ac:0c:18:4b:13:77:
         ed:03:93:b2:69:a1:64:88:b5:8f:cc:52:85:34:ea:bd:6d:2c:
         71:da:c6:75:7a:38:7b:cb:eb:8b:f2:18:01:b4:5a:d7:69:3f:
         9c:5d:7b:7a:95:31:60:f3:6f:41:00:11:db:f0:63:79:66:3d:
         ed:54:94:89:43:db:15:c4:b3:2a:8d:31:6b:3f:d8:fc:93:55:
         2c:60:64:5e:3a:17:da:2e:03:7c:24:45:5f:b2:ca:00:2d:68:
         ae:ab:c7:31:bb:67:cb:f7:32:a4:e0:a7:60:a8:94:d9:f9:df:
         24:7a:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:53:46 2025 by rpki-client