Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
File:                     xi18rB_7LD-94oRiW_GvTGuuaw4.mft (raw, json)
Hash identifier:          vx9JFLZv89pZIt0qBSHcMfMqHUjmlyC7tBNMtBEMPTM=
Subject key identifier:   6D:B4:F7:1E:E0:A2:8B:A6:EC:DF:12:FE:D2:43:E4:C8:A8:60:69:50
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Certificate issuer:       /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial:       0197CB0313D5549E0ADC66073B6D0B4C0CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
Manifest number:          0B70
Signing time:             Wed 02 Jul 2025 12:01:05 +0000
Manifest this update:     Wed 02 Jul 2025 12:01:05 +0000
Manifest next update:     Thu 03 Jul 2025 12:01:05 +0000
Files and hashes:         1: dxX6Ti3aWleuStaWraXr4frz_Vc.roa (hash: 9TFe9RK9UFo1A/A9wWB7oP8/UKvwVNCCx5PAodMGlCE=)
                          2: um3HBZkaueSxb2_7foyvqiLtq1o.roa (hash: ldqFzPeRJ5eKPCRvhriUNm3ZQxrok0WxTabyy5e+vUE=)
                          3: xi18rB_7LD-94oRiW_GvTGuuaw4.crl (hash: H0ci8KFKHmvXgvaKCf3eGPrO+PFindgQZJAY0kH86ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:03:13:d5:54:9e:0a:dc:66:07:3b:6d:0b:4c:0c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
        Validity
            Not Before: Jul  2 12:01:05 2025 GMT
            Not After : Jul  3 12:01:05 2025 GMT
        Subject: CN=6db4f71ee0a28ba6ecdf12fed243e4c8a8606950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4e:28:c7:5c:b3:7f:78:03:76:42:14:b0:91:
                    7b:72:e8:ee:1f:66:3e:91:e4:75:62:9a:95:e5:53:
                    c8:9e:07:fe:5d:26:2a:d7:21:68:8b:03:ca:7b:f2:
                    fc:fe:ac:39:ba:97:85:1c:ef:81:84:63:6c:b0:9f:
                    b8:30:38:2c:a9:d9:52:79:c5:27:21:6c:1e:bc:f3:
                    a2:35:70:4c:1e:af:69:20:0b:20:bc:e3:9a:f9:e4:
                    bd:09:c1:42:cf:1c:94:12:ac:90:02:64:7b:59:af:
                    69:43:83:d9:e5:eb:26:89:74:cb:c5:f0:78:9a:58:
                    23:36:c3:8a:e9:09:8f:2f:40:29:16:20:6c:b5:16:
                    a9:88:be:dd:95:46:3d:97:a0:c4:2b:05:64:35:86:
                    67:67:45:40:a0:18:8e:85:f7:f3:e6:26:78:3a:2c:
                    28:f6:8d:f8:96:8a:51:8e:ee:e6:31:44:df:ed:25:
                    6d:53:21:7c:c5:8c:2f:54:74:90:03:ab:17:8f:9b:
                    0a:f2:bc:90:7a:1c:ac:f5:b4:bd:49:64:a9:90:39:
                    71:d4:ee:5e:d9:da:78:1f:9a:2e:a6:39:45:46:00:
                    4c:69:1e:32:b7:6d:20:67:1f:d0:b6:dd:b8:56:e2:
                    40:27:01:bb:7c:0e:a4:2b:d9:6b:f7:58:b7:67:19:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B4:F7:1E:E0:A2:8B:A6:EC:DF:12:FE:D2:43:E4:C8:A8:60:69:50
            X509v3 Authority Key Identifier:
                keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:20:93:9a:1d:84:6a:b4:8a:fe:04:c0:73:41:8c:92:00:82:
         0a:a9:dd:0e:20:77:af:e2:8e:b8:f6:d2:7b:a5:b6:2f:1d:5e:
         47:67:d3:0e:fb:dd:fc:23:13:71:47:c9:c0:4b:1a:c0:98:8d:
         1d:25:ec:56:91:58:a4:88:ce:83:41:59:af:0e:84:ca:04:ef:
         ef:d3:c8:9b:11:fd:51:1e:2e:d9:7f:5a:2f:bb:06:62:37:be:
         5c:28:56:77:f7:8c:45:8f:2f:8d:9a:fb:31:44:1e:fb:74:84:
         c2:ba:45:b3:10:81:74:e0:0d:c6:98:88:b2:3d:f3:cb:2f:21:
         4f:d3:11:79:37:d7:36:3d:34:f0:c6:90:5b:54:24:33:48:2e:
         e1:9b:f7:67:bc:0d:a8:c9:99:93:e9:9c:2c:46:76:8a:2c:0f:
         b8:b9:ff:fd:f8:c1:4e:48:1a:8e:9a:bd:a1:28:5c:c7:bb:ad:
         bb:fb:e3:ed:13:f1:22:61:82:7d:9c:67:da:ab:fe:06:d7:3f:
         f4:90:2f:26:fa:e1:62:a8:55:35:88:4a:ec:bf:2d:e9:e8:35:
         5d:87:11:15:ad:0c:1e:a4:66:c8:6b:fc:0a:e0:2a:c7:55:e8:
         f7:e6:e3:f8:ca:3c:2a:5a:11:a3:a8:2c:d6:ec:0a:bc:cd:17:
         a5:e5:38:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:16:14 2025 by rpki-client