Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File:                     XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier:          zuTD58U9Hhxx13NFXX6KIAL3bVfH8eFfoupp/PZp2vQ=
Subject key identifier:   75:86:0E:28:F4:7F:35:47:A0:D8:FE:D8:87:21:9F:8F:6A:77:57:3C
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer:       /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial:       01969E9A43B84820D8484977F4489FDAB9D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number:          08E0
Signing time:             Mon 05 May 2025 04:00:32 +0000
Manifest this update:     Mon 05 May 2025 04:00:32 +0000
Manifest next update:     Tue 06 May 2025 04:00:32 +0000
Files and hashes:         1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: 6wN3ynqojHIhUm3F/hPsuPNGH8NxguH0LrXqZWUs+H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:43:b8:48:20:d8:48:49:77:f4:48:9f:da:b9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
        Validity
            Not Before: May  5 04:00:32 2025 GMT
            Not After : May  6 04:00:32 2025 GMT
        Subject: CN=75860e28f47f3547a0d8fed887219f8f6a77573c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:ae:ee:49:38:1f:14:82:da:41:10:7b:31:
                    94:7b:6d:62:e2:c4:4e:2a:4b:39:9c:63:32:ab:94:
                    8b:1b:17:f6:34:78:1f:c4:6c:d8:a5:66:90:ef:20:
                    fa:4e:ff:91:38:7c:63:3a:e3:d8:46:ca:a1:23:47:
                    ed:e5:a6:58:9d:5e:c1:15:8e:f6:4f:63:df:bb:69:
                    79:ff:50:78:e7:d4:e0:c3:52:91:b2:de:15:30:7d:
                    83:e7:de:5b:1f:06:9b:f6:17:86:46:f8:ae:c2:1e:
                    dd:70:3b:6a:14:93:05:ce:7d:ea:45:bf:d2:c9:77:
                    62:00:e2:9f:c6:ad:94:11:0f:84:f0:5a:87:fa:4d:
                    55:87:40:db:16:1b:8a:cd:02:74:27:7f:0b:07:2b:
                    5b:33:69:34:aa:20:42:b4:b0:1d:5f:1a:fe:d3:4d:
                    cc:27:a4:4e:c6:4f:33:76:37:a7:e7:7b:4a:20:6a:
                    8f:51:58:ef:91:d5:03:af:45:41:4f:02:8f:40:79:
                    88:45:3c:dc:9c:72:19:c5:c2:96:05:cf:18:2b:f2:
                    61:e1:eb:d2:06:ff:f3:79:ac:54:53:d0:e9:32:56:
                    d5:0c:c1:7e:0a:3f:71:18:c5:fb:e7:79:f6:46:86:
                    be:a6:a3:ee:fe:6e:c6:f3:73:8e:34:04:ed:a4:74:
                    d1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:86:0E:28:F4:7F:35:47:A0:D8:FE:D8:87:21:9F:8F:6A:77:57:3C
            X509v3 Authority Key Identifier:
                keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:43:69:d3:f6:cd:2d:a6:23:ea:8f:a9:4e:c1:d4:ed:59:c3:
         fe:8d:38:88:6e:cd:63:c2:71:45:24:38:38:7b:f2:e8:12:81:
         da:45:1a:5e:bd:f9:47:23:41:91:68:0c:c5:20:b8:a3:4a:62:
         57:d8:4c:b4:86:0d:94:6e:f9:57:86:ad:8f:2c:10:4d:9c:9f:
         84:cf:8b:19:42:fa:47:de:8b:87:38:ab:02:ff:b8:38:98:cb:
         6d:55:f3:59:60:1d:c6:32:13:1d:e4:c3:88:3c:6f:f6:61:61:
         fe:e5:5d:0a:a4:3a:a6:df:31:cb:14:b4:b4:5b:de:96:53:2c:
         df:37:51:3d:b5:ca:2b:5a:54:aa:37:7a:85:92:03:fb:6f:2f:
         62:8b:9a:51:d6:6a:67:9b:48:f1:85:d9:b6:66:eb:6d:ea:c9:
         36:d2:aa:c6:be:65:9b:c7:4b:4d:75:8e:d4:91:7c:9c:24:ee:
         13:61:74:eb:ac:f5:1a:37:ca:51:d8:80:64:7e:22:4d:6f:40:
         76:71:e5:fd:f8:09:c6:b8:5f:6d:60:1b:4f:03:9c:70:a8:d9:
         15:ef:16:17:42:3d:f7:63:e9:29:6e:5f:7d:c3:c6:72:65:26:
         ce:f9:1c:38:64:ca:0c:4b:ac:d8:67:28:8e:a8:91:8c:a7:a7:
         cf:87:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:24 2025 by rpki-client