Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File:                     xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier:          FcVaWmrdlVv1igRyyI1dEy576nKZxJDkO1u+nWi/uVE=
Subject key identifier:   F2:F0:6D:71:8C:B5:89:1B:55:C9:B9:69:9B:D9:72:C0:81:38:22:A3
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer:       /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial:       0197BA0F8172C97874F2D3D1217A73CD5D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number:          13B8
Signing time:             Sun 29 Jun 2025 05:01:07 +0000
Manifest this update:     Sun 29 Jun 2025 05:01:07 +0000
Manifest next update:     Mon 30 Jun 2025 05:01:07 +0000
Files and hashes:         1: ueBb6XAUF6o0wgWHrBMyAvCjDcw.roa (hash: FG2GqOv/aixTR0aGnuCtGnWbZFyWEpFgUNZYVCVmlOI=)
                          2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: DERwWLBySmJaZM21An1bG9tTprOesPbgYaaXq0pPVns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:0f:81:72:c9:78:74:f2:d3:d1:21:7a:73:cd:5d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
        Validity
            Not Before: Jun 29 05:01:07 2025 GMT
            Not After : Jun 30 05:01:07 2025 GMT
        Subject: CN=f2f06d718cb5891b55c9b9699bd972c0813822a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4e:bd:02:3b:9c:4e:8c:7e:3c:43:66:a1:2b:
                    5e:40:ff:76:4e:26:5f:a3:2f:df:bc:e4:71:f6:58:
                    ea:aa:a7:e2:27:c4:e6:a9:ef:b7:7e:59:62:64:52:
                    6c:8a:2f:df:72:42:bb:b2:1a:fc:ce:95:27:6a:e7:
                    99:23:50:38:3e:64:c5:09:02:0c:42:45:09:e1:74:
                    1b:95:d8:05:cf:0c:dd:b8:66:3e:1c:4c:96:3d:80:
                    07:82:2c:aa:31:4a:5e:cb:40:b8:9b:47:d4:2d:bf:
                    9c:d5:d3:d7:ab:32:b4:05:5d:20:7d:97:62:0e:7e:
                    7a:7c:82:d9:bb:0c:bf:0c:f8:d7:d2:83:43:02:01:
                    75:3d:cb:5b:70:04:c0:52:06:f3:4b:37:72:09:9d:
                    78:67:0d:b1:2a:ab:c7:c6:71:72:c6:ed:0f:a1:1d:
                    a4:de:54:f8:9b:33:27:0d:6d:90:86:ec:8d:d8:b8:
                    ad:18:f0:8b:cd:58:52:6d:f5:d2:cf:0d:cf:f1:cb:
                    0e:10:14:b2:16:8f:15:bc:0f:a8:9a:3a:be:f1:e4:
                    11:1a:51:3a:35:8d:01:04:e5:54:40:30:0c:81:3c:
                    fc:e2:48:21:3e:f0:a5:bb:46:41:c8:83:fc:f9:6d:
                    a4:8c:13:55:e8:c8:0e:07:0d:19:11:e1:2a:68:13:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F0:6D:71:8C:B5:89:1B:55:C9:B9:69:9B:D9:72:C0:81:38:22:A3
            X509v3 Authority Key Identifier:
                keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:05:8f:c0:25:08:0a:b3:d7:cd:b4:38:3b:d0:b2:b3:32:
         8e:dd:29:e2:25:44:74:d9:09:8d:39:dd:3d:53:11:c2:6e:bf:
         35:66:6b:04:25:f1:13:ed:f5:c7:a1:68:c5:1c:07:a4:7b:9f:
         de:ac:ea:85:c3:8a:29:09:15:dd:57:c6:c6:b6:9f:ce:2e:97:
         63:8a:22:29:e8:a4:7b:26:28:2d:7d:3e:08:0f:51:2d:82:7f:
         1b:d8:22:e1:f8:f8:47:9d:75:64:5e:6c:55:54:34:59:31:bb:
         f4:cc:7b:b5:cb:69:b3:f5:95:2e:11:f7:e9:44:ae:19:d7:dc:
         9c:39:96:ca:e8:30:c5:b6:3d:4c:b8:da:1c:50:62:58:23:01:
         49:58:13:59:08:6c:f7:6d:d7:0e:11:36:bf:a8:36:e5:ee:5f:
         0b:3b:64:96:3e:03:8a:32:99:75:08:a9:33:a2:72:b7:79:cd:
         74:c4:89:28:0c:e6:2f:af:72:7f:28:18:20:12:7c:74:b6:87:
         ec:37:fb:69:d9:c7:61:8a:bc:85:e7:ec:27:23:34:a2:c0:ff:
         15:2e:29:17:30:d3:67:ee:2d:95:b5:df:16:70:28:ae:02:c6:
         66:ae:8b:ec:0c:8b:0c:34:2d:a8:bb:74:48:b4:74:be:10:f0:
         8d:02:59:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:20 2025 by rpki-client