Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
File:                     XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json)
Hash identifier:          f7xAQaG3Zga9ybrU885v5VJ6h6uRl2X/PMOTi8itcBs=
Subject key identifier:   30:2B:69:31:B9:18:07:9C:0B:00:02:0E:BD:21:BC:1A:64:29:66:EE
Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21
Certificate issuer:       /CN=5dca17fc8d39e043ea769af28b548c9d39831d21
Certificate serial:       01984852EE90C13B439BFFDAF298AC42220D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
Manifest number:          1224
Signing time:             Sat 26 Jul 2025 20:00:51 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:51 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:51 +0000
Files and hashes:         1: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: Psxeb6zPSbp783RZZdhDvZBJQSTpxmRpjes+8tKkE5g=)
                          2: oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa (hash: cCTxbjFQb4NeoVd9wETrGZr+in35PRv0+f/LrpWLJEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:ee:90:c1:3b:43:9b:ff:da:f2:98:ac:42:22:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21
        Validity
            Not Before: Jul 26 20:00:51 2025 GMT
            Not After : Jul 27 20:00:51 2025 GMT
        Subject: CN=302b6931b918079c0b00020ebd21bc1a642966ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:d0:74:dc:90:ea:f8:61:ef:b4:7d:2c:93:
                    87:79:98:b3:6f:94:66:a3:44:2b:67:e4:af:37:cd:
                    34:5e:bf:15:aa:c7:dc:ad:14:9c:8d:67:53:43:42:
                    2f:fe:28:32:7e:d0:4b:ef:fc:b1:79:df:ab:ce:3b:
                    70:c4:0f:6d:bc:51:81:d2:8c:c7:ab:14:28:62:35:
                    10:56:4a:4b:53:f1:11:62:81:11:7c:9a:84:fd:97:
                    4d:f5:f0:1a:4d:8f:c8:50:eb:4c:42:34:82:62:e8:
                    45:a9:a7:02:22:a5:f4:66:5f:63:76:9a:cf:7a:e2:
                    9c:d7:6e:2d:e1:e6:52:86:a7:6f:b7:46:eb:95:bd:
                    e3:f2:35:c3:b8:5f:6c:88:97:71:e7:2a:57:db:09:
                    b8:44:cd:49:52:84:ce:fa:9a:6d:b7:d1:c5:de:ca:
                    23:5c:b8:33:b7:09:2e:f7:ba:22:60:f0:55:ca:bc:
                    28:e3:68:14:b3:43:1a:29:a8:66:9d:5e:03:83:44:
                    33:9b:ab:ac:33:8b:ec:39:27:55:11:a2:55:a2:8d:
                    76:78:7f:32:14:84:3c:03:49:61:71:8d:91:89:62:
                    64:48:93:bc:55:3e:99:58:d1:00:4d:f5:d4:7a:d6:
                    a5:96:5d:59:e6:51:13:15:5a:f3:a7:ab:9f:52:04:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2B:69:31:B9:18:07:9C:0B:00:02:0E:BD:21:BC:1A:64:29:66:EE
            X509v3 Authority Key Identifier:
                keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d8:df:fc:3e:96:a6:b6:84:e1:a1:fe:93:1f:f3:d2:f5:90:
         e3:bd:88:33:55:a8:66:f4:3b:63:d5:28:7a:77:4a:25:00:6a:
         28:57:55:92:d6:d9:33:6e:c9:fc:10:0a:93:fe:51:eb:3a:86:
         4d:8a:39:f2:b0:64:51:2f:ac:e1:bb:de:da:f9:b2:14:62:c9:
         a6:2c:e1:4c:ad:dd:86:35:ea:ba:4a:78:39:75:c6:30:a2:d4:
         8a:3e:a4:91:8a:95:82:74:64:3b:d9:dc:0c:42:da:4a:b8:5f:
         fd:62:9e:f9:f3:ca:4c:a4:28:fb:9f:8d:36:30:82:5c:5c:cf:
         e7:f3:7f:26:70:79:4d:bd:93:5c:b4:41:1a:e6:91:77:d3:f4:
         f2:6b:e1:ae:51:a3:79:7a:ce:d8:c2:68:90:7b:be:c9:9a:8e:
         5d:5f:79:6f:80:74:d0:59:22:1b:8c:e9:c3:c4:70:39:9e:17:
         a0:7b:d5:69:41:68:a4:22:ad:d4:1a:87:39:d9:94:b3:ba:d4:
         24:d9:56:30:92:0f:94:54:3e:f0:02:dd:fd:a4:7a:c0:ba:12:
         7b:94:29:63:e4:29:02:ec:2d:d2:b6:a2:95:a6:f4:56:d1:50:
         e6:30:c8:87:9f:af:2d:20:4a:d0:ef:94:96:67:ef:f4:07:94:
         e4:af:34:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:01:24 2025 by rpki-client