Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File:                     XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier:          OAu3+jAQS3LifLsdOYiPXzKOi1z/ORhtweIupqY1FVE=
Subject key identifier:   67:7F:88:26:41:A9:3E:F3:5C:B0:C3:E4:E4:0F:98:27:D8:48:40:5B
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer:       /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial:       01974B8DA1A4FD63A538C0DDC0254F4E2EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number:          1510
Signing time:             Sat 07 Jun 2025 18:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:02 +0000
Files and hashes:         1: KOB0vwmJ7cfgZ_1WOb_Xx7LqG6U.roa (hash: a7bo8HXeX2LyPkuCveHxDVKdqnbGHzPDqS6LymzXHUs=)
                          2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: JjVp/iK9obkb7MQGhqN4mqoNT/BZYP2rjT3yOel8FVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:a1:a4:fd:63:a5:38:c0:dd:c0:25:4f:4e:2e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
        Validity
            Not Before: Jun  7 18:01:02 2025 GMT
            Not After : Jun  8 18:01:02 2025 GMT
        Subject: CN=677f882641a93ef35cb0c3e4e40f9827d848405b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:56:06:ad:13:ae:85:62:ca:8a:a5:76:bb:
                    dd:4b:e9:be:e8:8a:14:b0:9f:4c:fa:48:0d:0d:51:
                    17:d9:0e:14:3c:c6:29:04:93:da:be:aa:e4:8f:e0:
                    58:1c:79:87:96:85:a3:5e:d5:31:f0:c7:29:40:9d:
                    c1:2e:28:bb:f1:4b:70:5d:c7:8c:38:29:53:2e:ba:
                    14:df:00:fe:e9:c7:d3:4f:a1:09:38:dd:2e:2f:28:
                    f8:f4:e1:60:78:5b:80:25:71:0d:38:f5:b5:76:13:
                    bb:d3:6f:a2:a1:3a:2a:cc:e1:87:68:0a:28:22:66:
                    53:c7:64:6f:c9:2f:3c:73:ec:a0:d9:49:9c:4f:dc:
                    f1:cc:39:8d:2d:08:fe:67:32:71:c0:85:4c:3a:b7:
                    f5:e8:6a:d8:29:c2:41:e0:80:9c:a4:20:5c:7a:18:
                    12:64:0a:cc:63:b1:f6:18:aa:2b:d2:eb:af:ee:95:
                    7e:c5:1a:b2:3c:f4:e7:ca:29:fb:47:7d:b6:45:d2:
                    9c:b5:73:ad:7c:1f:c4:99:1a:25:ba:ed:80:ae:0a:
                    53:b5:5a:c4:5a:89:61:ae:f9:38:89:43:5c:9c:92:
                    ac:24:76:0b:09:91:ba:ed:2c:4e:eb:ba:68:9d:91:
                    ca:a2:8a:9f:e9:39:bd:50:c2:9a:c6:99:15:33:38:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7F:88:26:41:A9:3E:F3:5C:B0:C3:E4:E4:0F:98:27:D8:48:40:5B
            X509v3 Authority Key Identifier:
                keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:69:14:77:3c:33:a1:a1:36:ee:43:0d:3a:b3:f7:1b:46:5e:
         e9:46:54:a9:aa:d4:43:c1:4d:49:83:93:c7:b9:64:9b:90:01:
         4a:1e:12:0c:bc:e3:0f:f3:28:e6:0f:d3:89:e4:9f:2e:d9:d5:
         db:18:76:45:e3:1b:f5:4e:77:fa:de:ff:38:1b:63:26:11:dd:
         e0:49:75:b3:3d:97:6f:72:98:23:c1:10:9e:fe:15:d9:ad:36:
         28:ee:98:02:6f:0a:7c:53:8f:ad:e7:85:a6:a3:a4:db:dc:e2:
         ea:00:6a:a7:b0:7a:64:14:3c:4b:7f:e3:cd:e0:91:46:3a:ef:
         cb:ef:41:90:ba:4c:7d:3f:cf:1f:0f:c5:ad:59:6b:b3:96:ad:
         f1:61:5c:38:62:7c:2b:2b:14:6a:72:1f:e0:c4:70:f1:46:56:
         25:f8:5b:52:a4:e1:11:e0:49:e0:5e:6b:55:f2:a1:31:b4:08:
         b7:d8:c5:5b:1f:52:d2:38:c6:6a:63:24:47:5d:4f:20:f9:47:
         5e:c8:64:5d:c1:74:1f:a6:4e:cb:d9:bb:e5:3a:23:64:2a:fa:
         3c:b9:ee:7d:3b:31:85:90:2d:09:12:d5:26:bf:df:91:f2:80:
         5b:0c:e3:90:ee:42:75:8e:c6:a0:14:ad:aa:20:48:27:66:50:
         24:8f:e9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:57:13 2025 by rpki-client