Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File:                     XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier:          S/xnFQ7Qfu95S3zmpMCu/vOagd4l8nkI/T5u4hxBZC4=
Subject key identifier:   B5:82:FF:51:FD:C2:54:DF:D6:96:03:AB:E8:CD:BA:7F:B3:05:52:D3
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer:       /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial:       01974B5661EE6406232E52D7A3A7F0CDE1AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 17:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:41 +0000
Files and hashes:         1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: KDinjkDmZ/lcinsyOkJRWgloWyF7u6HDbjGD3BoxbfM=)
                          2: jKWW8lM-7qWMZl51o-CojPJFkjs.roa (hash: qo4ws59Zs5PpOs3LLh3sz4ISOqKQfl11xb7AgRxxDws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:61:ee:64:06:23:2e:52:d7:a3:a7:f0:cd:e1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
        Validity
            Not Before: Jun  7 17:00:41 2025 GMT
            Not After : Jun  8 17:00:41 2025 GMT
        Subject: CN=b582ff51fdc254dfd69603abe8cdba7fb30552d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:65:96:95:fc:16:93:54:0d:d1:6b:85:ef:
                    19:ae:4b:4f:75:31:50:7e:cd:96:30:e5:0d:4f:18:
                    80:48:a0:e4:c9:55:90:a6:45:1f:95:ea:d2:ec:87:
                    3a:82:0b:cb:8f:fb:55:00:97:e4:ec:72:b7:36:6d:
                    e1:58:75:7d:8b:82:1c:3b:2f:ed:30:90:18:ad:f0:
                    c8:fe:cb:84:e2:e9:88:63:3b:70:b7:45:48:45:d2:
                    bc:11:01:34:78:1a:ad:44:fe:97:da:ee:77:b9:92:
                    2a:34:72:1b:fa:30:2d:d9:ad:12:9a:c7:cb:ad:f9:
                    54:d4:8b:b3:17:54:e6:fd:9a:d3:3e:19:6c:f0:82:
                    89:09:30:1c:f6:34:cc:f9:54:b6:23:a5:c3:e9:c0:
                    94:48:3b:d1:b6:13:f8:56:aa:6d:bc:fb:69:55:4d:
                    a1:32:14:a6:10:48:77:2b:b7:b0:2a:47:1e:1b:3e:
                    88:10:a4:cd:c3:4d:39:c2:b8:62:7e:6b:2e:25:8a:
                    40:04:85:3a:6d:b0:ea:3c:bd:a3:d6:bb:fe:e2:b2:
                    3b:0d:15:d9:24:a7:bb:04:2b:b7:66:2b:5c:0f:11:
                    c9:8b:87:48:23:de:72:ac:ae:a9:fa:4e:8c:96:fd:
                    cb:54:56:f2:77:13:fc:cc:01:10:3f:0c:19:9c:70:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:82:FF:51:FD:C2:54:DF:D6:96:03:AB:E8:CD:BA:7F:B3:05:52:D3
            X509v3 Authority Key Identifier:
                keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:8b:92:32:66:25:52:c4:9e:e5:58:b8:79:dc:36:d2:36:01:
         1a:87:0a:ca:b6:bb:51:71:95:13:eb:6a:4e:5d:93:6f:cf:b9:
         e5:4f:b7:99:3c:41:c9:0c:35:31:74:db:3a:0f:92:a9:e6:f6:
         48:88:4d:86:43:70:fa:6a:23:f0:90:81:ef:e8:92:e9:21:54:
         78:98:ea:ce:92:76:2b:34:e0:8c:3f:1c:ff:98:63:08:7c:a1:
         25:76:29:7a:86:36:47:19:28:02:e7:c4:9d:68:8a:ed:7d:05:
         60:9c:c9:57:e7:b3:91:0b:4e:85:80:0f:32:91:29:de:cd:aa:
         65:04:99:ab:37:6b:f9:32:89:79:39:dc:46:1d:1e:77:e2:66:
         93:20:fa:a6:e1:c5:26:a8:3c:2d:6b:5b:19:3e:9e:4d:1b:11:
         40:fe:38:9e:bd:97:97:fc:a7:b4:fd:88:ae:83:06:45:df:37:
         08:01:c6:4f:4f:d1:0f:32:cb:dc:99:8c:ce:02:19:16:b6:81:
         c7:67:5f:a9:cd:3b:5d:db:a7:be:85:b8:e8:50:59:f8:2d:d8:
         33:cc:5d:6e:d0:5d:28:07:1e:de:24:29:47:21:16:78:a8:83:
         83:c9:44:b7:00:f9:1d:60:75:2e:94:2b:d8:f7:b0:fa:50:bd:
         ef:58:aa:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVmHuZAYjLlLXo6fwzeGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzVlZDA0M2M4ZGUxNTFiZWJkYzA5ZGZjYmZmY2M3ZGM3
NzU5YzcwHhcNMjUwNjA3MTcwMDQxWhcNMjUwNjA4MTcwMDQxWjAzMTEwLwYDVQQD
EyhiNTgyZmY1MWZkYzI1NGRmZDY5NjAzYWJlOGNkYmE3ZmIzMDU1MmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugBllpX8FpNUDdFrhe8ZrktPdTFQ
fs2WMOUNTxiASKDkyVWQpkUflerS7Ic6ggvLj/tVAJfk7HK3Nm3hWHV9i4IcOy/t
MJAYrfDI/suE4umIYztwt0VIRdK8EQE0eBqtRP6X2u53uZIqNHIb+jAt2a0SmsfL
rflU1IuzF1Tm/ZrTPhls8IKJCTAc9jTM+VS2I6XD6cCUSDvRthP4VqptvPtpVU2h
MhSmEEh3K7ewKkceGz6IEKTNw005wrhifmsuJYpABIU6bbDqPL2j1rv+4rI7DRXZ
JKe7BCu3ZitcDxHJi4dII95yrK6p+k6Mlv3LVFbydxP8zAEQPwwZnHC9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWC/1H9wlTf1pYDq+jNun+zBVLTMB8GA1UdIwQY
MBaAFF417QQ8jeFRvr3Anfy//Mfcd1nHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmIt
MTc3NjgxM2U3MjI0LzEvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmItMTc3NjgxM2U3MjI0
LzEvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4uSMmYl
UsSe5Vi4edw20jYBGocKyra7UXGVE+tqTl2Tb8+55U+3mTxByQw1MXTbOg+Sqeb2
SIhNhkNw+moj8JCB7+iS6SFUeJjqzpJ2KzTgjD8c/5hjCHyhJXYpeoY2RxkoAufE
nWiK7X0FYJzJV+ezkQtOhYAPMpEp3s2qZQSZqzdr+TKJeTncRh0ed+JmkyD6puHF
Jqg8LWtbGT6eTRsRQP44nr2Xl/yntP2IroMGRd83CAHGT0/RDzLL3JmMzgIZFraB
x2dfqc07XdunvoW46FBZ+C3YM8xdbtBdKAce3iQpRyEWeKiDg8lEtwD5HWB1LpQr
2Pew+lC971iqNA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:00:05 2025 by rpki-client