Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
File:                     XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json)
Hash identifier:          sDjSOqw+BK2OWbO+oz3mMOTe0dWwJIzcPPR/cjbXOQw=
Subject key identifier:   09:75:1F:E3:C4:5F:D7:11:41:8A:DF:01:63:26:7F:93:48:1E:2B:D7
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Certificate issuer:       /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial:       0197500ECE355E4B840D7E3C9860066AB65C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
Manifest number:          145F
Signing time:             Sun 08 Jun 2025 15:00:36 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:36 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:36 +0000
Files and hashes:         1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=)
                          2: DefZ__9RqwjeIQvvIG8DNEtfalk.roa (hash: 8CQeEiGOKVZsA3/HRDhtbloh6zsps5iaRDAh0kwUHcw=)
                          3: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=)
                          4: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=)
                          5: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: QtCDHbcKCBS6V7cllcJ+26DZ0uqfUl7Jo7KfvH93ftc=)
                          6: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=)
                          7: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=)
                          8: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=)
                          9: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=)
                          10: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=)
                          11: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0e:ce:35:5e:4b:84:0d:7e:3c:98:60:06:6a:b6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
        Validity
            Not Before: Jun  8 15:00:36 2025 GMT
            Not After : Jun  9 15:00:36 2025 GMT
        Subject: CN=09751fe3c45fd711418adf0163267f93481e2bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:71:ca:68:f9:43:ca:28:d0:3e:83:bc:da:
                    d1:93:2f:b4:b9:62:32:9b:ef:7c:5a:f0:a0:d0:6b:
                    63:17:51:47:75:87:7f:c5:69:8c:77:ec:a2:b7:25:
                    f5:c9:a8:ed:f3:1d:13:38:51:53:76:35:1a:d0:11:
                    a9:b8:aa:4b:84:5a:1e:a6:72:48:6b:bc:49:d4:c9:
                    50:69:f5:10:00:bb:b1:3c:b9:1f:29:c4:4f:25:9b:
                    dd:af:57:fa:cd:00:23:5b:83:cf:59:a7:87:3e:07:
                    88:a7:ba:31:ed:e3:77:53:90:f6:bc:20:4b:56:d5:
                    8d:fa:ca:75:55:a2:eb:c5:9d:b4:aa:21:9c:d8:9c:
                    e6:53:10:f0:e6:8a:6a:d8:a4:af:ee:1d:69:28:d2:
                    28:f9:1a:9e:fb:ac:05:53:26:6f:c7:d8:22:47:fc:
                    11:9c:8b:9d:3e:55:3c:40:5b:b1:cc:02:96:ea:c8:
                    9b:84:6f:94:24:45:f8:02:47:fa:e4:ec:b1:db:e2:
                    18:1f:b9:a4:e3:92:48:64:f2:a8:f2:75:6d:3d:54:
                    b2:b1:bc:e9:a4:42:f1:33:2f:91:0e:6e:51:7f:25:
                    7e:75:69:04:f2:b1:40:6a:9f:7e:b8:8c:80:95:6e:
                    5c:ab:8d:cc:c1:3a:fb:b8:eb:46:35:96:6e:d8:19:
                    2b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:75:1F:E3:C4:5F:D7:11:41:8A:DF:01:63:26:7F:93:48:1E:2B:D7
            X509v3 Authority Key Identifier:
                keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:a3:06:bc:34:da:ae:ee:4a:bb:02:74:ac:fb:36:60:d5:4c:
         54:bf:b4:6b:e2:84:34:79:85:95:bf:d2:3b:7e:bf:d4:8f:5b:
         1a:f7:d8:c0:3d:e1:f4:e6:da:6a:4a:f0:36:da:22:f6:0a:75:
         a7:44:d9:2d:39:7e:c6:62:cc:b8:21:0b:32:06:2c:98:73:cb:
         f0:e4:2c:20:11:22:4a:3e:87:10:11:b9:15:07:3c:7b:70:ce:
         2e:e6:1a:6e:60:2f:ab:bf:81:ec:4f:23:ea:13:4f:f8:04:3c:
         1c:65:6c:db:ae:79:34:2c:5b:75:c5:e9:f0:35:2f:e0:22:cf:
         40:2f:0e:ce:6e:72:fe:60:92:4a:68:79:44:29:6d:8f:85:3a:
         a3:9c:d3:aa:09:d2:c0:4a:1c:37:3a:74:55:74:da:ea:69:d3:
         0e:72:51:a1:82:5a:9e:d7:61:26:64:09:a7:4e:bc:70:7a:0b:
         0d:b5:bb:4f:fa:cb:eb:c2:fd:e1:cc:dd:f5:07:0d:ac:b6:5f:
         91:5f:3b:57:30:dc:0d:6e:e4:71:98:85:46:79:d9:1a:55:d7:
         50:30:68:7f:78:8b:e3:6a:28:aa:c9:e1:b7:7e:65:f0:fb:a2:
         91:a0:cb:3d:2d:8e:c8:27:17:1f:a2:66:e9:6f:1a:94:cd:c3:
         06:bc:07:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:24:14 2025 by rpki-client