Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File:                     Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier:          IbBbfUcUBYS3Ks4ErkejUNnvcIZzKSChl6bCbzDrxeg=
Subject key identifier:   62:29:70:A7:58:EA:03:C1:D4:8D:D2:D5:83:8A:74:6E:EF:00:17:87
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer:       /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial:       0197496854DA32E3486C0E0A098175845396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number:          0A22
Signing time:             Sat 07 Jun 2025 08:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:03 +0000
Files and hashes:         1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: ewzdod7tGYvr0ZZWfU7lmYWLjb5Rveki/ebnAZRNqZM=)
                          2: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (hash: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:54:da:32:e3:48:6c:0e:0a:09:81:75:84:53:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
        Validity
            Not Before: Jun  7 08:01:03 2025 GMT
            Not After : Jun  8 08:01:03 2025 GMT
        Subject: CN=622970a758ea03c1d48dd2d5838a746eef001787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:09:86:db:22:38:91:6b:4b:f8:32:c4:15:6c:
                    14:1f:15:2c:d8:df:75:14:02:55:18:cd:15:55:69:
                    54:1e:96:0c:be:77:ed:f1:b8:b6:e2:34:16:f9:4d:
                    5b:72:53:a8:2c:2c:32:5a:8a:e0:1f:b0:9d:64:49:
                    ed:3d:31:ce:57:50:95:71:c4:e5:79:9d:1f:5a:eb:
                    66:f9:7a:cb:20:db:85:68:db:91:03:c9:73:30:80:
                    8a:af:8b:b1:61:e3:09:45:6d:0c:a3:10:88:1d:5d:
                    f5:84:e7:ce:c5:d7:04:21:de:23:ac:ec:79:c5:06:
                    ea:28:ac:59:01:5f:7f:86:1a:20:90:dc:18:2d:05:
                    02:42:6f:33:91:c1:04:c2:05:a7:b5:66:89:af:4f:
                    bd:6e:dc:20:da:04:b8:05:f2:e9:88:13:47:b7:ab:
                    58:cc:c0:27:44:ff:36:92:a0:38:2c:f1:22:f2:34:
                    47:29:69:0b:44:8d:88:50:ce:64:36:1a:77:21:99:
                    31:a2:3a:30:3d:ad:70:15:a8:31:64:1f:07:b5:e7:
                    df:ff:45:da:a1:65:0c:b8:0e:49:f7:95:ce:87:07:
                    02:19:c4:39:90:2c:4e:42:1d:99:a3:44:09:4c:db:
                    12:84:fa:79:27:4b:dd:16:a0:57:f9:48:37:8a:e6:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:29:70:A7:58:EA:03:C1:D4:8D:D2:D5:83:8A:74:6E:EF:00:17:87
            X509v3 Authority Key Identifier:
                keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:45:e7:cf:67:61:10:94:09:35:6b:10:89:19:94:8c:7e:7f:
         43:7a:6b:c4:35:6a:d8:d7:59:53:c8:db:48:51:77:3b:38:21:
         d3:29:99:c2:8d:1f:13:07:f0:6a:a5:1f:e4:02:65:19:8f:64:
         f2:e6:29:4e:b9:f2:5a:36:69:22:b0:50:96:62:98:64:98:04:
         5f:6d:4e:b0:d2:9f:60:d2:3c:b9:d9:f0:43:31:97:b4:d7:00:
         ac:fd:76:96:58:3d:e8:4a:15:05:e3:a8:3f:96:2e:7e:cf:37:
         c0:fe:5f:d5:32:ad:d0:8c:4f:97:98:90:c7:60:fe:4b:14:2c:
         cb:b8:33:0b:90:a5:cd:d3:51:78:6a:b8:72:a9:76:16:d6:bd:
         d9:e8:c2:f3:e6:08:fb:ed:3b:4a:41:d6:9a:c5:7d:a3:42:82:
         83:d1:f1:f5:a8:eb:bd:14:4c:7c:ee:3f:6c:b2:4e:9f:18:4e:
         f1:dd:cc:31:a8:d6:d1:76:5a:6f:e7:c0:ef:82:24:50:ca:f4:
         34:fc:ea:51:d1:a5:5a:ea:cf:38:98:66:3f:13:93:b6:2c:5a:
         a3:12:c2:22:dd:10:6d:17:51:1b:fc:2d:11:a1:47:04:35:8e:
         10:f2:1e:43:06:b6:8b:39:ae:2e:c8:17:9f:20:3e:84:ad:77:
         e7:3e:9f:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaFTaMuNIbA4KCYF1hFOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOTg5ZGFmNjRmYWRiZGQ1MzQ4ZjdkZDIyNmVjYzlmZWZj
MDQ1MTUwHhcNMjUwNjA3MDgwMTAzWhcNMjUwNjA4MDgwMTAzWjAzMTEwLwYDVQQD
Eyg2MjI5NzBhNzU4ZWEwM2MxZDQ4ZGQyZDU4MzhhNzQ2ZWVmMDAxNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/QmG2yI4kWtL+DLEFWwUHxUs2N91
FAJVGM0VVWlUHpYMvnft8bi24jQW+U1bclOoLCwyWorgH7CdZEntPTHOV1CVccTl
eZ0fWutm+XrLINuFaNuRA8lzMICKr4uxYeMJRW0MoxCIHV31hOfOxdcEId4jrOx5
xQbqKKxZAV9/hhogkNwYLQUCQm8zkcEEwgWntWaJr0+9btwg2gS4BfLpiBNHt6tY
zMAnRP82kqA4LPEi8jRHKWkLRI2IUM5kNhp3IZkxojowPa1wFagxZB8Hteff/0Xa
oWUMuA5J95XOhwcCGcQ5kCxOQh2Zo0QJTNsShPp5J0vdFqBX+Ug3iuYzeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIpcKdY6gPB1I3S1YOKdG7vABeHMB8GA1UdIwQY
MBaAFF6Yna9k+tvdU0j33SJuzJ/vwEUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEt
ODhiMjM4ZTViYjgwLzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEtODhiMjM4ZTViYjgw
LzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEXnz2dh
EJQJNWsQiRmUjH5/Q3prxDVq2NdZU8jbSFF3Ozgh0ymZwo0fEwfwaqUf5AJlGY9k
8uYpTrnyWjZpIrBQlmKYZJgEX21OsNKfYNI8udnwQzGXtNcArP12llg96EoVBeOo
P5Yufs83wP5f1TKt0IxPl5iQx2D+SxQsy7gzC5ClzdNReGq4cql2Fta92ejC8+YI
++07SkHWmsV9o0KCg9Hx9ajrvRRMfO4/bLJOnxhO8d3MMajW0XZab+fA74IkUMr0
NPzqUdGlWurPOJhmPxOTtixaoxLCIt0QbRdRG/wtEaFHBDWOEPIeQwa2izmuLsgX
nyA+hK135z6fdw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:47 2025 by rpki-client