Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File:                     xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier:          fMGKz4xzWXhC0NMO9Hfq+F3ZrZYkv5VhvJdoLJuLHc0=
Subject key identifier:   24:5D:22:6C:D0:5B:E8:ED:13:1F:1B:5A:A2:AE:5E:72:3A:73:79:98
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer:       /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial:       01976BBCE54CE4923559688E808AB0B0B6AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number:          158B
Signing time:             Sat 14 Jun 2025 00:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:30 +0000
Files and hashes:         1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
                          2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: TB2efKjhZZRWXR6MGR5vEXXYh7rBHZnJXusjyRkxYCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:e5:4c:e4:92:35:59:68:8e:80:8a:b0:b0:b6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
        Validity
            Not Before: Jun 14 00:00:30 2025 GMT
            Not After : Jun 15 00:00:30 2025 GMT
        Subject: CN=245d226cd05be8ed131f1b5aa2ae5e723a737998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:3b:ce:7a:60:50:7a:5b:f7:06:0a:10:d4:
                    e0:63:ea:51:53:c3:6e:68:d2:5a:90:d3:66:53:1a:
                    f5:e7:69:64:1d:9b:15:47:91:6a:44:0b:27:43:af:
                    ae:8d:fb:40:04:b4:61:76:4e:af:77:2d:36:74:f0:
                    01:f6:e5:5e:87:5d:fc:c5:c1:04:8f:ee:3d:b9:d0:
                    52:7b:41:63:c5:c1:80:38:91:3f:dc:c3:28:62:33:
                    4e:7c:48:47:d9:01:5e:55:e5:4c:25:17:75:35:6b:
                    da:3b:76:fa:7d:f6:26:bb:23:94:ee:45:e7:eb:e5:
                    77:2f:b5:53:3b:84:88:4c:ad:ac:1d:97:c0:10:0a:
                    22:27:f4:98:dd:91:a5:e2:6e:48:a4:d0:10:98:25:
                    bf:d9:ed:f8:9b:4c:1b:52:9a:94:f5:2e:dd:21:7d:
                    e9:df:3a:83:f3:77:ad:66:f1:82:0b:e1:ed:a5:9f:
                    59:11:3a:51:d7:04:89:d6:8e:38:af:da:86:a2:0e:
                    22:e3:2d:d8:81:fa:af:4c:b1:d8:99:c9:35:7a:18:
                    0e:78:ce:43:10:9c:0a:c6:56:c5:15:90:9c:ef:bc:
                    f8:bd:77:99:ca:cf:2d:a3:8c:49:5f:19:b1:a4:71:
                    aa:bf:3a:97:61:22:4a:2d:17:95:a7:e9:a6:08:98:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5D:22:6C:D0:5B:E8:ED:13:1F:1B:5A:A2:AE:5E:72:3A:73:79:98
            X509v3 Authority Key Identifier:
                keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:bd:30:9c:5b:3a:6f:48:14:6c:eb:c8:94:54:c8:a6:ca:
         f2:93:12:f1:ac:cc:f9:a7:38:2c:63:1a:16:ea:fe:90:45:47:
         36:f4:75:01:34:9b:2d:cd:51:9a:9e:05:17:92:5d:11:f6:0b:
         0e:31:32:22:51:2b:86:00:b6:c9:b5:52:c7:29:67:ab:8c:5a:
         51:15:a7:7e:71:df:4c:34:08:51:50:f9:2a:34:65:ff:04:bc:
         4d:8f:ba:00:9d:4c:a5:27:0f:a5:e6:bf:ae:26:7d:c1:24:6e:
         59:47:7b:ea:c9:75:11:59:5c:0a:0b:07:a9:c0:ed:01:7a:04:
         d3:7b:62:01:3b:82:1c:88:43:84:f2:ee:d9:42:4d:34:90:21:
         57:a9:69:23:55:03:4c:4e:1a:06:cf:dc:fb:07:63:92:b6:d3:
         ba:c1:78:23:e5:b4:6d:ae:74:cb:9c:86:9a:4d:dc:b0:10:a0:
         97:7a:3b:3c:f8:f6:a5:44:f2:a7:78:26:b3:0f:cf:4e:a9:20:
         ae:ef:1a:d7:b8:dd:c5:68:b7:51:9c:bf:eb:f9:ee:d1:da:5c:
         d8:f5:a4:f3:e8:06:80:1e:58:fd:b2:bd:d7:52:c1:ff:12:8c:
         0f:4b:da:36:5e:23:23:d7:c8:a2:d8:3c:26:1f:55:fc:5c:92:
         be:46:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:31:51 2025 by rpki-client