Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File:                     Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier:          iUQ2oXVWH6baL3qBYIS94YOeSvvMrLxnfIvzIhPYLXA=
Subject key identifier:   01:26:9F:50:63:3B:3B:5F:83:1B:BF:B5:45:C7:99:85:38:E9:6C:FB
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer:       /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial:       01974D7BED6E30C7E9408211F4C0314013A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number:          06FD
Signing time:             Sun 08 Jun 2025 03:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:56 +0000
Files and hashes:         1: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: ++SFgi7Y9hVktnOnOCbmWtc+OL5c5tekmkvuhc2Dkbo=)
                          2: oNaxj3U73YsxY2SMYd62wSvMB4E.roa (hash: +NOpZAlgmwl+h9fy4R1kVxAQ1d7pxMvgMiKewHh1e4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:ed:6e:30:c7:e9:40:82:11:f4:c0:31:40:13:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
        Validity
            Not Before: Jun  8 03:00:56 2025 GMT
            Not After : Jun  9 03:00:56 2025 GMT
        Subject: CN=01269f50633b3b5f831bbfb545c7998538e96cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:e1:76:f5:16:99:28:43:9c:13:07:67:87:
                    2f:61:7a:43:93:2d:91:5a:52:49:ab:38:c6:d7:ac:
                    81:ed:e0:11:73:53:92:65:63:1b:f0:4f:75:65:62:
                    1b:91:4d:20:21:97:46:f1:14:a6:d5:9b:0e:62:e4:
                    3d:b8:e6:62:88:4a:2d:2a:55:5e:7d:1b:71:36:26:
                    cc:87:0e:b8:3b:8d:9f:1e:41:50:bc:e3:82:d8:d3:
                    21:63:fc:ff:ef:17:1e:b4:35:fc:e6:72:e2:49:26:
                    19:fd:cf:5b:a8:5c:04:b7:23:22:89:18:0e:a8:25:
                    58:59:8b:35:82:6d:ab:bc:94:58:ef:26:f1:97:4c:
                    08:2a:7b:e2:2d:f6:ce:bc:dd:8e:15:12:6a:c0:48:
                    d8:de:75:b7:56:1b:4c:5a:ab:40:82:d0:79:07:03:
                    85:76:bd:02:fb:6d:6a:63:49:82:f1:16:7b:67:2a:
                    ba:41:e3:97:cf:5e:b4:c6:29:78:11:6b:63:96:c3:
                    b4:b6:33:01:d8:81:44:5a:45:97:4a:64:03:5e:bd:
                    0e:6d:2a:64:07:5e:ae:4b:e0:5d:08:08:8e:7a:ef:
                    40:f3:8e:8a:fa:59:02:52:0f:b0:89:d1:a1:a0:85:
                    54:8d:b2:21:ad:9b:00:53:8d:4c:0a:84:b6:6f:4d:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:26:9F:50:63:3B:3B:5F:83:1B:BF:B5:45:C7:99:85:38:E9:6C:FB
            X509v3 Authority Key Identifier:
                keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:a0:51:08:66:25:a0:7c:3e:29:77:44:40:f8:1d:0b:78:
         e4:7e:0f:89:0b:95:07:ee:2d:70:20:47:4b:57:b4:6b:22:54:
         02:ba:01:1a:1e:d6:90:61:dc:d6:a3:ad:de:e2:b9:23:c1:b4:
         85:69:a9:79:f8:86:ff:25:8a:8c:f3:4e:e6:af:11:ec:42:c8:
         e2:e3:b1:44:04:ed:98:43:76:b4:2e:7b:9a:b0:76:b4:eb:02:
         a0:df:35:93:52:c8:6c:ee:7c:31:15:cc:c0:b2:27:f7:56:a9:
         dd:b5:c9:9c:ba:2e:03:9d:c7:06:ad:fa:b1:59:e2:fe:6d:c6:
         e2:94:62:10:96:6c:8b:4d:9f:b7:84:2b:54:27:f6:d6:c4:c3:
         96:73:6c:c0:d1:ae:43:5c:09:b6:67:85:b8:c1:32:d4:5e:dc:
         8b:1c:4b:11:32:fc:51:2e:44:cd:85:b5:a6:60:60:9c:25:58:
         30:93:2b:20:f1:7d:4f:6c:57:74:e4:61:01:ef:d2:0c:a5:72:
         6b:5d:33:d0:0c:25:de:60:80:44:d3:6b:98:c8:b8:75:83:91:
         ba:0d:ef:0e:63:fe:3b:cb:f5:3d:45:37:53:10:b1:2a:67:df:
         2e:7a:bb:42:39:e4:7b:31:01:1b:e5:e4:1e:a7:e4:f6:1f:0f:
         65:ee:f0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:29:55 2025 by rpki-client