Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File:                     xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier:          nE6b87AMz/A5H5Ikfo4oD1Hmr24s9ZkyBJEwQ9nuUhg=
Subject key identifier:   1B:82:6E:09:BC:E4:ED:E7:ED:B7:F4:5D:8C:01:D0:BC:23:3D:96:CD
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer:       /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial:       01976C98716E0F54E97C535DC79A63458A2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number:          08BD
Signing time:             Sat 14 Jun 2025 04:00:19 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:19 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:19 +0000
Files and hashes:         1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=)
                          2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: xUl1lCNev/ghcdnrTWskpJt+FkR+v5Zkedzg1CdtO2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:71:6e:0f:54:e9:7c:53:5d:c7:9a:63:45:8a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
        Validity
            Not Before: Jun 14 04:00:19 2025 GMT
            Not After : Jun 15 04:00:19 2025 GMT
        Subject: CN=1b826e09bce4ede7edb7f45d8c01d0bc233d96cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:31:7c:5c:c6:b5:2e:9b:d6:e0:76:cd:19:
                    89:4e:6b:0f:26:4f:02:d6:6a:84:76:32:0a:74:6d:
                    5a:28:ae:47:c3:ca:74:fb:39:e0:94:d4:39:13:05:
                    53:1a:ab:6f:2c:6d:90:c6:3e:99:e0:29:b1:1c:e6:
                    2a:a2:cb:a0:56:2b:ef:45:fa:8f:ce:d6:65:32:44:
                    d1:94:1c:8f:1b:01:05:b1:34:be:68:75:66:7d:e9:
                    0b:81:ac:29:94:a7:c2:85:b7:79:c0:ac:1c:ab:cb:
                    69:5b:ad:ce:1f:73:79:b3:a7:7e:9b:71:0c:f7:f0:
                    0c:10:b3:f7:10:e0:17:c6:23:8d:00:a8:98:59:af:
                    72:a9:97:ff:3b:7d:bb:0c:8e:ee:4c:27:04:de:af:
                    b7:a1:34:a4:4f:14:0e:d5:ce:59:2c:8e:2c:3d:96:
                    71:9e:46:93:88:a5:a9:30:b5:27:51:9f:0d:5c:96:
                    e3:12:af:7d:13:16:56:e7:92:c6:bd:2a:29:3b:82:
                    46:17:0f:2d:ab:25:2e:6b:1f:15:89:4e:dc:47:83:
                    f4:c9:b5:af:75:cb:63:6d:87:49:e7:98:98:3f:a5:
                    12:90:2f:f9:e3:be:a8:7a:8b:ef:ce:d8:ad:54:37:
                    34:81:2f:8a:0c:26:f2:fc:26:1d:24:96:2b:94:8b:
                    3c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:82:6E:09:BC:E4:ED:E7:ED:B7:F4:5D:8C:01:D0:BC:23:3D:96:CD
            X509v3 Authority Key Identifier:
                keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:df:bb:96:7e:d1:f0:07:da:e1:c4:82:7e:09:79:36:4b:80:
         c2:81:c0:3d:a6:b9:ae:ea:69:92:31:21:47:09:30:1c:57:7e:
         a9:bf:c7:68:20:8d:69:e7:87:01:9b:7d:ab:ee:c3:ca:86:e1:
         ed:e4:94:eb:d3:83:14:09:05:d6:ec:22:16:7f:20:87:a2:cc:
         40:73:e1:bf:85:e1:be:66:53:31:1c:2a:b2:5b:75:d2:0d:87:
         06:ff:04:0a:9b:45:41:0f:39:f3:a3:67:cb:90:70:3d:80:d2:
         6b:a4:79:2d:39:54:24:98:54:02:5d:82:f8:02:b8:3b:65:2b:
         94:5b:29:6a:f3:ba:a1:aa:1d:11:ac:95:49:d4:c4:55:f4:e6:
         12:e2:ea:37:2b:5c:be:aa:7f:59:e3:ad:b0:a8:b8:2c:7e:4d:
         e0:96:ec:f3:1e:f4:96:9c:0a:15:40:4a:94:4c:bf:3c:91:ae:
         f4:04:ab:e6:0e:ca:0e:0d:ff:fe:a4:19:1f:22:99:7c:2b:fd:
         58:5b:a0:40:74:a2:c0:e3:4b:03:d6:a4:85:a0:b5:5a:76:c1:
         e3:fc:d5:6e:ae:0f:3a:e3:16:0e:07:1a:25:2b:3d:42:c5:5b:
         da:90:51:0b:93:44:1e:de:de:c6:f4:17:58:40:9a:61:79:85:
         52:94:28:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:52 2025 by rpki-client