Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
File:                     xYSSMuOUO_JXydyuqw75LTCkz60.mft (raw, json)
Hash identifier:          y9BP9ordT7rd07KRQr62Ycxdv0sn6WPPNuVWZqcYLwc=
Subject key identifier:   68:A7:53:09:4C:7A:8B:8E:B0:DD:90:B9:BF:E0:E3:D2:38:E7:30:62
Authority key identifier: C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD
Certificate issuer:       /CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
Certificate serial:       019739507B686DFB65098971371CF62523C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
Manifest number:          0503
Signing time:             Wed 04 Jun 2025 05:01:05 +0000
Manifest this update:     Wed 04 Jun 2025 05:01:05 +0000
Manifest next update:     Thu 05 Jun 2025 05:01:05 +0000
Files and hashes:         1: Ax2MQ5Lb54u4442Uota7T1lDXqU.roa (hash: WtpxYyNpcHNC3G/vVwvJ9snmh6XrLgpD5cHVaG5LTa8=)
                          2: owZzsAnJSaU1iNYi45n_txLL9DY.roa (hash: mcBj/ytCvuFdEBFFZvoIyH3aWBfrAgmYQKhMFyspI2M=)
                          3: p5VeBb53f0-trs6dCEU052R8j6M.roa (hash: Xnzai9MWsx1KpCjRV19PKhOCyTafRZxI8PEiad1933g=)
                          4: xYSSMuOUO_JXydyuqw75LTCkz60.crl (hash: ZYR36D9UpS/XiLGJoH4qnTFMa/uZt6rtD+WbRYRMvOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:39:50:7b:68:6d:fb:65:09:89:71:37:1c:f6:25:23:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5849232e3943bf257c9dcaeab0ef92d30a4cfad
        Validity
            Not Before: Jun  4 05:01:05 2025 GMT
            Not After : Jun  5 05:01:05 2025 GMT
        Subject: CN=68a753094c7a8b8eb0dd90b9bfe0e3d238e73062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:62:47:77:cf:e1:40:c7:12:27:83:1c:b9:
                    fa:27:b5:e6:9f:e7:3a:a8:0c:3f:81:89:c1:6f:99:
                    76:71:be:0d:88:97:22:4d:4f:49:6c:70:bc:92:ab:
                    ac:e2:5e:bb:78:67:1a:d6:ee:cf:6d:e2:83:c2:9b:
                    dc:e9:97:28:48:e8:8c:b8:e2:83:b5:63:47:33:6c:
                    91:79:d1:22:39:83:82:e8:c6:eb:05:19:cc:85:b5:
                    46:ed:89:98:16:60:d3:7d:43:39:38:ee:67:b2:94:
                    3e:88:3c:1d:53:3a:5f:67:3d:45:a8:8b:3e:10:3c:
                    24:46:d7:45:54:36:6d:ae:19:72:96:f6:7a:a0:d2:
                    4f:81:af:d5:e0:c1:1d:98:18:ad:08:77:0c:c1:db:
                    bc:ae:2c:cc:aa:e6:89:6c:d5:1c:7d:46:a7:c8:26:
                    2b:74:bb:1d:c0:dc:4f:53:9d:a9:09:05:cc:2a:fc:
                    5e:d2:e0:ac:72:e0:90:10:63:b4:a2:f3:ba:71:0b:
                    29:01:47:ef:07:41:95:6a:98:54:5f:e6:3a:d9:10:
                    de:c1:5e:26:85:28:e2:68:8c:07:f2:d5:87:de:ee:
                    e7:cc:73:7c:a4:46:fd:3f:27:c2:72:f1:07:82:c4:
                    64:0f:01:d9:10:99:c3:2e:0a:60:83:82:71:d1:94:
                    1a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A7:53:09:4C:7A:8B:8E:B0:DD:90:B9:BF:E0:E3:D2:38:E7:30:62
            X509v3 Authority Key Identifier:
                keyid:C5:84:92:32:E3:94:3B:F2:57:C9:DC:AE:AB:0E:F9:2D:30:A4:CF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYSSMuOUO_JXydyuqw75LTCkz60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/440219-bbc3-4186-b1a6-afa917bdf7d1/1/xYSSMuOUO_JXydyuqw75LTCkz60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ce:fc:4d:1d:06:63:33:77:a7:15:63:a9:e9:6b:77:03:a8:
         6e:22:8c:01:c8:bc:07:e6:71:f7:1e:79:7e:f6:92:ee:87:a3:
         dc:83:f1:32:59:8d:fb:44:eb:5d:32:c7:2d:79:2e:29:ff:93:
         1c:36:4a:59:91:1b:fd:8e:e5:c8:a2:44:2c:80:53:a2:ab:42:
         87:3d:36:75:8b:c3:e9:0c:d7:98:3b:f0:9a:2c:ce:cd:4b:27:
         d1:fe:88:09:0a:c8:a5:96:9d:cb:01:ef:10:c7:dd:ba:10:6e:
         f1:42:28:c2:8b:b4:8d:08:c1:ab:e5:34:eb:e1:12:e2:f5:d6:
         76:f8:61:8a:e3:90:87:da:67:3a:9a:ab:ad:7d:8e:9e:63:b5:
         5c:81:c1:a0:91:4e:a1:3a:f9:15:b3:7d:9a:8f:6a:13:82:a4:
         24:e4:5e:4b:c3:6e:75:25:6e:4c:a9:95:5a:bd:d5:51:70:ca:
         fe:df:8f:41:42:f9:93:26:c6:64:97:48:95:ff:ad:30:9e:2f:
         f3:7a:be:ac:52:c0:d1:26:4e:c3:03:bc:25:b8:2b:a4:af:31:
         b9:76:9d:26:d8:9b:67:31:16:f1:6e:1b:4a:f1:1a:ed:38:29:
         92:43:9c:df:1d:05:1f:88:73:c2:d3:48:94:1f:51:41:aa:d3:
         9c:c8:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:11:55 2025 by rpki-client