Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          SVgzHJGJ+mcJWnLU/HkingothLEWCJPqt3ZZs+ddQZc=
Subject key identifier:   4C:7D:3A:8E:0C:11:7F:ED:42:6F:C9:5C:FE:90:5E:3F:9C:7C:F5:90
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       01976D74BEF116CA4C9A6A9B2699E4CDADE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          0A03
Signing time:             Sat 14 Jun 2025 08:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:56 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: 9yl23IPz2hYxDlpbB9zToI58AYJLGgbszbJSvzvzT/8=)
                          2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:be:f1:16:ca:4c:9a:6a:9b:26:99:e4:cd:ad:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: Jun 14 08:00:56 2025 GMT
            Not After : Jun 15 08:00:56 2025 GMT
        Subject: CN=4c7d3a8e0c117fed426fc95cfe905e3f9c7cf590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:98:76:55:aa:bd:74:cd:1f:e0:a3:d5:0d:38:
                    a3:9c:26:37:64:40:2f:fa:4b:bd:18:20:59:6a:ca:
                    06:dd:fd:ae:8e:2c:83:8a:98:e2:75:ac:f1:50:3b:
                    43:64:23:55:05:c6:dd:79:f0:7f:0b:16:cb:fe:ee:
                    49:ca:55:7c:f3:3a:37:89:21:c7:90:be:39:59:ed:
                    ea:b2:19:8d:68:56:78:9d:4d:8c:63:3a:ac:bf:f3:
                    5b:51:2b:72:ee:d5:a5:70:8e:dd:57:92:76:71:07:
                    31:18:4f:e4:48:c9:de:bd:4e:38:31:74:aa:79:c3:
                    49:34:be:bc:88:d2:e6:65:d1:f3:a3:df:25:3d:d2:
                    e8:cc:80:b0:ba:9d:f5:5d:34:ea:33:b3:4c:c9:ce:
                    61:e3:fc:79:e8:43:cb:42:ca:69:8e:77:b6:f0:2a:
                    e3:8b:90:53:dc:80:39:b0:39:41:ea:5c:3e:51:9a:
                    de:28:bd:b1:20:fc:40:41:1e:58:44:ca:e1:04:d9:
                    d1:6c:11:08:cf:6e:3a:ca:49:23:c3:c4:52:5d:f1:
                    2f:ad:9e:4f:77:6b:aa:1f:e7:a6:ab:fe:cc:b2:20:
                    47:05:ed:71:38:99:45:b8:0e:02:af:e7:1b:72:83:
                    05:78:39:a1:59:b4:c9:03:14:18:fb:f8:6a:21:0f:
                    c6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7D:3A:8E:0C:11:7F:ED:42:6F:C9:5C:FE:90:5E:3F:9C:7C:F5:90
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:9d:46:eb:47:d2:52:1f:cc:6e:33:5d:97:bd:01:70:24:
         e7:3b:3d:e7:27:6b:e2:50:32:b7:59:83:48:49:1c:ad:b3:91:
         b7:6e:a3:3f:0a:df:6a:90:0d:e1:60:4e:9d:cf:d8:c3:7e:25:
         86:1d:11:e6:61:41:e3:19:a2:12:ce:d4:fd:c6:3c:99:5d:14:
         ad:30:b5:99:04:55:bb:d9:14:d2:5e:19:64:9d:8b:92:c4:08:
         a2:65:43:0e:d4:7b:e3:c9:6a:48:7b:0e:bc:ea:04:ca:14:f6:
         50:e7:cb:f0:e4:b7:51:c8:ca:3c:38:87:73:56:4c:b5:b4:e7:
         1a:45:af:c4:1c:b0:32:73:0b:47:f6:cc:83:b5:b4:93:be:3a:
         f5:95:a2:0e:8f:71:12:22:e4:73:da:0a:be:11:4b:97:a7:d5:
         85:b1:d6:95:06:97:c6:49:69:35:07:70:90:5d:ce:0d:fc:e2:
         0a:74:32:c4:9e:df:c9:e0:ed:47:4e:83:81:f8:c2:b1:a8:6f:
         62:2e:28:0e:d1:ea:f7:dd:15:0c:3a:7b:9c:26:6f:ef:c2:e7:
         f1:a0:d3:cb:5b:65:85:94:c5:1a:f3:04:5d:98:16:70:ee:5e:
         00:cb:3f:f0:41:00:be:4b:6d:d9:58:bf:0b:5e:a0:61:67:2c:
         71:10:e8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:27:10 2025 by rpki-client