Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          6JjLvIa0AiB5iyaqsZVbmppB7jE7istPW4dqjIYRf+o=
Subject key identifier:   58:E2:15:41:97:9A:BE:3B:2A:FA:D0:5A:22:C0:65:3B:40:DE:23:93
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       01958B845CEAA7F113CA18BDB8F4EB23A5BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          055D
Signing time:             Wed 12 Mar 2025 18:01:02 +0000
Manifest this update:     Wed 12 Mar 2025 18:01:02 +0000
Manifest next update:     Thu 13 Mar 2025 18:01:02 +0000
Files and hashes:         1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=)
                          2: ISwu8WB7qyBLfmKkrp_dDZ3x_1U.roa (hash: qQJXsssGcHnCv5RADljHJRBio84QXVcGD1FkE+MM62U=)
                          3: NLVTq0fOyRU_8jDE40NtcMyd-CQ.roa (hash: raIph2bihZjajkCc/rrPwQ/IODtF/UxH380z+IjhFkM=)
                          4: U8uZttP15oZyoOdC4yJMGnc-c0U.roa (hash: T5n+Pp56XalYqTIUYU27BO7TOuaAqMSh2xkCxmvOElQ=)
                          5: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: OOqJc0jRYAecTm5FdC3JGHzzOuJc8hqN3UbU9+ylu7c=)
                          6: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=)
                          7: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:84:5c:ea:a7:f1:13:ca:18:bd:b8:f4:eb:23:a5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: Mar 12 18:01:02 2025 GMT
            Not After : Mar 13 18:01:02 2025 GMT
        Subject: CN=58e21541979abe3b2afad05a22c0653b40de2393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:af:6b:c6:50:e5:ff:63:f2:02:ae:a5:dd:
                    b1:a3:d6:9c:38:e4:6b:c9:fd:08:7a:fb:96:df:e9:
                    2d:83:83:9a:e7:bf:6a:8a:16:af:c0:dc:50:ca:17:
                    62:f2:53:a1:90:10:86:3e:10:ba:66:a8:a9:b2:64:
                    04:6f:e8:05:70:5f:56:af:8a:c3:3d:d3:ee:79:c2:
                    22:2e:51:7d:2d:14:85:28:42:8d:8e:0f:44:c9:3e:
                    d5:af:db:42:50:86:c2:7e:08:51:bb:ff:cc:71:f5:
                    e3:30:96:4b:33:36:b3:39:db:2b:7b:5d:bd:69:e9:
                    df:a7:2c:42:e1:fd:08:6f:c9:76:f3:30:d6:c0:07:
                    62:49:1f:63:50:9d:0f:f7:4a:03:03:28:3a:67:8c:
                    da:51:31:a8:55:d7:52:72:32:bd:d7:46:85:c3:26:
                    8a:f4:94:31:bc:1a:27:9a:d9:70:79:1d:5d:1c:74:
                    15:86:e5:b9:b8:46:8a:b3:d8:d9:4a:7d:8b:c3:ee:
                    21:ed:04:b4:60:a2:9e:e9:53:a5:36:e8:d6:3b:3a:
                    c7:b9:e3:47:94:e7:ce:5c:7d:44:f3:3c:be:5e:98:
                    8c:b8:c8:0c:0b:93:7f:f5:6c:ca:c3:9a:bc:51:ad:
                    1d:5d:c7:73:b8:da:9c:9a:9d:11:93:03:a7:46:35:
                    0b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E2:15:41:97:9A:BE:3B:2A:FA:D0:5A:22:C0:65:3B:40:DE:23:93
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:86:d5:93:a2:2b:71:b1:df:67:7e:f3:16:a5:52:40:ac:87:
         8c:c1:dd:8b:b1:52:66:5a:fd:65:25:e9:28:3c:a8:62:c9:d4:
         c2:0e:29:9a:60:7e:4c:7b:7d:3f:0c:11:d5:12:34:78:b2:37:
         63:66:f7:61:c0:2b:42:9d:18:37:74:fe:a3:de:39:ef:50:5e:
         c5:29:d7:a6:35:5f:ce:b1:3b:42:de:2d:fb:5b:d3:00:c9:90:
         94:b2:a3:5c:86:34:99:ae:20:8a:af:31:b3:71:65:d7:aa:15:
         3b:7b:ef:2f:33:be:1f:49:9b:7c:bb:47:5f:75:62:7e:77:67:
         52:96:85:07:93:54:eb:a6:32:6d:d4:7a:ed:d7:ab:5a:ae:96:
         64:b9:90:1e:60:54:13:b7:00:ab:e7:99:b2:0f:4f:18:aa:bd:
         cb:46:12:6b:ce:23:aa:e5:d8:f4:01:b7:da:96:9f:33:b9:74:
         0c:df:02:cd:83:1b:f0:8c:96:44:00:03:14:7d:24:73:e0:43:
         de:df:0a:fe:e2:49:3e:c1:b8:0f:62:bb:d4:ac:f7:5c:3e:a6:
         06:b8:2f:34:42:ba:15:b1:33:20:0f:78:74:d2:a2:2b:9d:9f:
         55:8b:b0:61:83:98:80:b3:e5:78:ff:56:22:e4:99:af:83:4b:
         5a:df:9a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:34 2025 by rpki-client