Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
File:                     xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft (raw, json)
Hash identifier:          cqT//QiQioXn9ju12GpnEodXGAHmhYPQq/aeKqF1kgY=
Subject key identifier:   C6:C1:C5:9B:10:1B:4C:65:BA:38:22:34:61:1A:55:4E:55:CF:31:C7
Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Certificate issuer:       /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Certificate serial:       01974E8E66A27B60164E506EC186C6C64EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
Manifest number:          04EB
Signing time:             Sun 08 Jun 2025 08:00:44 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:44 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:44 +0000
Files and hashes:         1: XtEdAEEop3HSdnOxibG98C_uMCU.roa (hash: +p4FtnANqp2tZpv3Dmdn2vhOEqjGwMWFA5juiZbc568=)
                          2: xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl (hash: dDjgoAu8QvmKPm5xb50PhB74y34K/RIWdpBIbioSc5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:66:a2:7b:60:16:4e:50:6e:c1:86:c6:c6:4e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
        Validity
            Not Before: Jun  8 08:00:44 2025 GMT
            Not After : Jun  9 08:00:44 2025 GMT
        Subject: CN=c6c1c59b101b4c65ba382234611a554e55cf31c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a3:c0:60:54:01:13:49:b6:94:b6:e0:ac:7e:
                    ff:4b:57:1d:7c:6e:b0:47:34:e5:88:bb:17:bd:d6:
                    51:24:0c:97:05:81:7c:d0:79:5b:63:d3:e4:a8:e0:
                    5f:1b:ce:38:4f:74:0f:f1:82:17:9a:c9:68:09:f6:
                    95:a8:b4:b4:2a:73:c6:2b:a7:9e:81:ef:4b:db:72:
                    08:e7:da:79:f3:ff:e7:49:c2:3f:3f:fb:2f:a8:0a:
                    ba:1c:d7:f7:f8:4c:52:01:c1:69:21:be:2f:12:fe:
                    d4:17:c7:75:2e:60:f1:0e:c6:cd:c4:80:a3:95:79:
                    20:0c:c0:0a:4d:92:98:96:0f:06:57:02:c0:f0:ed:
                    d4:f5:2b:b8:64:5d:33:96:b4:24:5f:aa:5f:9d:7c:
                    69:ac:bd:6d:b6:6e:53:4d:93:73:6a:a2:ec:14:53:
                    01:55:2b:98:45:72:bf:cd:08:f4:db:36:ec:08:23:
                    c5:ca:a0:0a:46:fb:f7:09:28:1a:8f:62:be:af:80:
                    d9:c5:d5:62:95:4f:43:c1:dc:c2:bb:d4:2a:69:7a:
                    17:59:2e:60:f8:7d:c1:e5:a7:b4:89:45:e8:10:78:
                    c9:05:cb:34:0d:23:0d:ac:b5:db:c3:f3:4f:09:0e:
                    61:c3:ba:87:e4:11:19:4d:36:64:40:17:09:3a:a7:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C1:C5:9B:10:1B:4C:65:BA:38:22:34:61:1A:55:4E:55:CF:31:C7
            X509v3 Authority Key Identifier:
                keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:4a:37:bb:82:31:03:8a:b2:77:96:15:42:92:2a:0f:6e:8a:
         65:40:43:6f:ce:6e:73:9e:4b:c3:02:0d:e9:32:cf:32:5a:ee:
         96:87:3b:4e:2f:45:7d:f5:34:9e:f3:d2:3e:ed:e6:26:b1:39:
         a6:47:e8:99:59:b7:94:33:ad:18:c4:6d:f3:f4:37:3c:7c:f4:
         e3:63:9d:c4:5b:66:1a:d9:3b:6f:02:5c:55:8a:f3:e0:bf:13:
         4b:4b:08:cd:29:82:69:2c:15:22:15:f2:e1:fc:a3:21:dd:5d:
         76:83:e1:a0:ed:c8:f8:19:7b:12:ba:a4:00:d6:eb:16:ca:93:
         5d:de:89:c5:b5:23:00:5b:8a:74:d6:48:98:45:8a:a9:f9:c9:
         8a:43:99:8a:b4:49:9e:9f:d8:fa:77:12:bb:5f:43:01:0c:92:
         1a:7e:55:f5:14:75:5c:0b:a4:c7:41:8f:93:3a:c5:f5:f4:d6:
         96:7c:fb:90:81:7f:67:15:c1:6c:a7:36:13:69:9f:37:2d:5a:
         ab:6e:bc:af:16:42:3c:ac:b1:0b:4f:95:da:30:3f:21:17:f1:
         8b:b5:92:68:1a:8f:b8:40:b8:4b:73:da:98:06:cf:43:79:cb:
         9a:e5:35:3f:a8:1e:47:76:20:dc:ce:7d:17:b4:4b:f5:e1:75:
         23:d5:f2:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjmaie2AWTlBuwYbGxk73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NTM4NjkzMTY3YWZkNGM1YWFlNTFkZWE3ZTVmM2Y5OWJh
NjViZTkwHhcNMjUwNjA4MDgwMDQ0WhcNMjUwNjA5MDgwMDQ0WjAzMTEwLwYDVQQD
EyhjNmMxYzU5YjEwMWI0YzY1YmEzODIyMzQ2MTFhNTU0ZTU1Y2YzMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16PAYFQBE0m2lLbgrH7/S1cdfG6w
RzTliLsXvdZRJAyXBYF80HlbY9PkqOBfG844T3QP8YIXmsloCfaVqLS0KnPGK6ee
ge9L23II59p58//nScI/P/svqAq6HNf3+ExSAcFpIb4vEv7UF8d1LmDxDsbNxICj
lXkgDMAKTZKYlg8GVwLA8O3U9Su4ZF0zlrQkX6pfnXxprL1ttm5TTZNzaqLsFFMB
VSuYRXK/zQj02zbsCCPFyqAKRvv3CSgaj2K+r4DZxdVilU9DwdzCu9QqaXoXWS5g
+H3B5ae0iUXoEHjJBcs0DSMNrLXbw/NPCQ5hw7qH5BEZTTZkQBcJOqfa9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbBxZsQG0xlujgiNGEaVU5VzzHHMB8GA1UdIwQY
MBaAFMVThpMWev1MWq5R3qfl8/mbplvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFZPR2t4WjZfVXhhcmxIZXAtWHotWnVtVy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81ZGVmMGYtNDBhNC00MDcxLWE2MDIt
YmMyYjdlNmYxY2E0LzEveFZPR2t4WjZfVXhhcmxIZXAtWHotWnVtVy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My81ZGVmMGYtNDBhNC00MDcxLWE2MDItYmMyYjdlNmYxY2E0
LzEveFZPR2t4WjZfVXhhcmxIZXAtWHotWnVtVy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEo3u4Ix
A4qyd5YVQpIqD26KZUBDb85uc55LwwIN6TLPMlruloc7Ti9FffU0nvPSPu3mJrE5
pkfomVm3lDOtGMRt8/Q3PHz042OdxFtmGtk7bwJcVYrz4L8TS0sIzSmCaSwVIhXy
4fyjId1ddoPhoO3I+Bl7ErqkANbrFsqTXd6JxbUjAFuKdNZImEWKqfnJikOZirRJ
np/Y+ncSu19DAQySGn5V9RR1XAukx0GPkzrF9fTWlnz7kIF/ZxXBbKc2E2mfNy1a
q268rxZCPKyxC0+V2jA/IRfxi7WSaBqPuEC4S3PamAbPQ3nLmuU1P6geR3Yg3M59
F7RL9eF1I9XyHw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:38:39 2025 by rpki-client