Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
File:                     xGn-PYgsk-OOi2ooajF33Bfpmsc.mft (raw, json)
Hash identifier:          DNfsd2QpBbOBO683xNoGncA3DQdrJicM9Enb35jcLRc=
Subject key identifier:   7C:E2:D6:4E:74:09:ED:E4:88:84:4C:88:40:B9:96:0B:D8:A6:E4:8D
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Certificate issuer:       /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial:       01974AE8ED8016110A6F47885C7B843E5660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 15:01:08 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:08 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:08 +0000
Files and hashes:         1: EOlGjDlmQ3zjWLU87OYTWDWcCEY.roa (hash: pUBA00I+CQC2RPjmIddeqkkbXGoBJUyoSnMxqvr2Gas=)
                          2: VWhDL_pbFyyRh5F_p1365369fw8.roa (hash: h0UGnV1yT7TAR4sgEMb7SSbuBaNRRDcOsgJUpZU75gM=)
                          3: eStVA852783cSRla3cS6Sa73nTo.roa (hash: hjwJSk0hM/n7mjZhOiCDKrp/IiuwE5tJF1ttaMrAUdQ=)
                          4: mz6tpSTyWG1tpsywf2xFprKsdgk.roa (hash: TcXisvKqSL089bUIJMzgiUZfK9JnlvU+0pDp8FZCWe4=)
                          5: xGn-PYgsk-OOi2ooajF33Bfpmsc.crl (hash: TW3jFcYNiJG3IrzdpmxyjGSrEzLw7S9gOvp9RlhdK3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:ed:80:16:11:0a:6f:47:88:5c:7b:84:3e:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
        Validity
            Not Before: Jun  7 15:01:08 2025 GMT
            Not After : Jun  8 15:01:08 2025 GMT
        Subject: CN=7ce2d64e7409ede488844c8840b9960bd8a6e48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:99:66:2a:7c:ca:8a:15:6c:15:8f:13:0c:
                    f2:79:bc:0b:6e:23:9e:61:38:1d:43:e3:01:b0:ad:
                    dc:28:dc:b6:82:81:62:c0:03:12:bf:c1:9a:93:1e:
                    76:ec:fe:17:b7:97:84:96:17:00:b1:f4:b8:5b:c1:
                    c4:37:22:fe:fb:98:d9:50:5d:86:53:15:ef:af:0a:
                    ac:ab:ae:48:65:9c:62:80:51:26:5b:17:73:89:1e:
                    17:7d:03:9e:40:00:46:d8:45:7c:77:f5:73:39:e2:
                    65:23:ca:21:6d:a0:15:43:47:00:46:4b:64:bf:62:
                    b1:52:07:e3:ee:98:80:33:f8:93:5e:e1:9e:53:47:
                    3c:fd:80:b7:7a:73:1d:c4:e9:08:33:a8:2f:77:3d:
                    76:d5:2f:a8:87:bd:60:79:83:3b:bd:4c:e5:fa:e4:
                    d0:2e:a9:4c:e9:0f:60:43:f1:1c:d9:40:56:25:f9:
                    73:43:f1:49:2d:c8:48:38:71:9c:25:b9:05:32:b3:
                    07:24:fa:27:e1:5b:77:11:ba:bf:e3:cb:a3:14:8d:
                    9c:fe:37:ff:74:ff:52:27:53:f3:24:0f:16:9d:53:
                    8f:91:cc:28:53:aa:d3:85:d8:42:b9:0a:70:ef:0f:
                    c4:0b:09:5f:bf:be:6c:a5:7e:60:1a:89:9d:52:c8:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E2:D6:4E:74:09:ED:E4:88:84:4C:88:40:B9:96:0B:D8:A6:E4:8D
            X509v3 Authority Key Identifier:
                keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:62:36:38:f4:0b:cd:d1:cd:22:7c:25:fb:08:7b:cd:7f:fd:
         4c:bd:c2:3c:ab:9b:ea:64:15:94:d3:36:e4:9f:91:0a:f2:fa:
         f2:23:fc:14:dd:94:a9:53:bd:00:71:05:af:7a:04:60:46:1a:
         b4:8c:d9:c9:bd:d8:4c:8c:0e:cb:36:d0:a6:b9:fb:f6:aa:bd:
         b4:ce:33:17:d7:18:72:16:e6:05:30:fd:30:bb:81:01:42:c9:
         d9:22:9a:e5:ae:f8:b4:07:92:c2:fa:83:0b:73:1d:42:fa:3c:
         e4:72:ee:21:ec:76:e8:26:69:ff:e2:48:30:8f:f0:fb:21:ef:
         f4:2a:bf:9b:b6:ad:26:e5:66:6e:46:d7:50:0c:a6:8c:ea:f8:
         37:ae:73:2c:b6:44:85:cb:8b:f4:76:35:b5:be:34:70:2f:4c:
         ff:a3:8d:b6:ad:d3:db:0c:9a:7b:f9:28:18:fc:4e:6d:0a:51:
         39:0d:ed:78:a8:e1:9f:b8:f0:ad:8d:ca:81:be:6c:9b:2e:7d:
         50:72:4c:20:8c:48:90:b0:ad:04:af:8c:33:f7:e9:2b:00:68:
         9f:6b:0e:54:16:f4:da:9b:ef:1e:27:ab:9e:b6:66:2f:f0:b4:
         44:21:93:a5:27:d4:82:44:d1:d1:e0:63:99:3f:3c:84:c0:59:
         00:fc:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:37:42 2025 by rpki-client