Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
File:                     x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft (raw, json)
Hash identifier:          aXNO10zK5TMMiD1etUAhfAXqB2BOpBkQEQybmkMxHXg=
Subject key identifier:   6E:68:D4:54:78:F1:75:26:51:E9:D8:97:83:4A:45:77:57:8B:F8:F3
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Certificate issuer:       /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial:       01974E57A36E2A5780ACF5B3EA585DD891C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
Manifest number:          0D4A
Signing time:             Sun 08 Jun 2025 07:00:55 +0000
Manifest this update:     Sun 08 Jun 2025 07:00:55 +0000
Manifest next update:     Mon 09 Jun 2025 07:00:55 +0000
Files and hashes:         1: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (hash: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=)
                          2: x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl (hash: 9qZBliy6NyXwsmPqiNexrXZP5kCZwyFooDvNaVtn+yk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:57:a3:6e:2a:57:80:ac:f5:b3:ea:58:5d:d8:91:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
        Validity
            Not Before: Jun  8 07:00:55 2025 GMT
            Not After : Jun  9 07:00:55 2025 GMT
        Subject: CN=6e68d45478f1752651e9d897834a4577578bf8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:9e:a9:d3:50:8c:18:57:22:a4:d2:dc:f2:
                    72:10:d3:7c:f7:2e:0b:b8:ab:fe:45:6d:94:9a:dc:
                    ff:c3:56:92:45:93:e4:d3:07:20:d3:c4:fc:0d:90:
                    93:43:78:d7:85:73:0f:5e:f4:ed:d5:44:8f:1c:94:
                    8b:d2:06:63:e9:d2:3c:d1:37:e2:6f:a6:06:26:cd:
                    55:07:e9:bb:7c:30:1a:7a:5f:6a:b5:53:59:e0:56:
                    13:85:63:e8:91:88:42:af:b8:84:43:16:d2:e3:e0:
                    59:b7:48:8c:41:83:a4:bb:28:ce:73:db:5f:ee:ad:
                    1d:95:7a:f8:98:7a:45:28:12:be:e1:bc:0f:b6:a7:
                    9b:19:fe:74:47:6c:ec:57:24:2a:fd:4e:e3:0f:8c:
                    8b:ec:70:43:2a:40:b0:c3:61:49:f4:40:94:18:6f:
                    fd:f8:c4:69:d9:5f:de:e6:13:31:31:b0:ba:f0:f0:
                    7c:40:e8:a8:b0:69:1c:a5:a5:30:40:62:44:67:17:
                    62:13:9b:69:c8:7a:64:b7:61:75:0d:e3:78:c3:f5:
                    74:51:85:3a:0d:dd:8c:85:17:0f:2d:46:bd:f7:e5:
                    b1:e9:67:a5:eb:28:df:ca:64:95:6e:52:20:5b:4f:
                    5f:d0:34:08:08:c4:a5:6a:13:86:31:e5:50:72:d0:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:68:D4:54:78:F1:75:26:51:E9:D8:97:83:4A:45:77:57:8B:F8:F3
            X509v3 Authority Key Identifier:
                keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:e9:16:4f:bf:a8:05:4a:b3:e3:e9:de:00:61:32:24:2a:
         f1:a8:25:f0:3f:31:ec:7a:1d:5c:b9:a7:ee:9e:58:53:ad:8e:
         98:fa:be:36:2a:a3:44:0e:a8:c5:3b:5f:17:70:76:84:a8:8b:
         d7:98:2c:6a:b2:bf:55:dc:f4:de:94:d5:f5:ed:00:f8:06:b2:
         66:c3:04:ff:ff:0d:79:a4:c1:d4:5a:ff:a4:e6:1f:2e:f2:02:
         74:33:a9:dc:da:bb:e1:a5:d9:7b:5c:a3:5a:b1:d6:1e:21:71:
         51:d8:8c:e4:e4:67:b6:a9:8f:b0:44:a3:04:c7:b7:3f:75:29:
         a3:1a:79:71:cf:9a:47:6e:04:fa:da:b1:e0:49:87:8b:d7:ca:
         52:ff:05:18:80:9f:46:2a:1b:c5:0d:8c:5d:31:32:1b:d3:89:
         79:52:0f:a5:95:e8:a4:eb:e0:15:e1:e2:af:23:e4:74:73:a4:
         e1:fb:74:64:55:66:78:ed:36:ae:c0:50:73:f0:d0:bd:5c:ce:
         a7:e6:e0:e9:eb:15:88:2f:87:af:e2:fe:85:ff:74:81:c6:c0:
         dc:d6:85:8b:21:f1:46:ab:ab:30:a5:36:0f:a5:7c:25:ce:4b:
         8f:e2:e9:08:f3:3f:82:b0:fa:74:43:18:9f:36:71:c7:91:83:
         86:70:b0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:12:10 2025 by rpki-client