Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
File:                     iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json)
Hash identifier:          xs/0yetew4rUxmDIz8LJsDWMu/Zx09DzqxvWxy50AXQ=
Subject key identifier:   2F:5D:93:C6:F8:F0:86:31:E3:7D:02:E8:74:30:EA:DB:79:0F:F4:70
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Certificate issuer:       /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial:       01974DE9EF0F6575F58F6F985775D640C0A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
Manifest number:          1510
Signing time:             Sun 08 Jun 2025 05:01:06 +0000
Manifest this update:     Sun 08 Jun 2025 05:01:06 +0000
Manifest next update:     Mon 09 Jun 2025 05:01:06 +0000
Files and hashes:         1: h4rlWsGQyp7l9eg6oqaTJSAFMT8.roa (hash: uarWJUMCX+17tjbtXPupyY/SCv5UIEMVh4slAsONpPQ=)
                          2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: ODtc3TOxx6dWPNWfCNjKXJpVTEwMbj/j8vsVJvk3W1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:ef:0f:65:75:f5:8f:6f:98:57:75:d6:40:c0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
        Validity
            Not Before: Jun  8 05:01:06 2025 GMT
            Not After : Jun  9 05:01:06 2025 GMT
        Subject: CN=2f5d93c6f8f08631e37d02e87430eadb790ff470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:53:99:5c:11:28:3a:fa:4b:77:f8:77:eb:dd:
                    d8:22:61:df:e2:87:7b:68:2d:1a:b3:e3:35:1b:62:
                    79:0a:1b:2a:30:9a:85:ea:93:d4:90:3d:76:e0:84:
                    d5:c1:91:39:ea:36:9e:61:76:a8:9e:86:1c:d2:41:
                    36:12:39:04:eb:98:60:61:cb:48:ba:b4:0b:ea:f8:
                    47:25:4c:8f:7b:84:09:0e:b9:73:2a:2f:49:ea:95:
                    70:4b:fc:ea:50:31:52:8f:6d:f4:38:4b:22:64:d9:
                    65:10:45:35:11:3c:76:fc:a8:98:cf:66:05:7c:da:
                    95:7b:89:0a:0f:a9:b5:c9:c0:a3:65:33:ea:6c:42:
                    5a:5c:86:ba:8d:13:ba:32:dd:f3:b6:c3:69:be:ae:
                    25:29:df:b1:9d:d4:11:cf:5b:dc:d2:07:56:1a:fd:
                    98:2f:e9:91:fb:29:44:75:bc:a4:37:19:48:1f:fc:
                    b4:ff:a8:6f:28:73:cb:4b:c0:17:4f:af:57:ea:ec:
                    71:24:65:e1:0f:19:d9:1d:b5:87:af:5f:d3:32:71:
                    a8:3e:67:52:b2:37:82:16:70:f3:01:fc:b4:e8:7a:
                    7c:0a:e7:ce:8f:93:df:fa:6c:3d:ef:43:f3:c4:c7:
                    28:43:81:85:7c:c9:82:27:5c:ce:ca:2e:32:49:0e:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5D:93:C6:F8:F0:86:31:E3:7D:02:E8:74:30:EA:DB:79:0F:F4:70
            X509v3 Authority Key Identifier:
                keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c4:52:be:fd:72:ea:a1:e0:44:27:fc:2b:cb:55:fb:b5:66:
         ab:dd:54:a6:0e:ac:ee:33:f0:30:7d:5b:85:b4:15:03:bf:1a:
         43:3d:8c:d0:56:32:cc:e6:43:d3:b4:58:70:f0:b2:e1:ce:11:
         2a:a5:61:fc:e3:17:ef:dd:14:54:2a:43:fb:d6:83:6e:ee:a7:
         13:0d:9a:be:b4:75:58:b3:f3:f6:31:23:c9:18:7d:83:59:52:
         52:7b:d0:22:c0:34:8c:d9:c9:19:b3:a4:5e:50:61:69:f4:ba:
         c7:ee:63:11:ac:d9:1c:39:dc:4a:c8:4e:5e:ba:8e:cf:be:c5:
         29:c2:98:0a:79:70:4b:94:fc:3f:d4:4d:cd:cb:2e:fa:8e:a5:
         10:fb:15:69:6a:75:da:43:d2:9f:ef:90:22:0a:e5:97:26:26:
         4f:8c:06:7a:05:ed:c4:20:18:51:ad:91:d8:4a:3f:b7:69:f6:
         42:50:fd:b8:4e:b5:29:31:09:87:33:9c:66:38:89:fd:67:38:
         9f:a9:a6:c8:ff:6f:05:d0:08:d9:ff:f4:d7:3d:0c:4e:8a:55:
         c2:d9:00:e0:b4:4e:12:36:3c:ab:96:92:3f:40:ac:56:6a:97:
         f8:71:0c:1a:96:6f:ad:03:10:ff:78:42:80:8c:05:46:20:7b:
         e9:40:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:22 2025 by rpki-client