Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File:                     XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier:          F1U471BHkxR+8EIBil/5MEgqR9ntUTGs2gmdIEdkLHQ=
Subject key identifier:   E5:E9:84:FD:C9:04:6A:52:EA:95:09:41:B3:02:A6:52:04:1A:A6:23
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer:       /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial:       0197567F2F4E89CE70B0DFE9E0BCB423E93D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number:          158D
Signing time:             Mon 09 Jun 2025 21:01:05 +0000
Manifest this update:     Mon 09 Jun 2025 21:01:05 +0000
Manifest next update:     Tue 10 Jun 2025 21:01:05 +0000
Files and hashes:         1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
                          2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: 7CoDITX91jrXjf6BAloFQ5IFEmmswjRgjjc+Xa8zzO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:56:7f:2f:4e:89:ce:70:b0:df:e9:e0:bc:b4:23:e9:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
        Validity
            Not Before: Jun  9 21:01:05 2025 GMT
            Not After : Jun 10 21:01:05 2025 GMT
        Subject: CN=e5e984fdc9046a52ea950941b302a652041aa623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:f4:fb:1b:88:89:35:19:ff:59:46:01:13:
                    60:4e:e6:b3:77:55:a5:91:9d:fd:a3:17:86:81:8d:
                    83:53:e0:96:94:52:a3:0c:cd:f1:7c:a8:33:c4:81:
                    6c:1f:71:22:ab:b0:45:51:33:dd:5f:17:6c:1a:93:
                    38:b9:1f:84:90:53:45:5f:9c:17:35:17:58:b7:cb:
                    33:69:05:0b:31:e2:c9:2b:98:eb:11:67:22:cc:e3:
                    6d:d4:f3:29:14:55:13:00:4a:7a:8a:33:72:f8:0e:
                    29:f2:24:b4:0d:48:e1:e5:3b:ef:46:13:4d:ee:ea:
                    dc:fc:49:c2:80:de:98:d3:ff:25:4a:fa:a0:11:13:
                    6f:82:db:67:0d:23:f5:20:33:d2:2d:d5:72:63:68:
                    59:63:f8:83:79:c8:1c:d0:9a:16:81:dc:3c:1f:83:
                    24:9f:5d:2f:b3:bc:34:a1:66:c0:6e:96:38:57:d3:
                    63:a0:dd:dc:6b:a3:c5:1e:2d:e9:c4:e3:ca:27:a3:
                    86:f5:ba:a8:41:d8:79:eb:98:e9:85:4c:52:a5:45:
                    47:0a:84:38:c1:6a:7d:cd:41:0c:33:be:67:23:0d:
                    5d:ab:41:ce:96:d0:87:74:da:bd:fd:4f:f2:76:0a:
                    cd:ed:12:bc:db:c9:7f:07:c0:16:0c:9b:7f:5c:99:
                    3d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:84:FD:C9:04:6A:52:EA:95:09:41:B3:02:A6:52:04:1A:A6:23
            X509v3 Authority Key Identifier:
                keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c9:35:65:a6:a1:8e:c4:46:7a:10:07:72:60:69:ac:d7:f0:
         5b:65:39:89:db:47:c9:3c:03:bc:2d:2a:c6:a1:bb:44:a5:ca:
         d2:c0:44:e4:91:f9:c7:64:17:62:12:c7:50:4e:a9:e1:72:64:
         30:95:03:b3:47:08:e2:02:46:59:70:37:88:1b:4e:a2:9a:7e:
         84:be:ed:07:d1:bc:25:d2:bc:48:68:f3:27:23:db:8d:31:5f:
         47:67:81:23:f0:e2:bd:ea:47:f9:fb:b9:d6:39:26:46:f6:d6:
         88:9d:96:ae:e5:9e:2c:d5:20:9f:42:87:d9:ba:48:da:6c:b3:
         fc:23:bc:c7:49:cd:ee:6d:de:48:0c:00:51:c1:27:b1:5d:50:
         28:55:82:4d:ec:0a:97:24:02:e3:28:86:56:77:2c:c2:be:5f:
         f9:21:d8:c7:33:aa:08:0f:08:08:0e:40:c5:a1:d3:d2:ea:5f:
         5b:78:43:50:d7:cd:22:da:e9:4d:5e:8d:23:2e:d5:6f:2f:ba:
         7d:b1:d8:03:71:20:ed:43:07:43:4c:36:90:dc:9d:05:b6:45:
         4d:9d:ff:f4:9d:bc:e2:ca:7f:1a:d2:24:24:f1:43:07:65:50:
         77:25:dd:34:e0:3d:a8:76:8d:17:5f:25:6e:0f:a8:4e:5c:7d:
         75:22:0a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:16:00 2025 by rpki-client