Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          3zK1AaDXh+QimQdA6y3IyamA8ZJDtjyGvlSFMp7Ux8k=
Subject key identifier:   AF:8B:73:2F:24:D8:73:2F:F2:41:14:D7:70:E4:B8:B7:D8:64:AC:6A
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       01974B1F9B9A3BC2A3132942F1E5933DADF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          1880
Signing time:             Sat 07 Jun 2025 16:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:51 +0000
Files and hashes:         1: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=)
                          2: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: 6eqRZdy8pIi8SncPUAPKsnHGKzhGh2KrHv0qglb+nfo=)
                          3: g5xI1rPsRPyRN3ReFQbSjlAhdD4.roa (hash: 4RslB5uaY3vCFR0lQxa4iv4PBTGKBUsdy/QMnx+qWGE=)
                          4: jPPJRlQHOW3Bdo3Xffl1cKS8yYI.roa (hash: +QHKisnDpujXyoJyM4AGTUHFPfJzBO245kYgUJWvE8Q=)
                          5: s6nYW-wwFY4e4FliH1slATjjkcI.roa (hash: IaJM9j4ERldNW3bqfwmZZck2Nh3sfZGgvyUZuPD1Rqc=)
                          6: yMmdIFdBqjge4268qHv_2FBmQAg.roa (hash: 1k88pfGpT/Vmmr2z0QLwMTybSXvCyAWKu6MQbbAvUnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:9b:9a:3b:c2:a3:13:29:42:f1:e5:93:3d:ad:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: Jun  7 16:00:51 2025 GMT
            Not After : Jun  8 16:00:51 2025 GMT
        Subject: CN=af8b732f24d8732ff24114d770e4b8b7d864ac6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:fe:ad:ad:d2:2a:aa:ea:1b:3f:67:d2:a7:
                    df:7f:f4:91:1c:ce:24:f6:c7:37:45:81:c4:b4:a6:
                    53:d4:94:a2:46:a5:e2:10:03:4b:0f:a3:fa:b0:e8:
                    0a:43:e8:30:0a:18:4e:1f:61:47:32:a4:c9:76:91:
                    42:d5:a0:8d:d0:98:34:61:68:7e:be:6a:ac:84:40:
                    94:99:98:9f:34:78:5f:8b:e4:ae:44:37:3b:84:20:
                    a5:60:bc:c2:e9:25:43:bc:c2:0c:0a:70:23:d9:78:
                    0b:c5:5a:a8:91:a0:5c:c3:15:99:41:cd:54:1b:c2:
                    cf:df:e7:07:bc:00:40:4a:5d:bf:fb:36:0e:09:b2:
                    9a:73:bf:bf:9d:47:97:61:e5:49:8f:93:9e:ec:f1:
                    a4:99:a3:51:60:11:7c:16:bb:75:f9:4e:80:4c:51:
                    5e:3b:d4:ae:6d:5d:89:ee:4a:ba:85:de:f0:82:90:
                    14:46:5e:9d:a7:2a:2b:92:93:51:9b:94:e2:6a:f5:
                    03:05:7a:78:45:4b:18:be:7a:cb:94:c8:26:7c:a9:
                    52:20:fe:c0:bf:a0:40:00:12:42:d4:44:ff:c9:5c:
                    bb:a8:52:6b:4c:8f:05:c3:cd:1e:2b:dd:5c:4b:87:
                    d3:a8:e5:9a:d9:52:1a:96:a2:21:a4:f8:12:dc:67:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:73:2F:24:D8:73:2F:F2:41:14:D7:70:E4:B8:B7:D8:64:AC:6A
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:df:39:27:f3:f0:8f:06:86:66:05:42:68:51:5b:b1:a2:
         32:9c:3e:b2:2e:aa:98:0f:1b:34:12:a3:6d:03:64:bc:c8:74:
         69:13:91:4e:25:91:50:5b:d3:ec:44:f1:a9:11:86:75:e3:89:
         e3:e7:c7:cc:83:f6:2a:2e:75:05:f8:56:d3:3b:b3:28:03:62:
         55:6b:54:0b:b4:f4:9f:13:ce:9f:0e:3c:bf:5c:4d:06:ee:88:
         28:03:2d:23:8c:44:c7:c2:5a:d7:e2:81:44:25:d7:e5:30:c4:
         22:cf:49:ef:c8:5c:2b:54:f7:47:07:cd:85:e5:ed:99:51:52:
         4a:29:09:91:e4:d9:6f:65:21:d6:fc:a0:55:21:19:18:47:62:
         d4:a9:d1:ef:d9:1d:73:12:cd:1e:65:bf:43:48:34:55:75:9e:
         2e:19:0f:80:54:be:0d:e6:7f:99:74:e2:e5:bd:6a:db:b2:e5:
         08:54:45:68:e1:be:21:5e:96:4d:89:7b:32:61:3c:23:c4:16:
         13:f6:98:39:2d:8a:c6:71:ca:f5:4b:a5:be:88:cc:f6:23:63:
         16:5e:b9:fa:29:fd:0c:93:5d:8c:cc:fb:64:37:1d:3a:0a:8d:
         62:9e:a3:94:94:31:40:23:9f:10:44:bf:bf:d1:d8:e8:87:7a:
         6f:39:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:49 2025 by rpki-client