Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File:                     XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier:          dGlD9IhgCh4V/iIFw0qoCca5W04apmf2A0Ql0RSVJRE=
Subject key identifier:   D2:28:07:F3:09:EA:29:89:01:2D:37:73:B9:9D:F9:26:A5:CF:31:02
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer:       /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial:       01975DCBBA2F7EE2BD2AF017681C02FE4941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number:          1516
Signing time:             Wed 11 Jun 2025 07:02:01 +0000
Manifest this update:     Wed 11 Jun 2025 07:02:01 +0000
Manifest next update:     Thu 12 Jun 2025 07:02:01 +0000
Files and hashes:         1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: a86mPfddxuLQ1BKvJUm4ra2e7qJYZFMAJP/yyE0wSng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:cb:ba:2f:7e:e2:bd:2a:f0:17:68:1c:02:fe:49:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
        Validity
            Not Before: Jun 11 07:02:01 2025 GMT
            Not After : Jun 12 07:02:01 2025 GMT
        Subject: CN=d22807f309ea2989012d3773b99df926a5cf3102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:57:c5:62:82:91:ff:52:b4:10:c4:84:24:85:
                    41:8c:b0:b3:a0:24:bd:4b:be:53:25:42:1c:51:32:
                    50:19:01:28:fc:e6:4c:66:92:ef:60:8a:7e:fb:45:
                    ed:54:9a:57:61:32:49:89:c7:82:92:2c:6a:3d:dd:
                    95:fa:05:69:a7:5d:b5:47:13:58:f1:54:f4:c6:3e:
                    5f:ec:e0:c2:2e:d6:2d:38:57:0e:f9:5b:62:28:73:
                    b2:85:fc:ef:af:6b:8b:73:cb:dd:7e:30:22:3f:07:
                    53:f6:24:b6:f6:77:ea:57:c4:bc:42:30:1c:4f:e9:
                    07:13:1b:f8:42:6c:e8:71:2a:b0:aa:04:d5:f0:e3:
                    b0:94:94:30:b7:fe:23:a4:87:75:30:cd:98:54:b2:
                    14:3e:9a:65:84:5d:0a:3b:0c:81:10:d6:16:fd:62:
                    9f:bd:09:57:30:54:db:c1:49:99:11:3b:e7:a0:8b:
                    75:c0:14:dc:21:32:f8:e0:08:85:a7:43:fc:b8:8f:
                    70:2a:29:d1:39:37:df:15:e0:39:69:7a:2d:9d:42:
                    0c:e4:0b:08:08:0d:11:3c:75:f2:40:38:6e:7e:76:
                    ec:66:87:89:e9:8f:38:ea:5c:51:65:e2:8b:36:8b:
                    b3:7b:24:ac:e3:39:a5:a7:44:cd:24:04:31:95:7c:
                    2c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:28:07:F3:09:EA:29:89:01:2D:37:73:B9:9D:F9:26:A5:CF:31:02
            X509v3 Authority Key Identifier:
                keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c4:7a:76:2f:67:c7:b0:3e:18:64:02:0c:55:94:81:61:ad:
         ac:e0:44:45:96:5f:7f:17:0c:7e:af:ef:2e:d9:ad:9d:a9:50:
         e9:b7:64:cb:41:90:1b:2d:e1:b2:52:c8:b3:ac:31:d3:f4:f7:
         ce:86:62:8d:22:96:1e:be:83:31:af:a8:85:f1:66:b0:6c:80:
         e1:f3:6d:4e:1e:07:05:8d:38:d4:12:ba:ae:30:0a:7a:f2:ca:
         0c:32:98:14:33:61:71:75:6b:66:c6:8d:0b:28:cf:8e:84:45:
         80:58:05:fe:ae:ed:df:e9:3b:52:90:20:ad:21:2e:11:78:ec:
         57:55:1f:8b:d2:fc:eb:27:03:ff:7b:19:82:cf:4a:92:9f:1b:
         0d:e9:fa:26:04:7f:08:13:45:aa:e0:b9:1c:5f:11:56:dd:18:
         e4:91:47:08:07:dc:74:c7:fe:6b:71:64:9a:5f:7b:bc:6f:98:
         3a:a5:ed:1d:6e:1c:ae:7a:86:c9:3e:2a:6f:7d:40:fb:7e:47:
         62:c5:a2:27:ed:23:bd:f2:40:33:fe:d0:52:d4:4b:ef:3d:54:
         c2:37:e9:3f:44:c8:87:33:f1:13:aa:af:c7:f8:92:a8:8e:84:
         52:91:cc:3e:50:cc:2c:d1:46:03:70:e4:a7:21:61:35:ce:c3:
         e9:8d:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:25:07 2025 by rpki-client