Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File:                     xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier:          wmr+VgxX4JwLGZFUFKDd/kVX75VSy6QL8rrAvnqWVIE=
Subject key identifier:   85:C2:26:A2:A9:62:47:37:14:FF:FA:AF:13:9A:52:76:59:FE:DC:FB
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer:       /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial:       0197488CF83A7CCE5AECC37BC83ABA7F1312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number:          0161
Signing time:             Sat 07 Jun 2025 04:01:27 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:27 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:27 +0000
Files and hashes:         1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=)
                          2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: KaDsMmfj6p49c90MXcdR20R2adI1xDjcO9oCBC6O7/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:f8:3a:7c:ce:5a:ec:c3:7b:c8:3a:ba:7f:13:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
        Validity
            Not Before: Jun  7 04:01:27 2025 GMT
            Not After : Jun  8 04:01:27 2025 GMT
        Subject: CN=85c226a2a962473714fffaaf139a527659fedcfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:79:cd:ed:f8:90:6d:9c:76:53:2f:57:10:
                    98:89:94:cc:52:cd:d0:e9:e2:80:c9:d2:5e:1a:64:
                    43:bd:c1:7b:62:8d:26:60:82:53:e5:68:74:41:03:
                    7a:59:8f:21:e5:ef:bc:1b:1b:76:61:6b:16:ce:1a:
                    3c:24:b3:10:78:ee:2f:d4:6d:c6:f6:2c:7e:e6:4b:
                    1c:d5:6d:1b:a4:51:3e:19:ea:0c:9c:9a:da:b7:0c:
                    c1:92:c1:7c:13:ba:98:b8:96:93:1a:c1:01:67:9d:
                    98:31:2e:d8:6a:e1:3e:b1:cc:f2:fc:27:1a:66:cc:
                    61:b5:01:40:8c:ca:24:ad:23:a9:7b:1a:7e:5d:dd:
                    31:93:67:22:86:3b:b1:a1:f8:20:a4:94:6e:3e:c2:
                    2f:43:14:85:f3:78:5e:0d:b7:55:59:02:8f:f9:c7:
                    b9:46:ed:d6:92:5e:45:7e:b3:3c:ca:3e:79:94:b0:
                    48:f3:69:e4:6f:32:d7:98:6f:f7:13:9b:7c:0b:6f:
                    f2:4f:1d:75:98:1d:d6:45:45:e2:ba:08:18:ae:aa:
                    0e:ee:14:da:4e:42:a9:ea:08:c8:3c:a0:99:f1:53:
                    56:20:76:86:7a:07:53:b4:34:fb:2a:60:61:62:60:
                    e2:64:b1:c2:e9:fd:14:89:70:f3:03:4a:80:98:0b:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C2:26:A2:A9:62:47:37:14:FF:FA:AF:13:9A:52:76:59:FE:DC:FB
            X509v3 Authority Key Identifier:
                keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:f1:ea:32:4b:2e:96:92:f2:5e:3c:67:d2:e7:33:67:22:97:
         96:af:7c:40:71:60:af:fe:5e:d0:d5:23:61:03:98:b9:d3:41:
         09:38:e2:9b:c2:ea:4b:27:c5:ff:3d:4d:b2:6b:e1:47:43:b4:
         33:ee:43:a7:ab:5a:17:b6:4d:e8:df:b8:4a:ee:5c:a4:cb:b4:
         52:32:95:9d:f1:9d:81:b0:ea:6f:85:ee:1e:b6:1b:72:ad:9d:
         ba:95:4a:09:70:d1:54:70:fc:c2:bc:9a:75:08:16:d2:b1:6c:
         41:de:72:d9:a3:b0:f2:55:2f:ed:9b:56:8c:43:56:32:0b:a6:
         8e:17:45:49:43:9f:15:1b:58:b8:fe:1f:bc:b9:67:ba:a0:30:
         7a:84:b5:cf:2a:f9:56:63:62:17:0f:e1:70:2f:69:c8:e5:55:
         32:d8:cb:1a:7e:8c:4b:f2:ef:3c:a0:e8:f9:f1:fd:08:74:68:
         ee:7a:66:b2:b4:4a:6d:5a:59:41:5e:88:b1:49:14:12:61:80:
         4b:99:3a:fd:78:c9:78:aa:f4:5d:6e:2d:0b:dc:d6:d6:fc:b3:
         83:7c:7d:89:30:1c:c6:7d:81:01:1a:35:0f:be:ac:36:92:ec:
         5e:c9:00:c4:9b:3e:ca:51:f2:76:7b:74:fc:41:36:26:dd:9a:
         9b:2f:b0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:54 2025 by rpki-client