Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File:                     XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier:          M6OjExry9MlkG9K6geYUElMNGpFNyLNk1lwB8nXWWZc=
Subject key identifier:   E9:C7:5B:1B:83:95:29:0B:95:99:2E:2F:F9:6F:B9:C6:A0:17:25:17
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer:       /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial:       0197488D2ABA6A42184F2CDC4C20FDF9BFDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number:          0938
Signing time:             Sat 07 Jun 2025 04:01:40 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:40 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:40 +0000
Files and hashes:         1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: Sy9uMrK+pd06QSIkGUTmu7mlvdNmoOd6eDdtxDgVIQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:2a:ba:6a:42:18:4f:2c:dc:4c:20:fd:f9:bf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
        Validity
            Not Before: Jun  7 04:01:40 2025 GMT
            Not After : Jun  8 04:01:40 2025 GMT
        Subject: CN=e9c75b1b8395290b95992e2ff96fb9c6a0172517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:c5:7e:de:f1:a3:c0:9b:e8:45:39:a9:5b:
                    ae:37:f8:34:cf:f5:9f:65:69:2d:ba:51:8f:59:b3:
                    04:62:d3:ec:4b:45:2c:a1:a0:2d:28:13:4c:da:f0:
                    a4:ab:f7:b3:e3:7b:fb:3d:44:7b:8d:9b:16:bd:d8:
                    b3:11:93:7f:b2:86:b2:f2:d3:3b:83:ef:d4:95:64:
                    d1:c2:dc:0b:eb:de:c2:1d:b2:3e:b6:aa:60:8a:a2:
                    52:8a:75:34:3c:7f:4e:26:4c:16:2b:04:d6:af:6e:
                    c7:0a:d2:b1:31:88:32:f1:cc:7a:2d:f4:96:29:a4:
                    80:82:80:4e:73:3e:44:3f:31:5f:21:db:8b:94:94:
                    3b:b9:87:75:ca:50:8b:c5:8a:e5:c0:eb:1d:31:e1:
                    92:d5:8d:7d:bb:5a:16:26:46:87:06:55:db:cd:c3:
                    b5:16:00:ca:82:d4:73:08:76:78:ff:76:d2:9c:ea:
                    d9:2a:98:5e:b9:9b:54:52:95:b8:8b:bf:34:7a:6b:
                    3d:ac:87:19:c6:c6:17:2e:fe:40:c2:fa:40:5a:41:
                    df:a6:61:99:0f:37:fb:47:ca:3e:be:2a:56:da:c4:
                    0d:7f:ca:18:9a:ec:61:d1:aa:79:a1:1d:28:92:1a:
                    ff:a6:c0:19:d6:dd:5c:a7:0d:3e:f9:44:6c:04:5e:
                    2e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C7:5B:1B:83:95:29:0B:95:99:2E:2F:F9:6F:B9:C6:A0:17:25:17
            X509v3 Authority Key Identifier:
                keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:85:bc:ef:df:c0:d1:62:2c:63:60:b8:70:43:56:32:d1:
         51:f8:5b:c1:c1:6b:56:44:55:28:b8:d9:b9:ec:1a:a0:ae:54:
         a8:26:1e:d8:7c:f7:5e:56:2f:8f:04:7a:48:90:52:f0:81:2f:
         26:f0:b5:0f:0e:a2:07:84:bb:63:7b:db:d8:d4:31:88:6c:e2:
         c8:04:e2:3f:08:12:87:bb:0d:aa:ce:91:7d:ba:21:6b:7d:3a:
         f1:3b:21:c6:3c:59:e4:11:b1:ca:cc:6a:e8:c9:43:8c:ba:3d:
         ea:66:61:73:c1:a9:74:4b:56:0a:8c:e4:7b:aa:8e:de:74:68:
         2c:12:c6:37:aa:2a:82:90:a7:e7:f6:99:bd:4c:f8:69:8a:ed:
         78:2e:d2:6c:a9:28:33:21:56:fc:2f:9e:97:4f:b2:ec:ee:44:
         d9:dd:b5:4b:f7:f8:bf:2d:3c:c4:36:b6:ea:5d:74:3f:8e:05:
         b7:32:da:0f:bf:4c:0e:18:34:c8:a0:07:ff:3e:63:08:17:87:
         8f:01:c9:91:98:14:cf:65:16:ea:73:b4:35:ba:93:d7:be:61:
         6b:a2:49:27:64:f7:38:f4:7d:4b:b3:9d:a6:a1:37:d6:4f:de:
         35:d9:6e:13:63:9a:69:04:fb:bf:85:e9:81:36:45:61:d0:16:
         f3:a6:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:28:40 2025 by rpki-client