Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File:                     XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier:          beojczTqZNvdZ6v5fY874EI8hp8cRyT1R+3nYer/9yY=
Subject key identifier:   49:52:32:23:69:15:38:3B:C4:5B:B9:F1:C4:3B:F4:3E:74:58:80:01
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer:       /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial:       019874BE64D93556CC1936205E9936874675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 11:01:30 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:30 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:30 +0000
Files and hashes:         1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: Amukr9fRsI5o6iEMQfwiE9TFmrrW6707HFcTezJTjZM=)
                          2: jKWW8lM-7qWMZl51o-CojPJFkjs.roa (hash: qo4ws59Zs5PpOs3LLh3sz4ISOqKQfl11xb7AgRxxDws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:64:d9:35:56:cc:19:36:20:5e:99:36:87:46:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
        Validity
            Not Before: Aug  4 11:01:30 2025 GMT
            Not After : Aug  5 11:01:30 2025 GMT
        Subject: CN=495232236915383bc45bb9f1c43bf43e74588001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:fc:82:8b:19:b6:15:c1:dd:bd:66:0a:d8:
                    40:b7:06:b8:43:00:da:34:29:be:bd:a8:db:2d:c5:
                    c2:c1:bb:48:cc:e6:0b:ca:8f:40:a6:13:96:58:85:
                    cb:cb:39:3a:4e:14:67:89:d1:4f:a9:ea:e3:ea:76:
                    90:33:16:ed:a4:90:9d:4a:32:69:86:8e:6e:62:f7:
                    8b:96:e3:77:a2:03:19:93:a6:4f:e7:d1:9c:ec:33:
                    5d:1b:f3:b9:14:72:59:d7:bc:6b:8d:0d:ca:d2:32:
                    83:7b:f1:01:f5:66:06:98:13:fc:5b:9a:b7:b3:14:
                    50:f9:75:a4:fd:82:d4:57:22:a8:e3:e4:a3:51:16:
                    87:1c:d3:cb:bc:00:50:5f:61:cd:64:a0:30:89:38:
                    72:0f:15:34:30:d1:74:63:bc:88:61:0d:ae:1e:b1:
                    5f:12:79:57:14:ba:5d:08:8a:1c:45:14:d0:57:b2:
                    2e:55:21:b2:25:de:40:39:d6:0a:84:7b:43:6d:fd:
                    df:a9:c0:ae:12:f2:6e:b4:09:17:a7:38:e9:ae:42:
                    2a:13:68:e9:00:57:7b:d4:78:0c:82:e3:32:31:2b:
                    8c:92:d6:a5:e8:ed:38:6a:d3:55:77:0b:5c:fe:7a:
                    ea:54:04:ce:24:b0:ab:43:cc:60:3a:86:dc:f0:c2:
                    eb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:52:32:23:69:15:38:3B:C4:5B:B9:F1:C4:3B:F4:3E:74:58:80:01
            X509v3 Authority Key Identifier:
                keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:5b:20:72:f7:67:cb:0a:10:9a:d7:88:93:e3:ba:1d:3b:5c:
         b1:02:71:44:2f:ff:15:c0:3f:c3:8a:5c:de:e0:a7:6e:9e:e5:
         fe:ae:89:22:67:c5:a6:8a:3f:af:cf:1c:d8:10:f5:d4:9b:bc:
         11:66:3b:ec:c5:9e:7c:0e:46:09:47:05:3d:9d:44:ec:bc:e0:
         9a:4c:3e:a5:de:72:3b:9a:5a:49:14:2b:7c:a9:0f:69:4f:22:
         b5:1c:54:6c:ac:96:b7:78:c8:1b:3c:48:f4:10:9f:ce:bd:4b:
         42:0f:bb:7e:de:90:cd:2f:97:2b:31:cd:22:3c:1c:69:92:ad:
         ea:ff:c7:66:83:50:24:02:2c:69:df:60:81:2e:f9:3d:ac:61:
         1f:15:e8:04:3f:06:69:67:e4:01:6d:7f:7c:90:47:b8:b7:8f:
         88:01:9c:aa:e7:f8:fc:79:e4:d1:06:7f:dc:c3:5d:b8:43:bf:
         1f:43:0b:46:73:59:e7:38:e8:28:57:0f:cf:9f:1f:63:d6:68:
         a3:99:39:f1:5c:ae:5d:b3:a4:4e:5d:46:78:bf:d1:88:af:06:
         6d:67:0c:18:74:dc:eb:4f:f9:ac:52:ff:7e:13:8b:72:d3:40:
         bd:84:cc:ba:74:5f:87:ac:d3:7b:03:4a:c2:66:09:fc:24:38:
         14:5e:a9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:11:01 2025 by rpki-client