Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File:                     XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier:          9wTCEgDqdYYrGLH/g7omaU/vra/KmxuJJYsKTmJ1x14=
Subject key identifier:   F1:A8:9B:A9:96:6A:FD:AA:EE:EC:51:5E:DD:21:F8:F7:2D:A3:AE:8D
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer:       /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial:       0196827E2881874B05B8A13691429EC8026F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number:          0AC7
Signing time:             Tue 29 Apr 2025 17:00:28 +0000
Manifest this update:     Tue 29 Apr 2025 17:00:28 +0000
Manifest next update:     Wed 30 Apr 2025 17:00:28 +0000
Files and hashes:         1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: 5ybtNNfY6SXbHmiWwy/i+5PNrdeeFHqIPTAEZMrE4RQ=)
                          2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:7e:28:81:87:4b:05:b8:a1:36:91:42:9e:c8:02:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
        Validity
            Not Before: Apr 29 17:00:28 2025 GMT
            Not After : Apr 30 17:00:28 2025 GMT
        Subject: CN=f1a89ba9966afdaaeeec515edd21f8f72da3ae8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:13:e6:06:bf:4e:21:aa:a4:59:e9:bb:2d:
                    16:5c:bc:9f:7a:47:8f:12:af:e9:df:89:11:a5:fa:
                    3a:a1:ca:e1:3d:ef:50:2c:1b:95:d0:ae:83:f5:c1:
                    66:b5:5b:79:7e:1e:1a:3d:da:66:60:75:bf:f0:9b:
                    31:b0:e9:e9:38:5f:81:78:a7:5b:02:a6:49:12:c1:
                    13:11:35:61:a1:31:2d:da:67:d9:eb:d5:fd:13:40:
                    10:0f:99:76:88:09:b5:79:89:7c:81:50:5f:d8:f2:
                    ed:24:9f:1b:68:91:98:b1:3c:97:08:ce:07:ca:00:
                    c5:d0:32:82:94:df:8c:18:3d:24:2c:ba:43:36:c2:
                    30:d6:86:29:70:e9:93:55:bb:6c:d2:33:bb:f6:fa:
                    20:31:48:fd:28:69:94:c3:cd:06:b4:be:c3:b0:ca:
                    1f:24:47:ea:c4:3b:df:14:56:d1:8d:ae:8f:d1:cc:
                    9f:dc:5e:2c:ec:da:34:2f:16:c7:2e:9f:37:57:6f:
                    04:4d:0b:64:4f:19:a7:bf:e3:c4:72:0a:22:c6:0c:
                    61:f1:26:9e:9e:90:ff:ec:61:08:58:1f:05:4b:c7:
                    d9:af:ab:cc:8c:45:a2:7c:1a:36:98:ac:a1:3c:ba:
                    05:1a:db:38:84:f5:2a:ff:d6:6d:f7:0d:6a:f6:48:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A8:9B:A9:96:6A:FD:AA:EE:EC:51:5E:DD:21:F8:F7:2D:A3:AE:8D
            X509v3 Authority Key Identifier:
                keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:45:70:78:68:6b:af:e1:cd:ed:68:5a:c0:f0:e5:96:15:f6:
         6e:fd:f0:d8:9e:c3:64:28:05:03:b4:1a:01:9c:f2:82:c6:42:
         ad:35:9d:d5:82:a2:af:16:97:cb:99:a4:00:b9:4f:e3:a9:4c:
         ba:f4:4c:9d:5c:8d:80:9e:65:48:54:95:a0:c5:2a:1f:bb:de:
         d0:ad:70:32:b3:30:80:db:13:c1:66:1f:30:0b:a2:c7:f7:d3:
         6b:14:74:e5:03:92:b7:04:6d:bd:96:7e:28:0b:6e:91:54:69:
         46:42:c8:b5:40:23:5b:ee:c4:2c:bf:63:0a:46:1b:ab:3d:5d:
         a6:7b:63:d4:70:b9:45:04:8d:74:e6:29:29:91:9a:c9:58:3c:
         8a:21:ff:a9:44:2e:ec:85:b9:05:ba:76:e3:e8:f1:6c:9e:d3:
         76:24:dc:3c:49:c0:b8:31:83:ab:c2:b0:25:d7:a8:19:46:db:
         15:ff:16:e6:95:ec:89:6c:f1:72:0d:b5:18:c8:5e:a5:b5:56:
         54:76:5e:07:94:a2:73:68:e3:7b:6d:f5:db:3c:3f:e7:13:18:
         5b:60:f9:de:d3:53:52:80:c1:90:8c:a4:14:c8:89:24:16:5b:
         21:85:b1:e5:30:b4:67:5f:89:44:9e:71:50:47:d8:e5:10:d9:
         63:fa:0b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:02:42 2025 by rpki-client