Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File:                     xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier:          5dWMCER7uF04PaiHwGjIy8IQRSlmN8Krqp2uoAFH4qY=
Subject key identifier:   D0:02:BD:F7:66:B5:E3:AF:C0:EC:A8:10:61:4A:C7:D5:8D:E2:1D:E3
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer:       /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial:       01976E505F23DB43BDEA42BC7857A643A98B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 12:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 12:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 12:00:50 +0000
Files and hashes:         1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=)
                          2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=)
                          3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=)
                          4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: dlgrhc3ujywC0B8Y0KZ/0DUO1rqwlgtK3zxCEpTPtRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:50:5f:23:db:43:bd:ea:42:bc:78:57:a6:43:a9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
        Validity
            Not Before: Jun 14 12:00:50 2025 GMT
            Not After : Jun 15 12:00:50 2025 GMT
        Subject: CN=d002bdf766b5e3afc0eca810614ac7d58de21de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:f1:9e:88:70:f2:55:f2:05:4e:cc:63:8f:
                    c9:c3:62:19:fa:d6:f0:4b:a0:f5:b8:e7:dd:31:06:
                    2f:54:30:89:2e:a8:9b:4c:0f:8e:7e:24:f3:c2:51:
                    7a:29:f4:e5:0a:91:4b:d0:50:c3:a4:89:d3:18:cb:
                    88:58:8c:00:4a:e9:91:33:82:43:6d:9e:ea:10:29:
                    c3:3c:08:b6:67:3d:eb:cc:ee:5d:ce:1e:52:d2:b0:
                    4b:0d:17:d5:a4:02:81:2e:b0:d9:56:a6:24:82:22:
                    d2:42:57:d5:00:1a:b1:2c:e4:35:e1:58:10:9e:d2:
                    74:d8:d4:16:f5:17:58:7a:3c:01:90:dd:15:1e:c9:
                    11:2c:5b:48:1a:d5:62:e6:b1:c3:d7:86:be:ee:b0:
                    6b:6f:15:87:42:fe:62:12:24:3c:f8:cb:6c:de:85:
                    e0:ff:c7:d7:7f:82:30:4c:a1:17:60:d3:ed:83:6e:
                    e5:37:89:c4:9a:84:88:ad:4e:27:7d:d7:31:7a:db:
                    53:d6:d6:94:6b:5d:5d:5e:23:2f:ef:51:ab:22:e4:
                    14:67:ae:10:03:69:03:7d:46:6e:19:51:96:55:72:
                    d1:37:db:e3:46:3c:47:26:d4:ef:26:bc:bb:d6:3e:
                    6a:36:8e:cf:9b:39:19:06:41:4b:fe:68:e5:f3:a5:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:02:BD:F7:66:B5:E3:AF:C0:EC:A8:10:61:4A:C7:D5:8D:E2:1D:E3
            X509v3 Authority Key Identifier:
                keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4c:15:e7:63:5a:02:66:8d:f0:cc:bb:af:9e:4f:a7:99:aa:
         8b:96:fb:8a:75:a6:2b:13:62:48:93:e3:cf:f1:2b:5a:98:65:
         90:00:78:00:74:f0:25:79:22:cb:2e:a2:4c:a0:7b:8b:60:b8:
         9c:ec:89:72:81:0a:e6:cf:2f:fd:0b:62:4d:34:76:2d:fe:b6:
         d4:d3:7f:34:93:05:a9:10:33:cd:b5:cb:17:db:27:39:db:1a:
         32:e1:ee:05:0d:70:69:1d:92:6a:1f:fc:b2:5a:e6:e9:11:04:
         ba:1f:a1:45:3a:d7:4b:f9:c7:b3:33:df:6a:94:70:72:c8:88:
         55:c7:31:ec:00:26:fc:90:8b:d2:53:92:d8:77:3a:d8:cc:62:
         af:e8:4f:b7:be:a6:3c:ba:49:b7:b4:62:ca:92:31:80:57:73:
         66:28:f7:d6:ba:ae:3c:d8:58:a6:aa:84:3a:90:0d:2c:ec:1e:
         2f:b7:27:68:7a:f8:49:27:fe:8c:f1:75:f5:b6:30:6d:13:88:
         c2:8f:0e:b7:f4:51:f5:7b:f4:c2:8f:89:74:b5:d7:af:01:0d:
         d9:04:b0:05:26:98:c6:8d:c3:dd:79:c4:05:be:4a:4a:4a:f5:
         6a:a5:f5:ff:d2:5f:ea:25:ea:ea:a6:df:df:1a:df:c6:94:dd:
         4e:08:de:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:37:03 2025 by rpki-client