Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File:                     xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier:          +REE9LbqnC+jhrEIycBxg6CS8gJ2oWKrWPiDbhSjRJ8=
Subject key identifier:   A9:4C:89:D3:8D:1D:CD:30:20:E6:C1:32:A7:42:D7:E6:82:1C:92:F0
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer:       /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial:       019675D5320F89212428354E2F039955D04D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 06:00:28 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:28 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:28 +0000
Files and hashes:         1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=)
                          2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: 7emL4jjrdxPOH7n1egGYHLEnPWG0Q4eyU+Rl9OVoS+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:32:0f:89:21:24:28:35:4e:2f:03:99:55:d0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
        Validity
            Not Before: Apr 27 06:00:28 2025 GMT
            Not After : Apr 28 06:00:28 2025 GMT
        Subject: CN=a94c89d38d1dcd3020e6c132a742d7e6821c92f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:89:f5:ab:65:1c:db:47:12:96:8b:e0:7b:b2:
                    12:c7:b2:75:d1:89:d9:07:c8:f1:b9:71:18:06:52:
                    a4:a8:51:12:21:bf:26:b0:94:30:80:c6:62:64:13:
                    ef:f1:87:7e:24:d2:0a:c2:59:58:c0:cf:ce:7a:70:
                    e3:47:c2:fc:11:cb:af:8a:7a:4c:23:5e:bb:01:e0:
                    fe:c2:52:8f:74:2f:f1:4c:2a:c4:e0:35:96:5f:8b:
                    ab:db:25:54:df:ca:29:40:d8:a4:49:99:54:cf:42:
                    68:e9:80:36:2b:d5:97:61:7d:97:b8:d4:1e:f4:42:
                    cb:11:e5:4a:f5:62:fd:8b:11:79:91:52:b5:46:52:
                    59:77:57:9f:63:58:11:cc:80:2e:78:27:2f:9d:7a:
                    9f:17:f3:fc:92:68:40:43:7c:d4:f7:a2:0a:c9:55:
                    10:a7:f4:47:54:12:d0:c2:2a:5e:92:ce:61:d4:69:
                    d0:af:b9:77:b7:f3:44:37:35:50:95:aa:97:c9:10:
                    9f:2e:be:e8:83:ff:f0:9b:88:07:36:73:30:30:2b:
                    73:8c:05:b2:7d:dc:d1:75:98:2d:a5:44:ed:c5:52:
                    bd:fb:8d:12:29:3b:24:e9:87:b4:da:8a:9e:9f:c6:
                    9f:cc:c4:a8:2f:1b:1f:e2:95:68:d1:aa:ce:7a:99:
                    28:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4C:89:D3:8D:1D:CD:30:20:E6:C1:32:A7:42:D7:E6:82:1C:92:F0
            X509v3 Authority Key Identifier:
                keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9b:99:de:4e:28:71:06:11:3c:40:07:19:bd:74:ec:86:06:
         28:fb:9e:35:21:04:02:bc:bc:4c:ac:4a:75:c3:29:aa:47:3d:
         93:c8:a9:c9:8d:fc:25:1d:62:c2:e6:e2:25:52:df:ad:ab:82:
         1d:d4:46:7c:d3:00:3b:36:49:a1:88:87:a9:aa:51:f5:4e:97:
         8e:1a:7e:4b:ea:d5:59:bb:20:4a:e7:34:59:3f:c6:dc:48:cc:
         03:09:5e:bb:0c:77:e8:69:5f:15:57:25:d4:88:31:2a:8a:13:
         19:99:de:1a:cf:56:94:87:39:07:fa:c4:94:43:95:62:ab:70:
         99:79:d1:35:8a:c5:82:1b:11:4a:a4:9a:3e:c5:1e:63:c3:69:
         51:4e:da:e8:27:82:8d:0b:5c:37:76:19:53:8b:88:e8:77:80:
         c5:71:8e:46:8e:39:2c:f5:5f:cc:03:08:91:6c:ae:2d:84:46:
         41:2c:f6:dd:53:7f:78:b3:ae:81:27:13:1d:6a:f4:2b:29:7b:
         a6:f6:eb:42:d7:ae:9b:4b:92:5f:b9:36:61:59:00:be:db:66:
         af:98:94:2c:0d:04:09:de:bc:36:10:f5:5e:3d:d8:46:da:b1:
         37:b5:fd:14:39:78:c1:12:5e:a8:4f:ec:33:6a:11:94:d3:e5:
         29:f2:38:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:12 2025 by rpki-client