Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File:                     XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier:          S3LKbYOWWoIyxdHspVj354/xhOQpLt9jsBBT1ObolXc=
Subject key identifier:   01:3F:2E:CE:5A:98:ED:92:C5:94:FB:B5:7E:82:BE:07:8F:0C:06:85
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer:       /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial:       019693728278C416D85D9B214DE4F4021674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number:          141D
Signing time:             Sat 03 May 2025 00:01:17 +0000
Manifest this update:     Sat 03 May 2025 00:01:17 +0000
Manifest next update:     Sun 04 May 2025 00:01:17 +0000
Files and hashes:         1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: qbnsWuFMfyx5wSwfqk701cML3x2SM4WiPjTwaNQNWl8=)
                          2: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (hash: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:93:72:82:78:c4:16:d8:5d:9b:21:4d:e4:f4:02:16:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
        Validity
            Not Before: May  3 00:01:17 2025 GMT
            Not After : May  4 00:01:17 2025 GMT
        Subject: CN=013f2ece5a98ed92c594fbb57e82be078f0c0685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2e:82:68:17:c7:62:c8:25:d5:b5:75:10:20:
                    ff:f7:fd:20:76:57:c0:f8:1d:4d:79:ea:52:83:8c:
                    6d:3e:df:ce:29:6b:aa:4d:92:10:a2:56:b2:e6:3f:
                    f4:23:54:c4:f6:e1:38:91:5a:f0:1d:14:41:18:8c:
                    98:7b:e0:29:f3:5b:e6:5e:94:f2:d7:aa:a2:0a:11:
                    ec:01:14:6e:aa:16:55:98:d1:6d:d3:a9:2c:36:5a:
                    75:cd:b8:0a:cd:9f:85:ce:f0:c8:97:18:71:9c:a6:
                    52:fe:f9:f1:62:6f:40:1a:d6:64:e3:82:21:76:5d:
                    68:bb:4d:77:95:e2:36:4a:0d:d1:1a:ca:34:ba:3b:
                    ba:fb:a7:f2:81:2d:96:8b:2d:a5:cb:06:6d:2f:15:
                    1f:35:fc:09:53:5b:71:34:d0:d0:4e:aa:d2:cc:b5:
                    69:54:a1:13:75:5c:b1:f0:31:f8:71:03:bb:f1:f1:
                    5d:83:29:71:ac:54:4d:b6:41:7c:de:77:95:71:99:
                    5b:b4:ae:9c:8d:a1:89:f2:5b:f6:4d:d7:63:82:18:
                    41:10:43:36:18:29:48:f9:64:5b:f0:7f:27:76:54:
                    4f:67:58:19:56:d8:1e:03:8d:51:3b:7d:8e:56:e9:
                    90:41:19:74:e9:c6:09:39:46:2f:84:3d:8f:fe:06:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3F:2E:CE:5A:98:ED:92:C5:94:FB:B5:7E:82:BE:07:8F:0C:06:85
            X509v3 Authority Key Identifier:
                keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5c:86:94:ee:a3:c4:9e:47:81:ec:69:4c:ac:5b:8b:79:2e:
         ba:56:6c:14:ab:fb:57:be:13:f3:03:60:80:56:7a:1f:6d:f2:
         ec:e4:5e:48:14:ea:6f:16:1e:f5:9f:56:d3:72:bf:d0:e1:7a:
         2e:f0:9c:13:9e:62:75:ac:2b:45:9f:01:7e:39:c3:d3:50:d0:
         6c:3a:98:47:eb:d3:f1:e6:ed:b1:d9:7e:28:c7:d7:79:01:33:
         c3:29:43:55:28:b6:ed:33:2e:ed:83:16:38:ab:95:80:b5:4b:
         1d:12:6b:e5:58:8d:1e:ae:b6:3a:0b:d6:9b:5a:4d:ec:ee:68:
         8d:99:a0:34:c9:1b:03:91:ac:d2:7e:b1:75:a4:9a:59:07:d3:
         0d:af:62:ca:77:ae:b1:3a:4c:1a:ce:d7:47:b2:1e:46:56:0b:
         f6:8f:14:78:fd:91:bc:87:ec:83:1c:75:1f:c7:1f:fe:b9:d7:
         b6:c6:02:4d:12:60:b9:03:35:97:64:ac:0f:16:f1:c4:3b:06:
         1d:31:81:b0:17:ef:4a:0f:a3:76:e8:69:9e:24:39:4c:62:c9:
         9c:0e:7b:26:8d:87:23:9f:b6:a8:ab:43:e7:eb:2a:66:aa:55:
         a7:6b:24:98:7e:28:2e:5c:b8:d0:9c:32:27:bf:1f:a9:aa:33:
         c9:69:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:16:26 2025 by rpki-client