Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File:                     xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier:          Mp6rlGk0xtfX1WiF1PHGzMgA740RtLni7gnKeBjxVac=
Subject key identifier:   1A:E3:DE:67:25:C7:85:0B:5D:23:6B:57:BD:DF:FA:55:77:0E:87:51
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer:       /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial:       01976A05941C043F4CDA5B97634AFBDFF09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number:          075A
Signing time:             Fri 13 Jun 2025 16:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:39 +0000
Files and hashes:         1: 6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa (hash: USfZBKBFKPqpoZ4/RnsmCkjU4lbPXZn+7Zop6eU1524=)
                          2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: WWsAVTWTyLzPCn1ij018gRjufHW855NfYa43798ODBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:94:1c:04:3f:4c:da:5b:97:63:4a:fb:df:f0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
        Validity
            Not Before: Jun 13 16:00:39 2025 GMT
            Not After : Jun 14 16:00:39 2025 GMT
        Subject: CN=1ae3de6725c7850b5d236b57bddffa55770e8751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:f3:b6:1e:e3:44:4d:1c:ab:d5:02:dd:28:
                    71:3b:a4:33:cb:06:27:e7:43:cb:4f:06:fb:7b:74:
                    2b:ad:4f:43:19:0e:4a:0e:10:99:2b:65:25:4a:96:
                    af:01:81:ab:13:b7:a3:16:34:e3:de:1b:48:06:c6:
                    de:32:93:0c:b2:e3:dc:96:17:2e:2c:32:56:95:d4:
                    ea:50:66:53:b2:95:4f:3e:9f:68:23:8b:e5:c6:9c:
                    05:46:05:8f:bc:d6:ee:10:62:0d:4a:3c:66:48:2e:
                    19:61:42:6a:c7:54:b1:0c:05:3c:01:67:32:0b:f1:
                    4f:6b:1c:b1:47:87:58:62:8d:26:f2:7e:f8:10:eb:
                    f2:4a:29:b5:36:a8:60:49:df:2d:2e:22:6c:3e:fa:
                    c6:9d:ac:7e:0a:cf:0f:d5:56:e1:18:1d:da:25:5e:
                    80:e4:56:18:b4:bd:d2:bc:f3:b4:02:d1:29:be:4f:
                    59:ce:4e:cc:47:f4:78:43:24:98:d5:9e:82:12:6f:
                    47:b5:de:dc:9b:d0:7d:9b:42:f8:9c:82:69:55:2a:
                    1e:39:a2:bd:59:9c:c2:71:27:64:8a:e2:72:e0:10:
                    60:96:d9:f3:de:03:21:74:07:96:36:7f:de:3a:67:
                    12:6f:a0:f2:26:13:10:74:a1:c4:bd:c2:fd:39:ac:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E3:DE:67:25:C7:85:0B:5D:23:6B:57:BD:DF:FA:55:77:0E:87:51
            X509v3 Authority Key Identifier:
                keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a8:5a:85:a5:d0:2a:9d:99:8c:24:79:c5:05:a5:f7:1f:16:
         ed:6b:96:b6:c8:bb:4e:b4:8c:00:ca:e9:d5:f5:57:4a:b1:09:
         cd:21:62:70:97:f1:29:5b:de:19:28:30:b0:19:a1:7b:e0:4a:
         e7:8b:14:68:44:f4:a0:ae:ee:5d:11:97:8a:ae:7f:a6:58:e8:
         81:12:19:1e:0e:e9:8f:6d:08:ae:32:08:40:d9:53:be:e2:27:
         5b:cb:af:64:55:a2:a1:7b:9d:36:c7:4c:8b:21:61:35:c9:00:
         ab:b7:1b:e1:2a:68:33:16:54:29:18:23:30:74:0d:38:f8:4d:
         82:21:63:6b:19:64:f3:0b:9e:0c:12:01:16:32:86:dd:97:92:
         48:0c:87:8f:83:78:73:81:35:fd:b5:c4:bd:b5:02:be:fe:b1:
         3c:de:41:8e:64:53:c7:6d:61:01:8d:ef:56:e0:61:0c:d5:58:
         08:3b:35:e0:d6:77:c2:99:51:3f:4e:bb:b8:b5:f8:2c:18:42:
         84:2a:c6:2a:79:72:7c:53:f8:20:fe:d7:eb:73:ec:05:27:d5:
         b8:d6:e2:c4:66:64:64:12:a8:ad:19:32:63:65:e8:41:61:b9:
         fa:ea:f5:f8:fe:05:75:d8:29:15:17:1f:87:c0:32:8c:69:af:
         b4:70:cf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:17 2025 by rpki-client