Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
File:                     XzHZebcQ7eIGiCOIGqYRrROvVFk.mft (raw, json)
Hash identifier:          uULo56HXAaPRUHEe5mx5x98mwPfOHYF+cGv/W229cHs=
Subject key identifier:   5C:09:E5:3D:FF:F3:0A:A7:7F:76:FC:57:E7:9F:1B:B9:49:19:8D:DE
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Certificate issuer:       /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial:       01976F2BAE5FC08127666564933583014DB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
Manifest number:          0B45
Signing time:             Sat 14 Jun 2025 16:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:23 +0000
Files and hashes:         1: 7VePb56Lb2mDp_DoHqAJOVOs_T8.roa (hash: V7IpcMoqQADg7SX3r725vYH2jPknDmi+ikdfBjQyP5c=)
                          2: XzHZebcQ7eIGiCOIGqYRrROvVFk.crl (hash: mwkKci3it7i5sgJ8ihgZGYSzhspYJUtNVq494iTCDwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:ae:5f:c0:81:27:66:65:64:93:35:83:01:4d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
        Validity
            Not Before: Jun 14 16:00:23 2025 GMT
            Not After : Jun 15 16:00:23 2025 GMT
        Subject: CN=5c09e53dfff30aa77f76fc57e79f1bb949198dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:41:00:ad:c6:b6:c0:77:1f:82:0a:5e:17:4c:
                    72:ce:24:6d:5d:fa:eb:1b:4e:f3:9f:0e:53:56:d1:
                    ac:0e:b5:77:34:dd:6a:33:c2:d7:c6:92:65:bd:d5:
                    08:4b:80:5b:38:fe:86:b2:4c:1d:8b:31:48:36:e1:
                    49:01:46:5f:48:7c:d0:5a:9b:28:62:90:2b:f1:9f:
                    3b:f2:85:6d:ec:82:80:f5:f0:54:aa:d3:70:1e:cb:
                    ca:f8:e4:04:e9:a7:2a:75:6f:39:53:93:d4:46:39:
                    37:f3:6d:3f:c7:42:0d:6a:5f:5d:49:07:72:ad:b1:
                    89:75:21:a9:ee:b3:8a:f2:18:b9:28:c7:81:48:23:
                    10:3a:de:2a:69:73:9d:b7:5b:df:70:6a:a1:9b:aa:
                    fe:bd:92:2e:3e:e3:ad:ff:59:06:a4:bf:9c:a0:5a:
                    90:14:7c:47:06:71:2f:d9:2d:c6:2d:b6:6c:10:ce:
                    44:f4:d9:36:cb:e7:15:eb:f9:93:2f:8a:af:e4:f5:
                    62:7c:ef:1e:55:87:6c:59:a5:a4:a2:0d:e9:a0:94:
                    ff:0d:26:20:35:8a:0f:f2:6a:6f:e8:88:58:52:c7:
                    e8:a4:d8:ba:f2:66:98:77:db:ca:34:41:75:1a:ce:
                    2d:0a:8e:4f:7b:f0:99:98:f7:91:23:63:34:0c:b5:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:09:E5:3D:FF:F3:0A:A7:7F:76:FC:57:E7:9F:1B:B9:49:19:8D:DE
            X509v3 Authority Key Identifier:
                keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f8:45:28:91:e8:29:f9:dd:97:66:60:8d:8f:72:71:e5:e5:
         f6:e2:8a:06:55:73:46:53:01:11:42:14:ec:40:77:be:88:08:
         aa:b5:5c:76:42:19:c6:61:c2:8f:5b:55:f4:66:b8:6e:c2:9b:
         6e:19:b4:c3:5f:fe:82:85:d3:93:26:3a:bb:73:7e:bf:eb:2c:
         88:2b:d5:3d:1e:c1:fd:01:ee:28:9a:75:d0:61:49:5f:72:49:
         0c:7a:ab:16:e7:2c:c3:4a:84:a2:d7:3f:10:04:35:04:e0:63:
         c2:31:8c:4e:fb:27:14:63:42:99:ad:ef:ed:36:9e:38:61:97:
         ba:42:a2:ea:3e:d5:f3:a5:d2:72:00:b8:06:f7:94:a7:9f:79:
         e2:ad:96:1d:38:46:66:3d:a8:ee:87:b9:c7:85:24:be:ec:0f:
         6d:54:2c:f3:5f:0a:ad:2a:35:6c:b3:ba:a5:a1:35:b2:28:eb:
         15:50:20:48:2e:f9:3d:cf:9e:76:e1:14:0f:17:76:51:c6:39:
         d5:a4:27:87:02:3d:ec:c8:6b:96:d3:27:c9:67:f9:3f:86:51:
         f5:48:60:c2:45:d2:99:b5:49:b5:0b:0d:eb:08:47:1a:b3:58:
         81:57:3b:ba:62:d5:98:3e:e6:bb:0d:14:93:cc:3e:03:c0:ef:
         34:7e:19:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:07:53 2025 by rpki-client