Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
File:                     Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json)
Hash identifier:          ddnR6wRwZHmNTjzgyCkGQkWNu53ONF1PvLwVb6VKcNo=
Subject key identifier:   90:76:B3:09:CD:5C:D8:86:F0:41:76:C0:EA:1F:6B:73:D3:40:10:FF
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Certificate issuer:       /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial:       01977A8B5C3585737C1D4B808D55D43BE742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
Manifest number:          0E53
Signing time:             Mon 16 Jun 2025 21:00:42 +0000
Manifest this update:     Mon 16 Jun 2025 21:00:42 +0000
Manifest next update:     Tue 17 Jun 2025 21:00:42 +0000
Files and hashes:         1: 66N-Djv17QzbVu829sfhkH4hbUI.roa (hash: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=)
                          2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: 6231QZT4sqIcawnPgRxIj4faQUw4/mDNG4jkLBdWZBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:8b:5c:35:85:73:7c:1d:4b:80:8d:55:d4:3b:e7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
        Validity
            Not Before: Jun 16 21:00:42 2025 GMT
            Not After : Jun 17 21:00:42 2025 GMT
        Subject: CN=9076b309cd5cd886f04176c0ea1f6b73d34010ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:a2:71:c8:65:85:1b:18:c6:ae:69:48:f0:
                    86:53:b9:4a:fc:de:31:e4:a9:a7:e4:b6:1e:d5:e1:
                    a1:4e:91:96:56:42:51:0e:65:bf:2f:46:bc:41:44:
                    41:41:de:b8:86:ae:b5:d6:84:f9:7c:1b:d4:82:60:
                    e5:7f:03:d0:f4:48:d4:01:7a:86:e3:eb:46:ca:b6:
                    64:20:93:7f:dd:cc:c7:e0:56:67:47:dd:91:e7:68:
                    7e:27:9b:b1:f1:fa:4e:ef:d7:cd:53:12:bb:5a:26:
                    88:ea:ad:48:a7:fe:82:20:7b:c8:86:23:e3:cb:79:
                    57:7b:b4:e0:4d:4d:a6:12:4f:a1:c8:fb:2d:68:bb:
                    6a:64:41:f8:ed:c1:20:30:79:d0:6b:7e:e9:da:33:
                    8f:a1:84:bc:14:06:e9:a0:6f:7a:e8:49:f9:c4:21:
                    6c:dc:e4:43:56:63:fd:d4:0e:fa:76:74:11:b2:fd:
                    2a:ae:23:ac:96:a8:1a:b7:fe:a9:bd:e2:26:9c:f2:
                    a0:62:a4:c5:66:9a:8f:1e:65:52:fc:87:90:91:15:
                    7d:3a:4a:b3:59:b4:7d:4e:ce:b8:1c:9d:9a:a2:13:
                    a3:2c:a1:4f:fa:cf:03:44:4c:bb:93:ee:1e:63:2e:
                    cc:81:66:e7:b7:f2:2b:3b:ec:4e:f9:61:60:4a:00:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:76:B3:09:CD:5C:D8:86:F0:41:76:C0:EA:1F:6B:73:D3:40:10:FF
            X509v3 Authority Key Identifier:
                keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:1f:aa:45:24:24:6d:f6:fa:91:5e:75:9e:a2:92:4b:c4:
         4b:1b:dc:34:48:db:d8:b8:94:20:57:22:a7:c5:9d:8b:f3:ac:
         2d:9d:49:29:df:97:3b:62:1f:fe:cc:b1:a7:d5:98:b3:d1:73:
         38:60:dc:bc:1e:5c:37:0d:38:46:8d:73:74:b1:64:34:1a:c3:
         0e:d9:03:c2:f2:c2:f3:09:8e:0f:23:ce:24:0c:90:6a:81:b6:
         91:96:67:5f:46:3a:f3:74:6a:5d:d9:69:9b:88:1c:63:59:0f:
         da:78:c3:c2:70:c2:1e:f6:7c:4f:96:14:fb:51:3f:0d:dc:98:
         d0:18:6a:1b:3a:67:15:e5:58:23:15:89:2e:8b:18:f4:08:83:
         39:d7:21:f5:58:ce:ff:61:cb:ff:b8:97:5e:ca:7a:33:96:27:
         c3:39:a7:35:19:23:69:a9:e2:38:99:1f:06:59:50:b5:a2:4a:
         8c:77:be:d8:54:08:c9:32:03:09:90:82:4d:6a:19:0c:30:1a:
         9e:17:98:d3:bd:33:60:24:83:f5:32:bb:c4:4b:28:b2:21:88:
         e6:cf:b2:ad:24:f9:70:b0:9c:45:0d:bb:d6:8b:30:74:4b:05:
         7f:3b:e7:cc:db:56:ce:b3:67:e5:93:d0:12:b7:e3:49:35:6c:
         91:7c:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:36:59 2025 by rpki-client