Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          lXIw90Wywx2egeoXJzOBl1slaWQA5BKcpTSRoHQLphQ=
Subject key identifier:   88:2B:2C:CE:72:E2:BC:DB:46:8F:DB:DB:66:08:BA:5A:6A:38:1E:AF
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019688B7362EF13A9A3C89D1A2E4544C7C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          1525
Signing time:             Wed 30 Apr 2025 22:00:30 +0000
Manifest this update:     Wed 30 Apr 2025 22:00:30 +0000
Manifest next update:     Thu 01 May 2025 22:00:30 +0000
Files and hashes:         1: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=)
                          2: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=)
                          3: P19E_mZ30tdEHCoKWD_RBelIVm8.roa (hash: wn50ZQD7mmlSVGQuWKsydCfGSzOAX4sma0GjvM42Xlc=)
                          4: TsuT9Vw01G7XqqTGmTLgG8Nw8uM.roa (hash: ibCOP7I9k1NxSVR0Ud+oed1vqdJZQQbZepYSXJmVuOo=)
                          5: X39HqSEmkJZpBTc8FOnPAPn_1So.roa (hash: GZUzVNpOK2/CRnbKLUrSeXJTVj2csgoYdPM4y5dU/Kw=)
                          6: b_Rjl7l5s2ruXfIZC3d6OBIlvjw.roa (hash: RN1eBvJ7M9cQIHDZtgB/+TlsTuYLflAWSHeZCPPxyMY=)
                          7: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: CWOnHws/QmC+NSQXh9OM46q441RnT94Ea8OZM8sNfuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:b7:36:2e:f1:3a:9a:3c:89:d1:a2:e4:54:4c:7c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Apr 30 22:00:30 2025 GMT
            Not After : May  1 22:00:30 2025 GMT
        Subject: CN=882b2cce72e2bcdb468fdbdb6608ba5a6a381eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:29:97:57:a6:52:03:1c:83:c4:62:6d:c0:
                    2a:04:75:f2:22:07:08:b3:24:4c:97:b7:38:0f:d7:
                    25:de:14:49:71:df:cd:03:c7:1f:5d:17:36:d4:d6:
                    05:e5:6b:98:74:49:e5:7c:c8:ba:09:1a:b5:c3:9b:
                    5f:a1:c3:b6:ba:00:41:22:3f:56:57:6f:98:06:31:
                    fb:78:95:8d:d2:df:bf:38:b1:cd:cb:02:87:c8:8d:
                    3f:a6:9a:ae:ed:d2:aa:a4:01:6f:86:30:80:56:93:
                    67:46:25:59:86:9e:9d:e4:be:1c:4e:b4:aa:5a:df:
                    70:1b:27:c9:fc:e2:77:c3:af:1d:35:6a:3c:00:2d:
                    0c:6c:6a:03:ff:a4:e3:f6:b1:b7:1c:86:5a:8a:c6:
                    1c:f3:0a:51:40:b7:92:60:1c:fd:d4:28:4c:20:5c:
                    9d:a4:dc:d5:97:46:5d:e8:62:91:af:80:56:ac:ca:
                    c4:3c:79:ce:56:f8:76:cc:2e:d8:7c:05:2b:88:1f:
                    fe:0f:2d:69:85:35:54:4e:9c:79:5d:b9:50:fe:a9:
                    b2:dc:ac:21:33:93:28:99:09:24:dc:2b:9f:ef:38:
                    ed:df:ab:39:19:21:cf:62:db:8d:6e:ef:fe:29:ea:
                    1c:15:a9:83:61:7e:25:f9:a2:f7:ad:0a:41:a0:ea:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2B:2C:CE:72:E2:BC:DB:46:8F:DB:DB:66:08:BA:5A:6A:38:1E:AF
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a6:82:17:6a:b7:40:26:97:c8:b0:e9:e2:3d:ef:ee:6f:3a:
         83:ea:24:8e:e1:4e:c1:78:13:4f:01:00:34:02:9c:ec:25:fa:
         c2:a5:76:b8:61:08:dd:17:dd:17:f2:ad:be:ca:7a:db:59:13:
         f4:9f:a7:c1:1a:d6:e2:e4:1e:0a:26:ac:ca:3d:ad:8a:06:4f:
         28:f7:51:a5:ad:76:7f:c4:24:bf:1b:70:fe:88:5e:7a:ba:6c:
         04:11:1c:5b:4e:1b:a9:3a:30:1d:75:3f:6b:72:4d:92:16:b7:
         7c:cf:30:77:02:91:9a:1a:bb:5c:e1:a3:dd:00:85:10:0a:5e:
         1b:01:de:77:f7:9c:3c:d8:51:f5:93:8a:14:47:a8:08:e7:41:
         c4:e2:be:23:54:1a:4b:cd:08:a0:7d:cd:02:cc:01:79:a8:c8:
         cf:c3:64:9b:16:dc:38:8c:0b:33:9a:99:70:ee:41:a5:4e:09:
         fc:37:84:36:25:6e:90:e0:59:7e:df:5f:96:84:2d:14:83:04:
         7d:e6:1e:7e:54:33:1b:ba:29:21:b0:cb:bd:79:28:a7:50:b6:
         97:e3:3e:bd:e7:24:bf:2f:cb:8a:d7:d6:ea:88:40:9d:4c:1e:
         0a:3b:93:2f:ad:cd:2b:2c:39:97:2a:29:88:79:b5:0b:10:19:
         f3:d9:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:39:18 2025 by rpki-client