Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File:                     xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier:          45BLWln/3OYEvVc05eoJM/Vg+Ops4u4mwfjClPdVGuU=
Subject key identifier:   A7:1F:5C:AB:E4:72:BD:F3:AD:03:C8:34:94:A2:A0:76:33:F0:C0:39
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer:       /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial:       019768F296D27A00F01E8E93354C6063FC77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number:          138E
Signing time:             Fri 13 Jun 2025 11:00:18 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:18 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:18 +0000
Files and hashes:         1: ueBb6XAUF6o0wgWHrBMyAvCjDcw.roa (hash: FG2GqOv/aixTR0aGnuCtGnWbZFyWEpFgUNZYVCVmlOI=)
                          2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: DLab6yLi1buJcliINs1Byxp+LpVtTeNrX3+6kUFEs4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:96:d2:7a:00:f0:1e:8e:93:35:4c:60:63:fc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
        Validity
            Not Before: Jun 13 11:00:18 2025 GMT
            Not After : Jun 14 11:00:18 2025 GMT
        Subject: CN=a71f5cabe472bdf3ad03c83494a2a07633f0c039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:c3:e8:e7:b2:97:b4:bd:7a:53:94:73:33:
                    26:5c:a2:74:43:a5:b6:02:52:22:ff:c7:03:b7:1b:
                    23:0e:2f:15:d3:31:5d:c2:28:72:5d:1b:0e:60:bf:
                    10:b1:8a:91:bc:4d:80:d5:07:6b:e9:97:05:42:b2:
                    08:62:35:61:f8:db:6d:ed:eb:5b:e6:8d:3c:51:18:
                    4e:e0:33:76:c5:36:cc:af:10:8b:b6:cd:d5:13:c0:
                    d4:e8:9a:1b:3b:a0:27:15:a1:19:ea:09:01:92:46:
                    32:d3:24:b5:69:8b:fa:c0:8e:ec:91:69:3d:e6:27:
                    33:e2:cd:fa:1c:d2:e0:19:d6:d1:dc:61:f3:31:df:
                    82:7a:7b:88:9c:27:98:23:a8:db:e0:21:3c:e4:9b:
                    9c:19:e2:2e:3d:b0:46:34:25:62:31:16:64:a8:9e:
                    e2:ab:ef:bc:56:76:d0:11:8f:2c:94:a0:3b:31:70:
                    1a:c2:cb:a9:11:91:df:3c:36:47:2a:5b:ec:8a:e5:
                    b6:65:b1:f0:d4:1b:75:83:c9:94:f6:db:7e:a9:39:
                    59:5f:c6:d2:25:54:cd:b6:08:f7:53:61:05:40:8b:
                    27:c1:73:65:ab:f0:06:82:7d:ba:47:a6:a9:cc:fe:
                    29:40:69:0d:f5:f0:cd:fc:37:86:4d:87:23:64:62:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:5C:AB:E4:72:BD:F3:AD:03:C8:34:94:A2:A0:76:33:F0:C0:39
            X509v3 Authority Key Identifier:
                keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c1:3a:5d:14:2c:7d:49:a4:a0:aa:03:1c:f0:89:3d:d5:6f:
         72:a5:68:9a:4c:d7:aa:55:78:56:5f:2c:ae:78:c8:03:c0:7b:
         ba:c0:1a:71:22:ee:cd:f4:60:52:b5:1b:22:61:bf:1e:39:02:
         a9:bd:95:1d:7d:ab:cf:db:9d:db:2c:b6:68:c3:c8:4f:03:c1:
         fe:69:66:2a:9b:10:92:54:f0:cd:72:37:b5:03:8f:63:a7:24:
         2a:65:20:10:a1:9d:fe:2f:24:a8:4b:a8:0e:ba:3c:13:fe:f4:
         40:da:9c:43:cb:2b:b1:1a:1b:6d:13:d5:e7:34:e7:e8:fb:3d:
         ee:d6:2d:b1:fa:a9:43:f2:72:70:be:3d:af:bc:b9:ad:fe:ba:
         cc:48:85:83:90:4f:f4:51:86:5a:b9:64:30:d1:ef:ac:ca:24:
         f6:1b:32:14:5d:d1:c1:16:fc:03:c4:f7:59:0c:9f:08:92:0f:
         15:03:4a:b8:2a:d3:92:20:48:7e:d0:aa:0c:24:e1:24:80:d0:
         d3:8b:6a:2a:16:82:d5:08:18:b5:e4:cc:f9:b1:30:19:e9:50:
         d5:0f:b3:80:e0:f3:44:a9:c8:49:5c:91:42:87:03:e0:be:36:
         a2:41:65:d5:df:d5:ce:8d:e9:48:18:49:82:aa:c4:ee:3d:e3:
         71:c2:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:00 2025 by rpki-client