Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
File:                     xziAeruc4Vt6iSWStvAD8aPha2A.mft (raw, json)
Hash identifier:          k6ASRQiSqv7OqSxE0NBR0pZlT11AEKmPzqi+/y7Jrlc=
Subject key identifier:   48:3B:44:A6:D1:3D:4E:51:27:6B:42:1B:BA:AF:F1:02:13:6B:21:84
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Certificate issuer:       /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial:       01984889296863A3AC8DD71DD30AF3B6A525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
Manifest number:          1515
Signing time:             Sat 26 Jul 2025 21:00:05 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:05 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:05 +0000
Files and hashes:         1: 0D1cZUMTiqausR0yB4Xw8AGD91Y.roa (hash: P0VFSa5grr5g9c7ABjsVrUERemiG8ev+nwOdbvgc3k0=)
                          2: QPusgTTEf8Wg1WVLNKmPSmYCqFU.roa (hash: 06h/pyTSclOFt6N4vyOy5CCJkDE5PrqzeDGGP4Ri+K0=)
                          3: WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa (hash: wNgkpDpelkaLW9cw3ktDA884g92/B+HsSMkXWMNF8/4=)
                          4: evx28IXwOssrh2ERCzJjqUVnHiA.roa (hash: UTeUnE//0NUZdu2DWXKhAAFi5WcYzx4EajufTh1aEMI=)
                          5: xziAeruc4Vt6iSWStvAD8aPha2A.crl (hash: dC1fA1tuSd+8fW+h2edmw6y3dr2iY2l3bbkTWT2D9Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 21:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:29:68:63:a3:ac:8d:d7:1d:d3:0a:f3:b6:a5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
        Validity
            Not Before: Jul 26 21:00:05 2025 GMT
            Not After : Jul 27 21:00:05 2025 GMT
        Subject: CN=483b44a6d13d4e51276b421bbaaff102136b2184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:92:85:1c:5b:2f:fc:93:78:49:b5:a4:f1:45:
                    1b:1d:60:38:30:a2:cb:aa:a7:b7:7e:8c:1a:af:e5:
                    a1:ec:2e:f7:8a:6a:4a:9a:54:59:2b:7f:f0:39:33:
                    56:ca:9b:9a:73:cf:6b:dc:d9:85:33:3a:28:1a:8f:
                    58:ec:c9:75:de:5f:5e:63:ee:05:30:5d:d6:91:c7:
                    4e:ae:58:eb:2d:85:cc:45:98:8f:64:d4:10:74:7d:
                    28:a5:24:90:8f:e5:10:fd:d1:fa:17:28:4d:6d:79:
                    6d:ba:49:6d:85:b3:7b:e1:41:1e:7b:22:5b:68:0a:
                    2a:48:6c:5e:03:f4:e9:33:a1:50:d1:de:b6:20:04:
                    b0:be:2f:0d:cf:8a:b6:d2:56:13:7b:8c:90:b2:6d:
                    27:71:93:2a:47:f3:d4:f6:4d:88:44:c5:8b:00:d3:
                    08:02:ae:53:60:52:c6:20:8b:4f:86:7e:d8:40:54:
                    46:16:64:b0:d8:af:33:9d:93:54:ed:e2:c3:64:22:
                    af:3a:51:d5:1d:46:7a:99:17:3b:6e:05:9c:6f:16:
                    3a:9f:0e:81:4e:80:a8:4c:17:b2:4a:9f:6b:59:5b:
                    26:fd:a4:7c:9c:75:64:aa:25:b8:91:3c:ec:eb:70:
                    28:4e:f8:15:8a:ff:75:e8:ae:9d:0d:8b:51:06:ea:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3B:44:A6:D1:3D:4E:51:27:6B:42:1B:BA:AF:F1:02:13:6B:21:84
            X509v3 Authority Key Identifier:
                keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b5:c3:ba:e6:15:71:da:50:c1:2b:bc:f4:1b:3a:7b:bf:90:
         91:05:1f:23:a2:26:00:4b:11:19:43:6e:af:74:83:1e:11:9f:
         96:0c:b0:c8:d2:2b:be:68:b7:65:1a:54:05:c2:ed:01:23:40:
         87:fd:4e:1d:eb:ec:55:fe:da:e0:68:d8:64:df:df:a6:46:b6:
         49:1b:cd:77:72:a8:21:a4:46:60:e4:00:4e:b5:46:5b:e2:96:
         44:ee:93:eb:e2:25:87:71:58:48:db:85:77:73:b4:8a:fb:c4:
         b8:3b:97:49:3c:07:33:10:83:86:42:21:e0:6d:11:7c:87:56:
         6b:02:2d:ad:1d:74:de:e3:96:50:26:b2:9e:8c:d6:f4:ca:03:
         74:44:5a:31:90:24:5c:79:a0:ec:a5:a5:80:14:da:4b:1e:f7:
         c6:aa:23:f9:59:95:ae:ac:28:f1:6a:a5:9d:79:61:3c:dd:65:
         de:ab:8f:b9:b9:fb:28:59:60:a6:22:48:91:64:fd:6c:97:9c:
         76:5a:2b:0f:03:8f:f8:b3:c2:b8:ea:51:91:96:3d:9d:a1:57:
         4e:49:88:af:f5:c4:4b:2c:77:0f:f6:7a:b3:17:ad:9c:cd:e3:
         f7:9c:01:09:d9:5e:7a:26:29:0d:60:c8:5e:55:56:05:be:1b:
         b7:f9:8b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:49 2025 by rpki-client