Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File:                     xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier:          Oc/SpZ6kpTnExsOpD0QB7BKt4N6WEuGZc2OkZgK1Blg=
Subject key identifier:   09:27:CE:E9:BC:58:EC:5B:88:25:A2:71:14:10:26:D0:BF:FA:97:E3
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer:       /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial:       01965ACBC66102DDBF834DEF163CDCA352A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number:          03F5
Signing time:             Tue 22 Apr 2025 00:00:26 +0000
Manifest this update:     Tue 22 Apr 2025 00:00:26 +0000
Manifest next update:     Wed 23 Apr 2025 00:00:26 +0000
Files and hashes:         1: dL6NU49k6HbeSIU7QVDGoeBlKvM.roa (hash: D8I1MGPzQuGFKjsxT8JBT5WNbzUdy6FOkd6uHqQy/oo=)
                          2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: WnGedNZh3eE8sRAsm7KPYweda53Jh8eEgTSPbpydyIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5a:cb:c6:61:02:dd:bf:83:4d:ef:16:3c:dc:a3:52:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
        Validity
            Not Before: Apr 22 00:00:26 2025 GMT
            Not After : Apr 23 00:00:26 2025 GMT
        Subject: CN=0927cee9bc58ec5b8825a271141026d0bffa97e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:1c:68:bc:6c:27:42:81:41:65:2d:f3:87:
                    06:a6:c7:bf:5f:18:7c:1f:a3:4e:19:a8:72:88:a5:
                    9c:c7:bd:3c:f9:56:d3:5e:4e:63:46:0b:fc:61:40:
                    8e:1b:cb:23:dc:f8:e7:4c:58:10:7d:a4:2f:5f:71:
                    37:57:50:84:e2:f3:77:9b:24:32:6e:cc:ea:10:78:
                    e9:59:f2:d3:af:42:1e:5b:be:00:d0:cb:e9:a8:b1:
                    dd:d6:72:a0:37:00:dc:5a:57:91:f9:94:0d:c7:5e:
                    1e:3c:9e:ff:22:8b:07:0d:6a:a0:be:fc:2e:94:3f:
                    e3:09:3f:77:28:e2:8a:cc:d5:bf:9a:7f:a1:f0:2e:
                    32:24:b1:0e:2a:28:ff:43:38:49:e4:16:85:b4:56:
                    60:a4:32:a2:d6:29:bb:37:98:17:57:6e:73:5a:57:
                    fa:9a:15:01:c7:61:85:85:42:b5:39:a5:f5:ad:fe:
                    2d:1f:a8:b0:0e:d5:71:ae:1e:a4:6c:88:ea:d5:9c:
                    5e:a4:31:6d:d5:8d:30:2e:1a:c3:b4:d4:39:83:c0:
                    ff:a8:64:83:a4:ea:34:d4:84:2d:6d:2d:15:a7:09:
                    b5:14:ca:be:ce:66:68:a0:59:cc:1d:5e:42:4f:2d:
                    92:40:5e:08:62:c4:e3:af:bf:a7:68:e3:d6:eb:d7:
                    b6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:27:CE:E9:BC:58:EC:5B:88:25:A2:71:14:10:26:D0:BF:FA:97:E3
            X509v3 Authority Key Identifier:
                keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ff:5d:5f:29:4f:ec:35:dd:45:16:e9:13:a5:98:89:77:6e:
         7f:1d:3c:69:28:70:ae:9d:dc:40:5f:1f:6d:d5:2b:46:77:d3:
         e6:6c:af:d3:47:8e:1b:69:fe:a9:72:02:42:79:3d:3a:41:eb:
         5d:36:6b:e2:9e:08:c3:5d:ed:d7:36:ef:5f:1a:e0:cb:ce:8a:
         32:e3:e2:da:7a:ad:a2:67:a9:b8:a5:97:fb:59:db:ce:0f:cb:
         c1:af:19:55:01:19:15:47:66:75:d7:7e:3b:8a:1c:6e:2a:f3:
         96:82:54:68:05:b3:94:51:a2:c1:3e:62:be:fd:c2:1e:4f:b5:
         9b:0d:6b:a6:6c:f9:d4:91:3f:8a:cf:d6:fc:e5:43:3e:d3:f3:
         96:bf:5f:d0:df:8d:58:c8:db:f3:60:e5:33:9d:fe:04:ae:35:
         8b:2e:cf:f1:1e:f6:b6:27:e6:0c:b5:fb:64:98:98:74:4b:55:
         61:61:e3:d8:79:48:9c:8e:94:47:a2:7e:c5:e7:c7:8c:c4:88:
         c1:2b:e5:98:2d:79:62:28:4c:01:9c:c5:ab:8e:8b:53:8e:c3:
         50:59:e9:9f:cf:d9:b1:d6:17:d9:04:5b:57:02:db:1d:01:59:
         ac:b1:f0:77:7a:06:4d:ca:61:05:25:4b:76:41:cd:88:2d:58:
         9e:14:0e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:31 2025 by rpki-client