Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File:                     XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier:          lj6UbJtEeAESGKPThQkDM+8wPtq75AQW1Ai1Z0tpHiI=
Subject key identifier:   EF:38:41:D5:CB:BB:3D:D1:73:13:6C:42:AF:8C:CF:3B:4D:2A:B4:7E
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer:       /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial:       019847ADA8F0890F11C5A68CF80B9C007D86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number:          0C2B
Signing time:             Sat 26 Jul 2025 17:00:20 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:20 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:20 +0000
Files and hashes:         1: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (hash: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=)
                          2: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: rScGDj4MCwk7QpuvYIcqpbuh/CvZNwvxS/6PZ8QgHf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:a8:f0:89:0f:11:c5:a6:8c:f8:0b:9c:00:7d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
        Validity
            Not Before: Jul 26 17:00:20 2025 GMT
            Not After : Jul 27 17:00:20 2025 GMT
        Subject: CN=ef3841d5cbbb3dd173136c42af8ccf3b4d2ab47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:a3:a1:0d:4d:46:62:18:3b:1e:4d:89:4c:
                    9e:39:a9:30:06:8b:58:57:70:de:4e:c9:09:fc:1d:
                    66:fd:e1:10:bf:35:d7:c8:1f:04:a0:c2:26:fa:8f:
                    30:73:05:58:2d:f1:c3:b6:90:43:50:59:be:25:62:
                    1b:fb:64:08:b0:7e:63:c7:0b:8c:fb:c9:79:2e:bf:
                    de:d3:19:1e:70:6e:a0:b3:c1:14:5c:08:6e:67:bc:
                    54:48:3f:38:3a:62:42:06:42:e3:37:57:9b:8a:f2:
                    ee:e1:ee:1f:26:d4:82:68:3b:7a:28:f8:c9:76:e5:
                    c2:ab:31:a9:05:05:e9:c7:7c:52:23:10:82:31:a3:
                    62:e6:9f:3c:81:3e:dc:bc:be:38:53:ed:2c:c6:85:
                    0c:4c:e0:39:90:d0:61:82:e7:68:eb:0b:55:6f:cf:
                    ec:8b:a0:db:e4:f0:a5:0b:33:e0:a1:57:ad:6c:da:
                    36:8d:3e:80:df:6f:e1:84:d5:b5:4f:75:f9:d0:83:
                    2c:f7:ca:6e:da:00:e2:ed:5e:f4:be:16:55:aa:97:
                    ae:a4:1b:a6:3f:d4:e3:9e:43:42:ff:2b:7b:cd:f8:
                    8d:71:4b:5b:67:86:f4:3a:ea:3a:d2:d6:cf:c9:55:
                    cc:63:32:55:b3:97:42:1b:f1:25:71:47:91:b3:0a:
                    b9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:38:41:D5:CB:BB:3D:D1:73:13:6C:42:AF:8C:CF:3B:4D:2A:B4:7E
            X509v3 Authority Key Identifier:
                keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:80:fe:54:c1:88:1d:0d:02:9a:fa:c9:70:cb:0a:b7:b6:26:
         48:ee:5f:74:81:d1:3c:ab:7e:fc:ce:0e:39:e2:65:97:1b:e1:
         c4:5b:85:60:4f:a0:60:6a:f7:2d:58:d3:e2:3e:de:6c:d3:22:
         10:46:0f:b9:a8:e9:41:07:ee:f0:86:e2:8f:90:41:06:ad:ad:
         c2:9e:fe:ab:78:3f:f3:ca:da:29:5d:99:7f:3d:94:66:9f:6b:
         0f:9c:64:fa:33:1f:76:f1:d5:2b:34:a6:0c:e4:3f:08:ce:08:
         b0:de:17:c3:7c:1e:8b:53:62:7f:90:11:30:8a:39:f0:4b:c4:
         2e:d8:31:27:29:82:35:8f:7a:45:a0:01:4d:b5:f3:60:76:80:
         9e:cd:15:12:ec:2e:5a:51:f6:77:38:66:7b:6d:e7:8e:5b:09:
         12:a6:12:52:e3:dc:de:dd:19:8d:88:b1:55:71:28:38:21:61:
         5a:2a:69:55:14:f3:6f:e5:af:7a:f2:ee:c1:89:ba:b1:df:0a:
         b3:42:04:e9:6e:70:f8:16:af:53:c7:a7:04:b4:2f:95:51:48:
         99:d9:a7:93:70:79:92:f4:f3:90:6a:59:1e:c5:17:a1:b0:86:
         58:74:ab:a8:a5:1f:c7:fb:fc:e4:3b:47:e3:db:10:2d:b8:54:
         57:7e:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:35:52 2025 by rpki-client