Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
File:                     xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft (raw, json)
Hash identifier:          Lq53vBwpU7yse1LPMtlJVwM/AuyI8Y71UlMQrVpL7v4=
Subject key identifier:   5B:13:1B:D2:10:D9:C7:15:44:4C:14:63:12:F5:30:75:AE:52:40:CB
Authority key identifier: C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47
Certificate issuer:       /CN=c72e716353ec733ab4b5085308b386d89a74f147
Certificate serial:       0198530D8ACD53A4D7CE1E11B38CF284E31F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
Manifest number:          0E52
Signing time:             Mon 28 Jul 2025 22:00:53 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:53 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:53 +0000
Files and hashes:         1: i4OTVeCSPxgmFusN2MGQeEwphSs.roa (hash: swOQwwO4f3RtKfp1taiB7zCxN/mO3jgsarXonpS2zBQ=)
                          2: xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl (hash: FZ6OG6sIB20Ck3zkWxc0wuv5cVO/QwKv9zP0ablZtm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:8a:cd:53:a4:d7:ce:1e:11:b3:8c:f2:84:e3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c72e716353ec733ab4b5085308b386d89a74f147
        Validity
            Not Before: Jul 28 22:00:53 2025 GMT
            Not After : Jul 29 22:00:53 2025 GMT
        Subject: CN=5b131bd210d9c715444c146312f53075ae5240cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:e0:11:8f:c2:d5:e6:01:d2:48:24:31:b2:
                    fb:10:06:68:9e:28:17:1a:34:34:77:78:37:c5:fb:
                    d6:9c:bb:98:11:57:57:b1:a7:8b:92:a9:d0:5d:53:
                    29:a6:21:43:ce:d2:a3:a3:3f:b5:39:82:ff:78:f8:
                    55:cc:79:43:46:6f:2d:65:40:a7:25:41:94:ea:d5:
                    c2:32:7f:75:53:0e:9e:0c:b7:2a:8f:3a:f7:f2:85:
                    64:a1:cc:80:ba:b8:33:71:6d:41:6c:ef:29:75:ca:
                    3a:82:f2:b8:77:c8:74:b8:cd:b8:bd:af:81:5a:5a:
                    db:93:a2:84:e6:53:7b:9d:a7:96:97:87:ea:7e:4a:
                    12:1b:09:3e:25:c0:8d:3e:2a:cf:3a:72:b6:0e:1a:
                    f4:93:94:db:e8:03:18:0e:f9:48:7e:4c:a2:b6:63:
                    f2:0f:7d:fb:ec:6b:c0:ab:b6:35:b6:32:d4:b0:88:
                    c7:e9:e1:2d:3a:f0:bd:ab:e6:d8:aa:98:a4:02:1c:
                    bc:85:24:be:ff:4b:9a:bf:c1:c6:19:be:9b:cb:43:
                    28:46:df:41:00:38:48:70:0e:58:b3:ce:13:02:8d:
                    83:a4:71:f4:10:e0:89:59:68:bf:f5:c3:50:5d:47:
                    d1:ce:18:1f:3a:2f:1c:aa:0b:03:83:09:dd:4f:40:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:13:1B:D2:10:D9:C7:15:44:4C:14:63:12:F5:30:75:AE:52:40:CB
            X509v3 Authority Key Identifier:
                keyid:C7:2E:71:63:53:EC:73:3A:B4:B5:08:53:08:B3:86:D8:9A:74:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xy5xY1Psczq0tQhTCLOG2Jp08Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c49d34-1b14-4026-b77f-e4def9c697a7/1/xy5xY1Psczq0tQhTCLOG2Jp08Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e8:6c:18:09:09:a0:73:8e:52:cf:aa:1e:45:86:09:1e:d2:
         f7:73:97:81:37:c6:b0:93:72:92:42:c8:20:b9:df:ab:47:87:
         f1:3e:1c:ae:11:03:1f:57:86:af:49:8a:60:40:d9:fe:94:90:
         eb:41:80:5c:23:da:77:c0:7c:95:a3:6d:76:36:08:b2:ec:b0:
         af:60:e9:75:eb:25:82:83:9e:2f:04:f4:64:b0:44:b1:01:fc:
         00:f8:48:ac:19:0b:15:1a:06:ed:75:56:08:04:ac:0e:aa:43:
         71:f7:2b:1a:ae:83:0f:0b:7d:7d:81:98:58:f6:34:ba:0b:f3:
         89:c1:a4:ce:47:d9:95:47:c8:50:1d:ff:50:94:f0:3a:a7:67:
         01:11:58:40:8e:46:39:cb:46:da:66:f3:99:ea:62:fd:f9:4f:
         92:e4:23:36:a6:45:cb:d1:fe:64:85:98:81:a8:60:f3:2b:c5:
         19:d8:10:73:99:4c:0b:26:69:fb:5b:38:26:46:09:0b:b6:85:
         71:b6:c7:df:9d:cc:df:40:64:b4:50:d5:d5:9c:e5:4f:2f:8a:
         1e:e1:72:65:dc:db:a3:fe:e0:28:17:4a:05:df:23:eb:69:62:
         78:fa:b4:8d:ed:3b:ee:3f:04:f3:14:36:60:24:81:5b:9f:01:
         92:42:4a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:46:59 2025 by rpki-client