Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
File:                     Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft (raw, json)
Hash identifier:          L+hLAozlGsqNofYOt0B1pyqgeURPA/WBov6oLMtJn/I=
Subject key identifier:   46:69:65:BB:AF:1C:DF:84:01:E2:80:B9:63:AB:D8:6C:ED:36:79:FD
Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
Certificate issuer:       /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Certificate serial:       019654C9DC4751CE9C861FDD036AD61C71C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
Manifest number:          1501
Signing time:             Sun 20 Apr 2025 20:00:37 +0000
Manifest this update:     Sun 20 Apr 2025 20:00:37 +0000
Manifest next update:     Mon 21 Apr 2025 20:00:37 +0000
Files and hashes:         1: Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl (hash: PcZTxl5rCf8EKHDvvtCZoDyeaj5HLD9HK+PnfgLAZZQ=)
                          2: fKufob24rjFmDrGHIRnqnRhk_04.roa (hash: v3safCF9eXY/C1Hr4VINM56t3JBmrqwVep5g+aDbQfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:c9:dc:47:51:ce:9c:86:1f:dd:03:6a:d6:1c:71:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
        Validity
            Not Before: Apr 20 20:00:37 2025 GMT
            Not After : Apr 21 20:00:37 2025 GMT
        Subject: CN=466965bbaf1cdf8401e280b963abd86ced3679fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:f2:d4:c9:f0:e0:b1:df:da:80:2c:20:05:
                    75:c5:04:a7:38:a6:b5:5b:65:81:7c:85:39:9a:5b:
                    e2:33:12:80:0c:0c:b1:7d:1d:b7:1d:e5:91:b6:0f:
                    10:09:a8:ce:2a:fc:84:3a:22:e4:82:b3:ad:6f:1b:
                    bf:da:6c:b1:3e:9f:04:0b:fb:b6:51:9d:f9:b6:e0:
                    7e:0f:09:c9:92:8f:87:3d:98:d9:de:86:71:52:58:
                    bf:3e:b1:52:27:b9:9d:2a:73:74:ae:b0:6b:f2:41:
                    1c:bf:9e:86:7d:04:e3:6e:80:81:0b:13:04:5f:c4:
                    11:4d:85:5a:4e:f8:13:0f:bf:70:88:72:ea:d9:f9:
                    08:d1:b4:7d:8a:7d:5e:8b:df:9b:5c:44:45:a3:3b:
                    a0:0d:57:a9:86:dd:3c:6e:b8:a0:6a:df:3d:1f:8a:
                    23:e0:43:36:45:57:7d:dc:4c:55:68:07:8b:03:bc:
                    5d:0e:8f:db:e3:d1:9a:b5:43:c3:eb:b5:a1:3a:31:
                    fe:2e:14:2a:1a:35:a6:3b:da:7d:9e:ec:85:66:c2:
                    56:fc:1b:3f:2d:25:f0:c0:c0:23:42:21:fa:a2:65:
                    33:57:2a:7e:79:6f:db:2b:75:aa:85:bd:8f:02:b0:
                    16:1a:06:1f:ef:15:ab:be:6c:2a:82:22:15:d2:90:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:69:65:BB:AF:1C:DF:84:01:E2:80:B9:63:AB:D8:6C:ED:36:79:FD
            X509v3 Authority Key Identifier:
                keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c9:68:3c:17:f3:65:7d:e8:f6:ff:ea:ea:b1:3e:49:3f:28:
         5b:4a:65:12:d4:2b:f9:52:81:6d:fb:8c:a1:cb:b0:80:0e:96:
         79:65:df:93:50:78:d1:24:59:ad:6f:fa:84:19:dc:1b:cb:d5:
         46:7e:9e:21:52:99:b8:cd:30:80:fd:96:55:d9:1e:d5:58:72:
         21:fa:20:5c:fc:35:8d:ba:15:ab:94:7f:fe:16:ee:59:6d:b1:
         59:3c:9d:f6:92:46:3d:0d:15:35:c8:dc:8f:1d:7c:fd:50:4e:
         c9:fa:c9:01:69:b2:58:11:1c:22:96:c7:ad:d0:4b:7f:be:d3:
         33:b4:69:aa:72:42:8c:85:d7:d8:38:30:96:72:44:2a:66:56:
         7f:6f:48:94:01:b7:1b:0a:4b:cf:60:d8:92:4f:e9:e8:bb:64:
         9f:fb:7b:3c:b3:78:2a:32:84:fa:5e:92:ce:b9:63:ec:67:79:
         5a:1e:27:90:c7:06:19:74:65:e0:d1:20:08:8b:ec:f8:4d:74:
         19:06:53:1e:ea:1c:54:7f:b4:3a:61:1c:15:20:4f:c7:9a:a5:
         eb:10:ae:f5:67:29:ba:40:26:90:08:f9:0a:1d:73:f0:2a:5e:
         62:19:c8:c5:26:74:f0:91:a8:4c:b7:99:69:55:23:77:15:74:
         34:22:c5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:09 2025 by rpki-client