Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File:                     XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier:          5tazrex34gWBI1IomLBIW7GjRPWKfO62Amf6a+Dvb2g=
Subject key identifier:   50:81:A4:56:3E:D2:F7:81:4C:B8:0C:54:72:B6:55:5E:AA:22:E7:46
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer:       /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial:       0196556E9DF19817D825752420DFE09C30FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number:          045D
Signing time:             Sun 20 Apr 2025 23:00:34 +0000
Manifest this update:     Sun 20 Apr 2025 23:00:34 +0000
Manifest next update:     Mon 21 Apr 2025 23:00:34 +0000
Files and hashes:         1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: lgu1/7wcFbh7W5k2Vle8Wz3v9kfzfSpYD58tuUS0oDQ=)
                          2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:6e:9d:f1:98:17:d8:25:75:24:20:df:e0:9c:30:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
        Validity
            Not Before: Apr 20 23:00:34 2025 GMT
            Not After : Apr 21 23:00:34 2025 GMT
        Subject: CN=5081a4563ed2f7814cb80c5472b6555eaa22e746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:c3:03:d6:8e:68:63:af:39:a8:b4:02:51:
                    5f:0e:ff:92:ca:cb:22:cf:54:c7:5d:a1:08:3b:96:
                    d7:76:58:7d:94:81:31:ca:91:c7:b7:54:25:a8:93:
                    8c:b3:b2:28:d6:bc:25:6d:ea:af:d8:84:48:ed:41:
                    96:c8:be:67:89:b0:60:77:b0:80:7c:6c:9e:68:9a:
                    90:0c:bf:55:bf:c0:db:9f:ca:46:24:d2:e4:9d:69:
                    e2:14:bb:bb:ff:95:3c:40:46:04:5e:4d:26:a9:5b:
                    44:6a:fb:50:26:79:2b:cb:ed:0e:42:c1:b6:a1:fa:
                    5c:15:97:28:77:21:03:dc:d1:59:18:d0:c8:b2:42:
                    84:b2:a5:a0:c2:3d:96:c4:12:15:57:4d:17:63:28:
                    1f:84:07:86:0a:42:8b:5f:ca:b7:ab:a8:a0:fd:88:
                    bf:b5:3f:5c:0d:e3:22:bc:8d:96:91:18:0a:d3:26:
                    84:5c:fe:0e:c5:d9:d4:4d:b8:fd:49:44:e9:6b:c6:
                    6e:10:28:b1:b9:30:63:11:7a:8a:db:ca:52:52:d2:
                    f7:6b:74:84:5e:b2:d3:0d:09:84:07:71:ec:75:22:
                    9e:64:fd:e5:55:d7:e1:be:48:01:86:30:f0:ac:24:
                    c2:6a:ba:3a:65:99:df:91:6e:d0:e7:a3:64:a1:73:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:81:A4:56:3E:D2:F7:81:4C:B8:0C:54:72:B6:55:5E:AA:22:E7:46
            X509v3 Authority Key Identifier:
                keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:f1:56:bc:a8:3a:ac:7d:ba:9c:b3:6c:36:32:19:c0:99:
         8b:9d:89:7e:13:f4:ee:be:df:94:9a:8b:51:48:b0:55:57:67:
         f6:c6:b6:1f:c3:65:b0:b7:fb:dc:28:e0:3a:bc:6e:93:af:ea:
         14:6f:c9:f7:03:45:f0:85:ee:2a:50:3b:d3:29:3c:cd:85:7b:
         19:0f:c6:f9:0a:13:ed:3e:d8:d9:f5:66:25:7c:43:69:e0:39:
         9d:bd:62:6b:23:db:f0:2c:50:f9:de:a7:6c:de:fa:dc:01:b1:
         4f:51:4a:c6:55:e0:ab:af:de:f5:56:89:ce:06:2e:11:dc:15:
         41:b4:1d:1a:6f:82:20:0d:21:ff:b6:f1:6e:cb:f1:64:98:52:
         fd:5b:45:f6:c4:aa:72:93:00:16:08:d3:d6:64:dc:85:cd:81:
         73:96:f7:9f:02:cb:bb:de:3a:6c:54:82:b5:cc:38:91:43:75:
         65:9d:04:39:ac:71:95:4d:14:44:17:45:82:76:1b:31:19:52:
         74:5a:4f:37:41:b3:b2:49:72:0a:0a:0a:e8:85:82:1d:83:6f:
         41:37:a4:28:01:8c:42:b8:47:87:23:31:e3:1d:1b:db:7d:f4:
         ec:5f:14:e3:b9:9f:62:e4:a8:da:90:ed:bf:f0:04:da:c3:aa:
         56:2e:ee:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:28 2025 by rpki-client