Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File:                     XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier:          jRA5VtDXfE2XP8Zf0jrhFFA5ULfb5gjqj+VCMYtTsAI=
Subject key identifier:   9A:D8:F6:7C:7C:34:C4:8D:77:34:24:8B:E6:9E:9B:6F:D0:7D:EE:0D
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer:       /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial:       0197488C4562B5B696331F3AF7410FCE638E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number:          119B
Signing time:             Sat 07 Jun 2025 04:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:41 +0000
Files and hashes:         1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: lfMcKoVCsDY68XAnwpo0q3/+bah6nuaDqBiJ39UrnD0=)
                          2: lvOtY--5ta_q9u7-uCq8vanMR-o.roa (hash: IsaauvQSGX/KNFnK0CxHU+He7cfzl6r9rUGogp/cJBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:45:62:b5:b6:96:33:1f:3a:f7:41:0f:ce:63:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
        Validity
            Not Before: Jun  7 04:00:41 2025 GMT
            Not After : Jun  8 04:00:41 2025 GMT
        Subject: CN=9ad8f67c7c34c48d7734248be69e9b6fd07dee0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:77:b6:06:9d:28:bb:41:04:e6:fa:e4:3e:
                    f1:8d:05:5e:91:c4:9e:7e:9a:2c:3b:55:13:60:c7:
                    32:e6:8d:f7:10:45:41:2c:64:25:96:f2:eb:ea:00:
                    26:fc:af:45:71:85:cf:85:ab:99:4f:34:2f:98:aa:
                    6b:d5:99:78:bc:08:42:ce:90:46:52:0a:32:bf:2b:
                    49:95:27:f3:86:17:72:43:7f:ba:4c:b0:b5:b6:c7:
                    4f:50:fe:46:14:99:64:00:8d:ac:92:50:6f:78:bb:
                    e7:f3:4c:54:06:11:d3:64:8e:44:a8:16:06:c0:43:
                    e3:a3:42:9e:a2:cc:51:5e:50:2e:fb:cd:01:43:e6:
                    85:22:51:cc:ae:f3:f1:fa:7e:47:49:4c:d2:7c:92:
                    05:d2:7a:5f:c8:77:d8:92:c4:2c:ab:35:4d:22:e9:
                    37:97:05:1e:1c:e5:41:ed:cd:ff:ac:ab:19:35:1d:
                    f8:26:8a:e0:a5:b6:c8:14:ec:d6:32:96:ea:b5:4e:
                    69:51:ca:f2:08:fc:6d:4f:cb:18:29:44:a9:9a:76:
                    bf:ae:50:b9:54:a4:45:f9:ae:d8:bc:d1:2e:74:66:
                    62:c7:05:1f:29:3f:16:06:fa:60:ee:1d:b9:69:d3:
                    3a:a8:18:da:de:b0:0f:40:c7:1d:30:81:8a:ac:f3:
                    51:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D8:F6:7C:7C:34:C4:8D:77:34:24:8B:E6:9E:9B:6F:D0:7D:EE:0D
            X509v3 Authority Key Identifier:
                keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:a9:d1:2e:e7:de:c8:9c:fb:6f:e0:27:a7:6d:1c:85:c7:85:
         8a:7f:b6:11:90:b2:6e:3c:f7:ce:06:eb:46:a3:2d:77:dd:91:
         00:fc:5d:2c:01:40:92:f3:57:cb:b2:fa:11:fb:ab:0f:9f:35:
         2e:65:d3:27:5e:03:da:3a:a9:49:cf:d0:61:8f:3a:31:a9:8b:
         32:76:62:af:72:77:0f:c0:37:c5:de:27:dd:0e:77:6d:a4:77:
         40:18:c9:03:5d:b0:03:68:fe:06:aa:f1:7f:34:40:69:45:6c:
         55:55:bf:f8:e4:47:73:1f:04:1c:26:58:9a:63:78:23:31:14:
         f0:ad:46:c0:b4:eb:7d:c2:ad:e0:2c:d5:14:74:0a:65:1f:21:
         bc:64:84:23:1f:1d:cf:a1:75:15:15:6f:5c:6f:54:43:ef:66:
         44:32:83:41:ee:2d:f7:14:54:b3:ee:68:8b:0a:78:a3:20:8d:
         6d:a6:16:83:68:38:0f:fc:ef:8e:79:5c:b3:1d:ac:83:f8:52:
         49:c2:44:c4:b4:1d:a5:56:c3:17:f2:d4:38:9a:7f:67:8e:45:
         81:18:d8:3f:21:5f:4d:d6:a9:c1:ab:10:bc:36:a6:e0:cd:b2:
         56:5a:ba:54:f7:f3:b6:be:b0:de:17:33:44:07:31:28:12:47:
         9a:9a:bf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:55 2025 by rpki-client