Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File:                     Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier:          7itMgKz5yVhzt2ULx6CRjI6vFA/XOdu0LfYYuKKIR2k=
Subject key identifier:   A6:29:6A:F0:84:1A:B9:4B:7B:F8:92:7C:AF:26:1F:AD:B1:75:E5:1E
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer:       /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial:       01974DE9AF12129892ED1FDB393F7FAB102D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number:          103C
Signing time:             Sun 08 Jun 2025 05:00:49 +0000
Manifest this update:     Sun 08 Jun 2025 05:00:49 +0000
Manifest next update:     Mon 09 Jun 2025 05:00:49 +0000
Files and hashes:         1: 3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa (hash: mpBdcgU7I+uQ5H1oVCfF7A1oXC3Ul6uCrit0pbGiORo=)
                          2: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: ffYBPtDJtLnWuLQy06eNVY9aqSs5GLZUxy2Y1quC8Rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:af:12:12:98:92:ed:1f:db:39:3f:7f:ab:10:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
        Validity
            Not Before: Jun  8 05:00:49 2025 GMT
            Not After : Jun  9 05:00:49 2025 GMT
        Subject: CN=a6296af0841ab94b7bf8927caf261fadb175e51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:85:4f:b3:c7:0d:51:b8:4b:6f:9c:ec:b0:12:
                    9b:30:d5:98:6c:ff:d0:9c:76:6b:6f:41:10:56:75:
                    e0:ce:83:96:72:4e:db:f1:24:ff:e6:01:e4:d2:aa:
                    38:97:70:74:87:b9:7d:cb:c0:d6:43:43:5d:f1:31:
                    f1:16:35:7d:99:96:3b:54:fe:68:85:18:68:74:b8:
                    12:dc:86:57:e4:c4:b0:2b:08:1c:78:b5:48:5f:cb:
                    3a:f4:84:fb:88:35:11:95:3f:4a:90:a6:c7:08:6b:
                    1c:f3:5a:02:5b:89:d6:70:fc:95:12:b6:32:50:b6:
                    eb:c5:13:29:e3:28:a4:af:8d:ad:7a:f3:8a:3c:76:
                    74:f6:02:73:7f:b6:23:ac:02:c3:6e:98:ad:92:d7:
                    80:ac:e7:42:16:aa:d0:55:3d:5f:8c:30:ca:e8:62:
                    bb:35:fc:60:65:bd:14:0d:63:f3:2a:df:13:3a:7e:
                    05:4c:35:8d:ca:23:21:d0:93:49:54:da:07:39:b6:
                    54:d0:c4:ec:07:6c:a5:e2:78:88:ee:b6:e6:57:7a:
                    2c:0e:51:a6:69:e9:fc:a9:ff:99:bc:ce:66:e4:43:
                    64:a3:f5:3a:c8:79:81:2e:fe:c1:b7:15:12:71:23:
                    35:ad:05:44:26:53:48:66:60:72:b9:8f:a6:e7:23:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:29:6A:F0:84:1A:B9:4B:7B:F8:92:7C:AF:26:1F:AD:B1:75:E5:1E
            X509v3 Authority Key Identifier:
                keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e2:07:01:2a:41:d3:61:5f:0a:18:d0:01:e9:4d:33:89:f4:
         ac:b3:ed:d9:9a:b7:cd:a5:82:1a:f3:14:63:0c:c5:95:49:c7:
         d3:0e:a5:e2:1f:89:45:53:51:de:4c:4d:7c:db:41:25:88:b2:
         48:03:27:4e:fc:35:b7:0b:02:26:07:be:fe:cb:7d:df:3e:bc:
         a9:0e:23:78:44:5d:27:e2:3f:32:04:a0:18:e4:a3:ef:2d:7b:
         6b:40:b1:6f:b8:ad:52:1e:4d:39:db:d2:30:13:a6:8e:52:d6:
         4c:92:6b:02:38:50:ca:9d:13:34:56:b2:06:a7:4e:74:be:ab:
         fb:7d:95:61:48:2e:33:f4:7b:8b:1d:2f:8b:50:ca:b5:67:18:
         79:62:57:65:8f:f4:2b:c1:ea:1e:6c:8d:26:4d:a2:59:3d:4e:
         8d:ae:ec:53:49:5c:21:a2:f4:73:43:fe:7f:7d:30:91:2f:69:
         6f:4f:8f:2e:f5:0c:b3:1f:6b:2e:9d:92:01:12:01:8c:19:09:
         66:4b:fc:1f:29:19:8e:f3:74:37:4c:ce:40:bb:48:b8:3c:4a:
         d6:76:94:92:44:96:cc:17:75:d8:40:cb:d1:3c:d3:b9:3c:9b:
         78:b1:9e:fe:65:9e:b4:19:35:1a:59:b1:6c:dd:7f:02:15:25:
         64:45:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:42:42 2025 by rpki-client