Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
File:                     X8IN7HFLtUY7Fk4VpfihOYolUF0.mft (raw, json)
Hash identifier:          OCxtOwZtEjKgkdGtHIC20oI6v7PWDPWQzp9pYxLT8JA=
Subject key identifier:   37:2F:CD:26:96:B7:69:28:25:A2:77:A0:7D:93:8F:40:E9:00:BE:78
Authority key identifier: 5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
Certificate issuer:       /CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Certificate serial:       01974BFB183B0B3B4852B47A2E78BA81108C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
Manifest number:          0276
Signing time:             Sat 07 Jun 2025 20:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:36 +0000
Files and hashes:         1: VYOhWlm2y2YZ6EHcFnibmzsOVGY.roa (hash: GJjtJqaW4pHP1Y4i0oHxZvwkAfFAfi2jd3zkxgKT3N8=)
                          2: X8IN7HFLtUY7Fk4VpfihOYolUF0.crl (hash: fC7da4Txo9PkbyaQ3sjqofD/Quh6IYS3jQGJ5pR+K4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:18:3b:0b:3b:48:52:b4:7a:2e:78:ba:81:10:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
        Validity
            Not Before: Jun  7 20:00:36 2025 GMT
            Not After : Jun  8 20:00:36 2025 GMT
        Subject: CN=372fcd2696b7692825a277a07d938f40e900be78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:da:29:84:5a:88:89:13:6e:87:71:af:18:6d:
                    b1:9c:68:2f:e4:45:30:8e:76:f8:52:c8:08:cb:a5:
                    b6:26:bf:9a:7f:3f:ff:f4:70:ca:89:f5:1d:12:cf:
                    1d:d4:bf:25:5c:15:9c:c7:13:1e:6b:a4:70:45:d0:
                    91:df:9d:24:63:a7:1d:5e:f4:6a:fc:21:ba:3e:2a:
                    34:70:c4:90:21:ac:df:e6:69:d1:00:00:94:a6:02:
                    01:41:7f:79:2b:00:13:0f:7e:33:b6:6e:f3:32:b8:
                    f8:8c:7d:3c:f8:17:8c:7b:60:09:6f:04:81:e3:24:
                    29:c3:a7:83:db:34:7d:e4:d6:ca:40:90:57:4b:4c:
                    15:77:30:20:44:e0:fd:a4:7c:a5:9d:59:75:3e:68:
                    78:76:1f:58:84:29:ba:c0:3b:90:60:40:fb:08:0c:
                    ff:2c:ac:2b:8a:73:19:b6:e1:c4:5c:b0:ac:55:ae:
                    f8:13:d4:a2:63:c3:a4:dc:f5:5b:d6:41:e9:22:3c:
                    fa:48:bc:57:f8:ec:98:0c:6e:71:de:4e:ec:87:33:
                    42:97:e3:e2:17:45:52:fc:88:a6:9f:bf:5a:d6:8f:
                    62:77:52:8c:53:94:bf:04:68:3a:e0:e6:ef:d6:e1:
                    b1:8f:cc:c3:69:b0:75:b5:3c:fc:10:eb:83:88:94:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2F:CD:26:96:B7:69:28:25:A2:77:A0:7D:93:8F:40:E9:00:BE:78
            X509v3 Authority Key Identifier:
                keyid:5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:cf:d5:54:6e:1f:93:22:ea:16:a4:a2:00:fb:49:db:62:d9:
         1c:f2:ac:37:0c:c3:6c:24:56:84:9c:c8:1e:d7:28:45:59:58:
         4c:3c:7d:9e:6b:df:1e:fa:f7:be:a3:60:30:00:e4:40:a0:60:
         3c:5e:8f:1c:69:8c:40:6d:1b:09:d5:61:13:12:1a:a3:55:3d:
         c6:b9:00:47:e0:46:4e:e6:6c:6b:7d:72:93:b7:63:64:2f:33:
         64:d4:fe:39:c1:dc:47:3d:29:65:eb:91:57:c2:f3:ac:f5:4b:
         56:04:6c:99:7e:f9:f2:2a:53:45:39:7c:0e:45:22:65:d6:46:
         43:ba:30:54:58:44:3e:26:c7:1d:ea:81:93:1a:c2:9c:94:c8:
         aa:b5:eb:60:f8:be:00:8a:81:8c:88:5f:f9:27:cc:a8:1b:a2:
         63:31:64:65:6f:f2:c2:1f:ba:01:2f:31:1b:79:a7:9a:91:52:
         94:29:e6:24:61:57:64:e3:12:aa:60:ed:80:20:45:75:5f:d6:
         55:9b:64:3f:0a:84:80:f2:b1:0a:23:01:c9:9c:68:bc:9a:d8:
         6c:23:4c:80:fd:05:c6:64:46:a8:6c:7c:be:95:61:db:e1:43:
         9b:4a:f4:d2:f6:a3:75:f1:11:0a:00:ea:88:f1:23:a7:7d:0f:
         03:7f:4b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:13:48 2025 by rpki-client