Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
File:                     XoEWTOOIJZGG-6AVrMSw60i-tVI.mft (raw, json)
Hash identifier:          ngDY/1ojdYovRE1HDTEbYPcf3fIF6/JrRfyzkzgkUlw=
Subject key identifier:   C0:7E:1F:4D:EB:2E:75:48:F0:08:A8:5B:03:6A:E4:4C:05:CF:BD:3C
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Certificate issuer:       /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial:       0197485586E4A12D62747FA4FB678A0EF501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 03:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:53 +0000
Files and hashes:         1: XoEWTOOIJZGG-6AVrMSw60i-tVI.crl (hash: O8PHcHDZyemhFPYDdAI17SiYkl2M4h6z3bSmsy9hZas=)
                          2: ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa (hash: LqYC06a3Uz9AaZO7Y0iTGjC5jKrTveBVSDvC1hJ3I8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:86:e4:a1:2d:62:74:7f:a4:fb:67:8a:0e:f5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
        Validity
            Not Before: Jun  7 03:00:53 2025 GMT
            Not After : Jun  8 03:00:53 2025 GMT
        Subject: CN=c07e1f4deb2e7548f008a85b036ae44c05cfbd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:84:4f:eb:ac:33:ac:1d:54:84:b7:a8:f2:
                    91:d2:96:c8:4e:71:5c:98:c0:da:73:4b:55:51:7b:
                    6f:a0:de:56:0f:d6:0e:6c:ed:27:70:3e:6f:03:fc:
                    f7:e1:98:93:34:91:2c:5a:46:67:3b:22:5a:82:60:
                    de:c7:bd:46:aa:90:e6:85:e4:3d:7b:e1:27:79:fc:
                    b9:4e:97:61:7d:5d:8c:46:b8:64:89:69:bf:5d:16:
                    75:f8:f8:a6:97:e0:d7:7a:53:7d:96:76:c3:a3:48:
                    bd:1d:01:79:80:2b:c9:75:5d:7d:2b:88:a3:df:6e:
                    b2:6a:b6:37:6e:22:e0:dc:eb:8a:1b:25:eb:59:fa:
                    64:12:9c:dc:5e:2a:8b:1d:1f:9f:3a:2b:80:4f:8d:
                    a2:f8:0a:7a:11:f5:a7:58:f6:8c:72:20:68:0b:6e:
                    79:61:4e:83:87:23:e1:0f:92:67:af:35:2a:c6:a1:
                    e4:a2:e5:37:ff:58:9c:28:35:97:15:46:10:94:8e:
                    4c:d0:63:ce:06:40:68:49:f6:2b:57:d5:3f:9e:32:
                    4c:f1:56:d9:20:57:1f:1c:db:cd:e8:d1:17:d8:9e:
                    b2:71:3c:54:af:bd:54:f1:2d:97:f6:83:1f:9f:0d:
                    42:31:36:4f:4d:96:95:ae:bd:7d:61:a6:7e:a7:6f:
                    b7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7E:1F:4D:EB:2E:75:48:F0:08:A8:5B:03:6A:E4:4C:05:CF:BD:3C
            X509v3 Authority Key Identifier:
                keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ec:a4:86:07:ce:a2:ee:02:29:01:01:31:d9:7b:84:0f:7e:
         f4:8e:64:41:af:5e:5f:08:1c:25:90:fe:5e:df:bc:40:34:aa:
         e3:7a:63:94:e0:05:55:b9:8e:f5:d6:fc:38:32:2c:8e:83:61:
         fe:d6:83:af:61:05:2c:72:14:64:28:7c:34:4d:2b:f0:5a:80:
         4c:fb:6a:bf:66:ed:8f:47:86:04:e8:51:e3:e9:2a:c3:9d:1a:
         82:3e:de:a3:80:d6:0b:38:46:d5:ec:c1:32:70:e5:5a:70:aa:
         80:81:bb:cc:9b:58:50:7a:9a:23:b2:41:2f:77:a7:a2:55:1d:
         72:7f:3d:fc:8e:f8:6f:fc:0b:f7:ba:46:e1:35:3a:0f:b0:1d:
         f7:3c:f9:54:a2:2f:91:ca:1d:16:97:7c:0d:7c:6f:97:1b:e7:
         f7:d4:95:58:fa:f6:e8:ef:7e:a1:ff:4d:e3:0c:bd:1f:45:18:
         9d:02:d1:9c:70:f7:33:d8:7c:99:3d:a9:5f:7f:94:e8:3f:65:
         e4:91:b4:53:e6:b6:bd:44:1f:01:81:c1:2c:8f:aa:fe:82:09:
         45:cb:d7:ca:6b:50:3e:21:50:e0:6a:8b:35:e4:c3:f7:e8:b8:
         6d:f2:0b:dd:21:af:e1:73:24:c2:7f:9c:92:ed:1d:d8:e6:01:
         d9:21:cc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:52 2025 by rpki-client