Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File:                     XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier:          a2Z0/Sp/tfWhoVN3vT34FNxMTQGgzF3ciw0Wp+oyNKM=
Subject key identifier:   45:03:B3:46:C3:C2:FA:CE:CA:EE:04:91:BB:DB:66:3C:EE:85:D6:5F
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer:       /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial:       01974967DB9F9DE8A45752472AEC12B384D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number:          03BD
Signing time:             Sat 07 Jun 2025 08:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:32 +0000
Files and hashes:         1: B7HcX8a5R4VJ0aJu7BcgMxsPGeM.roa (hash: +dMXfXtmqoKsILaxrYWUxAUDipxnRmqzhhjRXeSfmOo=)
                          2: Vv1ze4oV_8jujUNihoptQXR-XLA.roa (hash: L3WLtaibPG3x61zfWcu415AL/a1HwynhXMRR//VRus0=)
                          3: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: b27RdgMKXhBc6IEAGIQOJZH/kGakMdpFPma5NZTScXs=)
                          4: wwZy967K0kaiULGURPRIujSTcOo.roa (hash: vNjif0ZJvkMUe2G7dAUGl4j4TYsS+I8BRRbofJk7BNE=)
                          5: yXSI300Xb0fHUGX2H4LyzLugHJw.roa (hash: lfxMflPHK3x8X2DTET3r/QnFen44eiLQvcUftmVoo/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:db:9f:9d:e8:a4:57:52:47:2a:ec:12:b3:84:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
        Validity
            Not Before: Jun  7 08:00:32 2025 GMT
            Not After : Jun  8 08:00:32 2025 GMT
        Subject: CN=4503b346c3c2facecaee0491bbdb663cee85d65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:57:53:d6:10:bc:68:2a:6b:fe:12:82:d1:
                    39:4e:72:37:20:64:46:95:63:09:8c:29:af:9f:f0:
                    6a:e3:73:03:d1:76:5e:20:9b:d5:3a:df:89:0d:f2:
                    61:85:7f:70:2e:31:36:8e:20:11:e5:79:78:ad:5d:
                    0c:2b:a8:ad:55:52:7f:38:33:a4:64:32:b0:aa:bd:
                    05:e1:88:7f:58:52:5e:4f:24:b5:de:62:e8:81:f3:
                    37:11:cd:a2:b2:6a:25:56:aa:bf:ff:43:c3:ca:45:
                    c0:bd:7f:fd:ad:10:c1:5d:eb:1f:94:a5:a8:d5:6b:
                    ac:e9:89:30:57:3f:fe:6a:6c:ff:30:64:85:cc:da:
                    f7:3a:b5:53:0f:36:e9:01:7e:52:f0:07:81:20:5f:
                    fd:df:b5:11:2c:f8:e6:f6:70:0c:fe:89:28:db:92:
                    4c:d5:0a:fc:c4:78:32:28:59:d4:3c:99:e0:28:60:
                    16:ec:3e:55:23:db:9d:b7:78:ee:7c:c9:15:29:f4:
                    6d:da:81:78:67:65:14:67:a4:21:5e:41:62:06:ac:
                    16:41:a8:34:4e:64:03:23:db:dc:f6:b9:1b:b0:f8:
                    26:4e:38:6d:a3:07:7d:99:27:bc:97:26:53:65:62:
                    67:cf:f7:2c:cf:b1:d8:82:21:ed:95:07:9d:d2:e7:
                    af:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:03:B3:46:C3:C2:FA:CE:CA:EE:04:91:BB:DB:66:3C:EE:85:D6:5F
            X509v3 Authority Key Identifier:
                keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:7e:ff:e9:d2:5a:42:aa:10:70:38:5b:b6:b1:25:b4:f9:
         38:12:16:4b:e8:c9:02:33:78:22:06:ad:11:92:8b:a6:4e:a4:
         92:8c:d5:d3:01:34:80:16:e4:98:4b:7a:58:31:42:bc:10:a6:
         eb:b7:ad:ea:5b:50:0c:6b:dd:32:d8:4e:88:82:6c:03:79:cf:
         17:09:5d:ac:33:1b:28:85:3d:de:22:d4:4a:7f:b7:9a:44:83:
         a8:10:0e:63:bc:6b:f0:47:6d:b4:57:2c:8d:d4:07:5b:69:53:
         47:e3:35:13:fa:e4:0e:40:0c:ef:49:a2:e6:52:8f:4e:69:77:
         0f:bd:42:e0:4d:3c:7d:f5:3a:f2:43:4a:86:dd:9b:f6:4a:1c:
         fd:c6:e3:56:17:87:5f:ac:3d:71:58:53:f0:d6:2f:0a:11:6c:
         65:5b:f9:cf:38:ab:a5:fe:fb:9f:f7:71:2a:e4:94:c5:cd:e4:
         0d:2d:6c:12:7a:60:0a:47:c9:d0:11:18:49:a4:83:3a:7b:75:
         ce:e5:80:48:8f:56:3b:7d:0b:19:84:2d:35:06:ff:11:f7:79:
         4c:0c:08:bb:c9:46:f6:6c:e1:aa:11:6e:b1:ea:80:ff:2a:af:
         c9:9e:15:f8:66:a6:03:3e:ec:47:7b:53:6e:f4:b2:d7:5d:5a:
         3b:87:55:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:32:55 2025 by rpki-client