Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
File:                     X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft (raw, json)
Hash identifier:          L4T4ZYCqqHyOErVq9A6yHnDaHJwuticihjpCNwHdhWE=
Subject key identifier:   3B:CC:A3:D2:39:F7:34:03:AF:51:CB:E7:AB:D3:0F:12:85:B2:96:83
Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
Certificate issuer:       /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Certificate serial:       0196504889F928215A37DF9D7B2BE6AE8598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
Manifest number:          0C23
Signing time:             Sat 19 Apr 2025 23:00:53 +0000
Manifest this update:     Sat 19 Apr 2025 23:00:53 +0000
Manifest next update:     Sun 20 Apr 2025 23:00:53 +0000
Files and hashes:         1: FjrlAXrbDvDS2HfDrOYX8s6VeoI.roa (hash: rrLNQtMJaYm4qKAUxLrF7WkgOLeuL0rvTXSBW6y9Fvw=)
                          2: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl (hash: NUxAEsgoZnvEfMvVlu4GYN2ye8V3dPW1fZMg29QTTyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:48:89:f9:28:21:5a:37:df:9d:7b:2b:e6:ae:85:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
        Validity
            Not Before: Apr 19 23:00:53 2025 GMT
            Not After : Apr 20 23:00:53 2025 GMT
        Subject: CN=3bcca3d239f73403af51cbe7abd30f1285b29683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:57:ce:70:aa:cb:f2:90:6a:39:ca:29:60:
                    e6:13:9b:99:fd:2f:65:ee:cf:76:25:af:94:98:12:
                    cd:7d:15:98:81:84:a4:2e:77:22:3d:d2:b7:eb:9f:
                    ed:fb:01:29:42:11:9d:b7:3f:d6:a8:e0:c7:e8:69:
                    22:28:bd:fc:bf:53:7b:c6:a9:19:14:be:1b:8d:69:
                    7f:6f:da:ac:d0:75:63:85:6a:0d:18:d9:5e:16:3e:
                    b0:c8:df:d6:87:dd:28:ce:16:15:3d:e0:0d:d0:d8:
                    8f:80:50:b6:fc:5a:aa:dc:f8:0a:0d:5e:41:70:af:
                    22:f9:0a:03:45:87:d6:1c:ae:0c:df:f7:9a:5f:46:
                    5c:67:5c:1c:06:a9:6b:1e:08:7b:01:7a:20:01:48:
                    db:b5:2b:31:8c:3e:ff:ac:49:da:2b:84:a3:90:81:
                    1e:64:26:b9:95:fb:85:20:d0:e0:f7:a2:3f:5d:50:
                    ad:e6:80:b2:62:e7:2a:29:d8:73:50:2b:44:df:7c:
                    f6:70:52:1c:ea:4b:b2:9b:0e:c8:f0:3e:ab:62:3e:
                    19:3a:26:1f:70:cb:8f:46:a7:4d:d2:ad:3d:39:fd:
                    f0:02:e1:da:7a:b8:7d:7c:ee:c3:b0:53:d9:57:3c:
                    91:44:dc:db:aa:c8:e7:64:d0:ed:a4:9b:dc:05:96:
                    be:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CC:A3:D2:39:F7:34:03:AF:51:CB:E7:AB:D3:0F:12:85:B2:96:83
            X509v3 Authority Key Identifier:
                keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:ce:03:7a:59:56:ea:05:bc:d9:ad:12:8f:bf:20:4e:f1:
         0c:4e:62:fe:2a:c5:6f:c0:84:65:3a:6c:e8:f9:a6:37:ba:83:
         29:d1:ec:f6:2f:2c:41:d6:cf:2d:38:6d:65:dd:89:04:7d:9a:
         8b:52:ea:b1:fd:f4:09:fb:73:56:7e:36:c9:42:64:f3:8e:f1:
         da:b7:7d:3d:71:8d:55:57:94:5c:5a:db:a9:85:5e:17:62:1b:
         26:0f:59:ca:26:9c:1a:17:b3:27:aa:06:af:c9:88:ad:19:23:
         99:45:8d:0e:6a:ea:83:c3:2d:d2:7a:0b:18:49:26:0c:74:2f:
         b2:76:8d:81:65:1f:6e:5e:fe:c2:1e:84:3e:2a:7d:73:30:61:
         4e:9b:57:00:c7:bc:f9:f2:38:84:ba:aa:a1:6a:41:71:e3:d3:
         6c:ae:1c:98:85:04:58:78:bf:39:44:1e:e5:f3:8b:ca:f7:0b:
         51:17:a7:0c:07:f9:64:f4:50:3c:dc:27:de:e8:ff:68:4e:ad:
         a1:ea:fc:b3:21:18:cb:92:24:27:7d:6c:9a:38:aa:53:87:07:
         87:26:ee:50:84:75:ac:cc:f2:d0:04:6a:6a:a4:d8:42:71:3c:
         53:5b:36:10:36:eb:0d:66:3f:02:2d:b2:3c:1c:4f:f5:b8:13:
         e2:3b:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:14 2025 by rpki-client