Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File:                     xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier:          sEeyoPp/Quca1sHk8BeUftCB9AefOuaKxga6Xxzefh0=
Subject key identifier:   44:5F:C3:C0:01:B3:82:6A:1C:FF:1B:9D:B4:D2:12:86:3F:84:23:B5
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer:       /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial:       0197605D7AD619962B706EE0CD5DD9509C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number:          0755
Signing time:             Wed 11 Jun 2025 19:00:28 +0000
Manifest this update:     Wed 11 Jun 2025 19:00:28 +0000
Manifest next update:     Thu 12 Jun 2025 19:00:28 +0000
Files and hashes:         1: 6ju2EuNQ-q9l9jWpaCX_yFCWFus.roa (hash: USfZBKBFKPqpoZ4/RnsmCkjU4lbPXZn+7Zop6eU1524=)
                          2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: oOZ+K9JGXjTkwtUzhhSpm+ZgdS5dcPQlFWKguhehgnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 19:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:5d:7a:d6:19:96:2b:70:6e:e0:cd:5d:d9:50:9c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
        Validity
            Not Before: Jun 11 19:00:28 2025 GMT
            Not After : Jun 12 19:00:28 2025 GMT
        Subject: CN=445fc3c001b3826a1cff1b9db4d212863f8423b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:2e:28:d1:5d:f6:fe:d6:cf:a8:32:c3:0a:
                    31:48:c2:55:a2:6a:5b:c7:d0:52:d6:39:df:22:ed:
                    91:7c:ff:0f:f7:a0:5f:ef:d3:7c:33:5c:98:74:91:
                    85:3a:5e:b6:48:f4:c9:dd:d4:65:06:e7:4d:57:16:
                    15:09:40:fc:8f:5b:a6:55:51:ca:41:0d:fe:3e:7a:
                    19:77:b5:6d:0e:18:28:19:c8:fe:17:d8:6e:e1:bc:
                    0f:b4:68:97:c5:5d:3e:29:8e:6d:ec:97:7f:63:a7:
                    0a:6f:ee:af:b6:1e:36:7e:5a:17:08:3a:39:d9:e7:
                    e9:d8:56:ea:81:9c:6b:9b:f3:b2:d8:b9:56:2f:26:
                    10:f3:3a:cf:0f:56:c1:b5:5f:9e:5e:3a:39:3b:72:
                    09:1c:f3:62:af:8e:bc:55:5b:e5:c5:61:79:5a:a1:
                    60:66:69:d9:09:7b:d0:6c:eb:bf:c5:f7:26:b7:77:
                    45:34:eb:69:30:20:6a:32:5a:9d:8b:bf:ef:73:23:
                    ef:40:1f:a0:a2:5b:8b:55:00:04:e8:4e:db:8e:d9:
                    34:ac:89:93:ce:6b:22:15:5a:bf:6c:4e:75:7d:17:
                    33:b3:ce:94:6a:40:c1:38:f6:97:be:b5:7e:58:0d:
                    f1:93:ce:83:4c:69:e3:b6:8f:1c:b7:55:1a:36:39:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5F:C3:C0:01:B3:82:6A:1C:FF:1B:9D:B4:D2:12:86:3F:84:23:B5
            X509v3 Authority Key Identifier:
                keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:f9:5a:ac:e1:37:16:26:5f:2e:b6:b7:5f:ff:55:3d:fd:
         8b:c6:6a:7b:33:3e:4a:5c:6b:56:2e:be:3b:48:af:70:db:01:
         b8:c7:7e:04:38:bd:a4:39:ef:17:f5:76:a1:1e:40:25:96:f7:
         bc:50:0d:ae:dd:14:e7:0c:58:ed:7b:42:42:ba:b4:55:32:88:
         8b:cd:b2:2a:c0:99:ca:8f:74:22:61:1d:d7:5a:9e:dd:59:39:
         26:31:56:a7:de:39:91:d9:8a:06:10:5e:31:a9:f2:ac:3e:2c:
         27:da:89:f5:c4:b3:e4:28:2a:93:4c:c0:98:da:17:2e:0d:52:
         0b:b1:6d:8c:5e:c7:f2:7a:f5:98:4f:0c:c8:40:fa:1b:ca:cf:
         22:b9:3c:a3:2d:92:b7:8f:35:d9:09:aa:b3:b8:f7:8e:99:c0:
         f6:b9:02:f3:1c:07:f0:a4:12:c0:c1:89:c9:5a:5c:19:87:89:
         79:52:e1:f0:53:bf:af:f9:b2:f1:bd:0d:3d:96:62:b6:cd:24:
         08:5c:38:11:ec:f8:e1:b9:12:37:f4:3f:b0:aa:e1:1d:c3:56:
         ef:bc:49:df:04:4e:fc:88:82:b1:a9:6a:f6:71:3e:27:f5:12:
         82:79:37:13:89:76:96:71:9c:2e:c6:bb:62:9b:10:85:53:c8:
         ad:07:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 05:02:29 2025 by rpki-client