Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
File:                     XZrYiZ1byFSe7dPlny0NYhNczxQ.mft (raw, json)
Hash identifier:          7IhrqC6RQYAt7mMaZGXR/qXfcfmhfiQYxG9BmDbfJXk=
Subject key identifier:   75:61:33:4E:78:33:C8:F1:74:43:19:29:BB:5D:9C:D8:52:A4:19:19
Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
Certificate issuer:       /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Certificate serial:       01962D185CB49429686A8564A37DE0A11525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
Manifest number:          59
Signing time:             Sun 13 Apr 2025 03:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 03:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 03:01:33 +0000
Files and hashes:         1: XZrYiZ1byFSe7dPlny0NYhNczxQ.crl (hash: bsUyOst0HioAXonCJ1KA/PCR4ZxEdM+PFBPDZ0OY8EI=)
                          2: m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa (hash: 1yLaEhuOSXYxSo5HpHGS5B2c9njKUwnBpqElWVTZ0t4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:18:5c:b4:94:29:68:6a:85:64:a3:7d:e0:a1:15:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
        Validity
            Not Before: Apr 13 03:01:33 2025 GMT
            Not After : Apr 14 03:01:33 2025 GMT
        Subject: CN=7561334e7833c8f174431929bb5d9cd852a41919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:77:0d:21:d1:88:d9:f5:61:a6:d0:36:d1:de:
                    62:0b:ba:7b:30:8a:03:fe:1a:8a:fd:7b:95:8a:50:
                    57:92:a0:65:1f:4e:e6:8f:8a:46:3f:8f:49:44:d9:
                    e2:66:26:76:f1:ec:2a:83:49:b8:40:36:84:aa:b8:
                    52:f6:26:f7:3e:41:7b:d4:94:55:d8:47:6b:fa:3b:
                    f7:44:d9:1d:9c:34:80:bc:f0:f1:08:ad:42:9a:7d:
                    5f:ca:f8:a1:d8:fc:25:54:ee:d4:7f:a5:7d:dd:0d:
                    90:2a:a6:84:d5:93:11:7f:8d:f2:95:75:66:53:e9:
                    00:4f:f9:9f:47:d3:e4:8d:6a:d2:a0:29:20:6b:dd:
                    e8:32:f3:ac:5c:d5:2a:f2:e8:54:17:9c:1f:9b:45:
                    88:f1:b6:3a:43:df:59:7d:b5:24:16:09:e8:92:04:
                    dd:53:74:38:b9:01:ac:56:b0:d0:b0:8e:7c:27:b5:
                    81:f7:7f:f6:09:b3:ba:40:55:f2:e2:d8:50:81:4e:
                    87:c0:26:23:14:75:a6:c0:1f:10:15:72:e2:a4:c1:
                    b7:7b:46:41:b5:9e:20:09:e0:e8:67:2c:e9:da:03:
                    17:65:c5:59:f2:d0:7a:2c:2c:cb:be:96:89:76:38:
                    d6:7e:3b:af:49:ac:60:07:cd:6e:74:b6:b6:1c:df:
                    7e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:61:33:4E:78:33:C8:F1:74:43:19:29:BB:5D:9C:D8:52:A4:19:19
            X509v3 Authority Key Identifier:
                keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:54:80:80:b0:8d:87:13:d6:10:c3:21:dc:60:21:fe:8c:
         e5:e1:1f:9a:59:d2:e8:f5:09:e6:a3:93:9c:f7:ad:6c:10:2e:
         8b:97:c6:c4:c9:c3:c4:b0:e9:4d:10:35:b4:89:40:79:09:28:
         62:a1:12:40:8b:c0:4c:9a:98:a9:4e:98:5a:8d:72:6a:fc:46:
         99:da:65:0a:c1:b4:7a:bb:e5:e1:d2:a5:ce:4a:73:00:4c:0d:
         81:b2:35:e0:c8:d5:56:9e:3d:0d:23:01:5f:90:e0:69:1c:82:
         f5:47:fc:2c:08:fe:87:58:f3:63:86:fa:ec:5f:1c:11:35:85:
         fe:59:07:bf:8d:d6:3b:b1:be:3d:e0:15:21:a9:16:bc:c5:51:
         c6:50:05:ae:28:43:78:45:80:88:7d:9c:e7:c3:70:6a:de:8e:
         0c:6b:54:13:a2:02:44:78:c9:ec:a1:dc:f2:6c:4b:c0:68:3d:
         68:3a:c1:8c:73:a2:93:62:50:6c:2a:0d:32:80:89:df:29:8d:
         81:9a:18:e2:b8:5d:da:16:56:99:b6:9a:35:ba:94:59:51:06:
         70:50:21:9c:9e:ab:b5:7c:26:75:65:72:0c:58:d7:d8:8d:68:
         d4:6e:44:ef:3a:c3:20:4a:be:c1:b0:7c:98:ac:b7:db:82:05:
         a4:8b:fd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:17:31 2025 by rpki-client