Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File:                     xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier:          193eYNhH+5Q7kQQ0ci9cBDbXvJx51sDXU+Fv82wdvPY=
Subject key identifier:   90:10:10:27:C5:FD:36:B9:98:F7:04:1B:C7:EE:22:72:03:4F:09:56
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer:       /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial:       0197470C7910E0B16728B13672ADB06C67FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number:          0196
Signing time:             Fri 06 Jun 2025 21:01:29 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:29 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:29 +0000
Files and hashes:         1: _qWutZUYh7GtHc5BuqYExYnhc5E.roa (hash: coowkP6g5fodWA3YuMC9BEcTrYORzxDu9UeePR3fEmU=)
                          2: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: f4GT2CXJzjSCTngdsBhVL4MLGchkml1/LJzHQIphrxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:79:10:e0:b1:67:28:b1:36:72:ad:b0:6c:67:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
        Validity
            Not Before: Jun  6 21:01:29 2025 GMT
            Not After : Jun  7 21:01:29 2025 GMT
        Subject: CN=90101027c5fd36b998f7041bc7ee2272034f0956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:d9:15:5e:14:93:65:d6:da:4c:57:ae:3a:
                    b4:01:f7:0e:12:b5:7c:89:29:d9:fb:e3:5b:b5:22:
                    d8:fd:7e:fe:0e:3f:48:4f:19:72:2a:bb:cf:03:e1:
                    ab:df:9a:b5:82:05:8c:62:9c:44:c0:76:9f:6a:e4:
                    a5:74:fd:ee:29:e0:a2:97:4c:fe:a3:7b:36:14:97:
                    0f:61:17:b7:da:e7:00:71:81:ea:ef:bf:f1:7f:7d:
                    2d:f3:24:37:ed:72:7a:e6:77:11:c4:87:35:50:c0:
                    93:0b:18:38:c6:00:1c:68:81:cd:2d:2e:ba:1f:e8:
                    23:83:af:e8:c5:ed:45:b2:37:d1:97:94:d7:d1:f0:
                    53:43:98:cb:43:7a:a6:41:ef:49:9f:89:0f:12:9a:
                    2c:cc:9a:bb:27:1b:e1:9d:05:cd:d4:7d:84:0c:f1:
                    ad:24:6f:eb:39:26:fd:9a:64:d9:86:00:45:1f:c5:
                    6a:52:fc:c9:a6:b7:9a:e0:70:17:f9:cb:00:23:e8:
                    b7:68:aa:2c:63:0f:0d:70:c8:36:3e:41:15:c0:db:
                    91:5e:65:d1:90:4d:22:64:05:8a:50:8a:85:0c:02:
                    4b:d6:ac:df:c6:6a:05:3f:43:31:77:26:be:62:0f:
                    93:c7:ab:6a:44:fb:0a:3b:e8:fd:62:f1:50:bb:3b:
                    da:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:10:10:27:C5:FD:36:B9:98:F7:04:1B:C7:EE:22:72:03:4F:09:56
            X509v3 Authority Key Identifier:
                keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b4:de:c1:bd:3d:12:36:31:9f:8c:59:4b:48:05:64:da:c7:
         02:13:2b:32:ac:74:ee:1c:de:27:a7:53:cd:c9:a2:0c:2c:e0:
         9f:11:70:b0:cb:2f:fa:81:c6:14:30:aa:d0:a8:0c:91:8e:ee:
         5b:55:01:27:53:76:53:90:c5:c0:53:17:2e:57:9f:5d:9e:5f:
         c8:51:34:80:de:bb:8d:b4:2c:e0:f6:1c:14:9d:7e:3d:90:cc:
         f8:2f:ec:3c:cf:b7:a8:9e:9d:19:b4:6a:91:e6:22:36:36:28:
         6a:89:bc:85:69:c6:e7:71:62:e1:81:f3:f5:57:a8:17:61:63:
         c3:2a:6a:d7:fa:be:5a:a8:0f:86:3e:9d:af:16:17:db:cb:c2:
         75:6e:4a:69:51:bb:8a:1b:e6:73:a2:a0:86:7b:da:10:8a:c5:
         0c:ae:fc:96:2b:46:38:d0:f9:e2:4c:23:37:64:28:eb:86:25:
         10:22:f1:07:43:c4:b1:a8:8d:5a:8c:0e:07:1a:8b:e6:e1:9e:
         ad:0e:bd:52:9e:ea:17:bc:67:16:c5:84:ef:ae:81:3d:66:67:
         f9:f8:5e:90:93:46:2c:43:77:c0:62:a8:09:d8:a0:85:cf:92:
         cc:ba:78:ab:73:51:85:57:ce:e4:16:01:49:2f:11:68:eb:e5:
         af:fc:14:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:58:48 2025 by rpki-client