Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          azV5GIQsiO7DgYru9KKB0I+1xy30uT8+03pNnche2ZU=
Subject key identifier:   F4:EA:B3:F4:0F:92:EE:0A:C1:30:A0:D1:BA:31:67:99:ED:F2:FC:DE
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       01950F0F8673E47D5FE854F1A22EEC12894E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          057F
Signing time:             Sun 16 Feb 2025 14:00:30 +0000
Manifest this update:     Sun 16 Feb 2025 14:00:30 +0000
Manifest next update:     Mon 17 Feb 2025 14:00:30 +0000
Files and hashes:         1: JPDyuwyAVoJM2Iyx8CZ_ZB6RHCU.roa (hash: QuCzbV3mXtMMCr1dPTRw5qrXtwuzqj3+jKGWKorTdEc=)
                          2: Jm7SMMzLF7_5MDCh5Y02qECnHz8.roa (hash: riP9RQHRkB7J8WrFHbcO6lj526dMWJM+emj0CRiPnlQ=)
                          3: Ou48DrwJus08n3GsGbd-UDVpOCI.roa (hash: bLCIdBEHgXrvByLARx4buUO2V5j3WD8Kgcv0zCDTM/o=)
                          4: R8JsCaWwJlloIphsJ_SUQdItPT0.roa (hash: jdlAQ7N+wj+LUd6XKIUEeWcmdCEJH5KhrOrz0eN8lDM=)
                          5: V3wGcwOVhN0tAMoLaOO8eyDkTKY.roa (hash: LoyanmiphfJJ/rxmnZ49vq4eY1guWePbQk/rQBxZgok=)
                          6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: +pGXwdCtYTGbBCRQngpG8vXMU/x1jcmP1AK5hlxSQSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0f:0f:86:73:e4:7d:5f:e8:54:f1:a2:2e:ec:12:89:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: Feb 16 14:00:30 2025 GMT
            Not After : Feb 17 14:00:30 2025 GMT
        Subject: CN=f4eab3f40f92ee0ac130a0d1ba316799edf2fcde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:2e:5d:ce:d4:3f:2c:c4:9e:c5:97:63:1a:
                    34:40:13:87:fc:9e:77:65:07:08:2d:75:52:35:f7:
                    c4:c3:38:95:67:98:fb:71:d9:5d:60:83:09:6f:9c:
                    ca:60:69:6d:70:fd:f0:4f:31:3a:80:81:d8:da:ad:
                    a9:a2:08:79:52:88:eb:da:55:84:a1:4a:c8:8f:a7:
                    f6:0f:63:81:0d:21:11:99:35:9a:fa:f5:be:46:e8:
                    ab:49:f5:74:fc:6d:06:56:eb:8c:af:bc:3f:ed:16:
                    f2:18:71:7d:db:00:35:56:93:7d:59:0d:59:0b:e0:
                    44:ba:51:48:44:3d:51:93:94:8f:17:97:6b:e7:2d:
                    aa:1c:1e:b6:47:76:1a:2a:51:dd:6f:b2:bf:c3:f0:
                    d7:78:53:47:20:a9:f1:a3:fc:25:62:39:97:8b:da:
                    ad:a6:5f:75:b5:26:dd:5d:d8:bb:ff:13:72:22:1c:
                    fc:4c:42:f3:82:42:f1:d7:d9:33:fb:38:9c:73:a3:
                    6b:f2:90:02:9b:69:c9:80:7a:4e:72:f2:52:53:84:
                    77:86:e1:6a:3c:f1:3e:ab:6b:67:0e:21:2d:16:a1:
                    35:fa:02:c3:2b:c2:da:86:4a:7a:78:a4:82:8e:0d:
                    bd:31:3b:45:7c:e4:bb:b0:f7:5d:9b:2c:3e:ea:02:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EA:B3:F4:0F:92:EE:0A:C1:30:A0:D1:BA:31:67:99:ED:F2:FC:DE
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:80:b2:66:7a:75:42:c9:94:f5:7e:86:28:69:95:ca:e0:1c:
         f6:70:87:32:62:01:ca:80:64:de:ed:37:33:12:ca:a7:39:40:
         e0:a3:c4:a0:7e:1d:49:c8:c6:a6:d8:72:b5:0b:5c:72:65:a8:
         fa:94:40:e3:0e:2a:c9:64:77:e6:ad:23:61:a5:87:37:95:ff:
         16:41:d4:5f:a8:2d:b8:ab:10:1f:98:1e:e0:d0:f4:c4:06:68:
         f2:fa:9b:6b:20:4f:04:c6:26:ba:fc:4b:74:5b:2d:ba:e2:fe:
         82:68:8c:cb:bd:03:d7:30:1d:9a:b8:0c:da:24:14:42:e4:b6:
         6b:a5:c7:61:59:0b:b7:d3:6b:17:88:ef:1b:74:0c:ea:b8:78:
         b6:dd:00:33:5e:d1:de:f6:a5:a4:6f:21:99:22:0e:fd:52:ae:
         79:a3:9d:ff:23:69:99:b7:14:be:df:3e:44:f0:23:e7:57:51:
         b3:49:3a:c1:38:61:fb:02:09:18:57:1f:2f:63:a3:51:37:f6:
         4b:3e:12:4e:cc:46:72:b8:1f:7d:1a:3b:62:6a:8c:20:28:87:
         f6:61:bd:42:18:ae:41:c0:fd:d8:1b:92:bc:bd:ac:b1:36:e3:
         e7:81:d3:27:d5:18:ca:a5:70:0e:ff:a5:4c:8b:04:c8:86:21:
         7c:6e:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:52 2025 by rpki-client