Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File:                     xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier:          2dlzok3x4pCUnDHf6xMUMR/GVPBiFWSTG5xaMwmpEt8=
Subject key identifier:   54:A5:40:5C:5E:22:47:41:CB:50:EA:FE:C8:3B:0D:45:E3:4A:55:4D
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer:       /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial:       01976471153D08C04C25E6857D3BE5BA6620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number:          0BA4
Signing time:             Thu 12 Jun 2025 14:00:21 +0000
Manifest this update:     Thu 12 Jun 2025 14:00:21 +0000
Manifest next update:     Fri 13 Jun 2025 14:00:21 +0000
Files and hashes:         1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=)
                          2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=)
                          3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=)
                          4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: SSFc9W0olnq4ObhLkg85wTnEPbNQYA0YizJiULHFnl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:71:15:3d:08:c0:4c:25:e6:85:7d:3b:e5:ba:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
        Validity
            Not Before: Jun 12 14:00:21 2025 GMT
            Not After : Jun 13 14:00:21 2025 GMT
        Subject: CN=54a5405c5e224741cb50eafec83b0d45e34a554d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:8b:8a:d9:fe:04:d1:ee:a7:6e:5e:f3:b1:
                    27:70:ef:a8:25:ee:67:3f:cc:56:7a:68:18:42:e7:
                    f8:94:59:b3:55:be:ef:e2:27:7f:68:96:51:68:79:
                    35:19:fd:2f:67:63:fd:54:83:65:b0:89:bf:bd:c3:
                    37:0d:c7:66:20:d7:ff:3f:db:90:f4:1c:76:3a:24:
                    93:0a:cb:c0:88:49:e5:99:ea:8c:55:5e:02:03:3f:
                    85:eb:14:33:d5:92:25:b5:d3:41:bf:0c:5e:1d:07:
                    34:84:b9:49:f0:4b:ce:c6:54:ce:cf:cd:48:bf:bc:
                    3c:b2:42:4f:56:7b:83:7d:3e:3d:6f:a9:d6:ff:0a:
                    c9:f0:38:ba:be:eb:8b:63:39:28:57:8a:aa:88:68:
                    1c:7a:e2:dc:94:d8:39:9e:88:86:98:97:1f:b8:ca:
                    d0:8f:02:5e:67:96:63:bf:d8:9f:80:f9:08:1f:ea:
                    1a:26:a9:16:2e:84:8f:8a:7c:ef:89:8f:8e:70:bb:
                    2c:8e:7c:b1:4b:10:38:e6:df:d4:07:09:c7:12:03:
                    ec:21:e7:c8:0f:ea:de:98:75:13:a2:b9:f5:27:35:
                    85:59:8e:3a:85:7b:5d:68:84:88:36:8a:07:93:e5:
                    b5:b9:a5:f9:af:d9:a5:72:b8:03:d7:f2:8d:eb:0f:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A5:40:5C:5E:22:47:41:CB:50:EA:FE:C8:3B:0D:45:E3:4A:55:4D
            X509v3 Authority Key Identifier:
                keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:64:c7:15:75:d4:c7:bb:fc:c9:e3:21:cb:1c:b2:6f:f8:f7:
         69:1d:7d:e9:d3:26:d6:29:bd:71:16:d9:15:94:5b:9d:d7:91:
         e4:8f:2a:db:68:3b:a8:3b:83:27:fe:1a:b1:00:db:39:4e:7f:
         55:4d:8f:ac:3e:62:86:df:e6:5e:42:29:e2:74:0b:bc:b5:d4:
         c0:79:cd:dd:ea:cf:0c:d8:f0:8d:18:d2:b6:16:18:4b:0b:49:
         4c:f0:c9:f0:32:a3:44:57:a2:20:c5:b7:62:ce:e5:3f:8f:20:
         d3:d5:d4:60:8a:94:82:3b:55:53:ed:38:48:75:e9:09:55:dd:
         98:84:55:2b:3a:d4:43:e6:82:fe:49:1d:16:58:1d:cb:8b:7b:
         66:e9:27:61:fc:d6:c0:25:60:b2:b7:c3:86:5b:7f:d7:32:c8:
         26:29:6b:9a:01:b5:6c:67:11:a8:9f:45:ea:ef:3e:52:29:1a:
         45:8c:73:c2:f3:b3:08:aa:df:07:34:12:6a:91:1c:28:d8:97:
         44:b4:b4:a2:9b:2f:2a:9a:48:c8:99:3a:df:a5:1c:59:cd:a3:
         0e:21:e0:a0:7d:5c:f1:dd:2e:99:3b:2d:1d:e9:34:8d:56:03:
         df:b4:b1:9d:76:2e:c9:81:2d:7c:7d:39:c5:8f:9a:cc:6d:61:
         45:56:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 19:17:34 2025 by rpki-client