Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
File:                     xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json)
Hash identifier:          2rKxN2wcoMYvo0ZEUTtA0Dl3Gv29R9NCtV3CDIyecKA=
Subject key identifier:   01:22:8F:84:35:9B:15:4E:BE:B0:1F:99:8E:D1:19:BC:45:03:2A:37
Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C
Certificate issuer:       /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
Certificate serial:       01974A0CC2DDF62357BBD6D2687EAE383719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
Manifest number:          31
Signing time:             Sat 07 Jun 2025 11:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:39 +0000
Files and hashes:         1: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: 6QMYBrZPe0suDn3v/Yel95W9MzH706XbQ2j3nr7hjEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:c2:dd:f6:23:57:bb:d6:d2:68:7e:ae:38:37:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c
        Validity
            Not Before: Jun  7 11:00:39 2025 GMT
            Not After : Jun  8 11:00:39 2025 GMT
        Subject: CN=01228f84359b154ebeb01f998ed119bc45032a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0f:33:b8:6c:a3:b4:2d:2f:c4:ec:c2:d5:e8:
                    2b:3a:c0:d8:c3:bc:4b:78:fe:59:eb:62:24:af:53:
                    1b:17:f5:a9:59:f1:e9:5a:73:cf:b2:29:50:3f:fa:
                    f2:c9:f1:c4:06:57:06:3e:71:18:04:44:6e:bc:fe:
                    1d:0a:07:f6:64:61:fb:a7:cf:14:7b:f1:44:85:7b:
                    17:9a:10:60:0c:20:4f:b5:a5:68:5f:6b:bb:c5:40:
                    12:da:70:e0:47:5c:48:e8:00:89:ee:d1:97:fc:a2:
                    c2:6f:22:3c:8a:1f:93:f8:8f:8e:38:fd:54:e8:02:
                    5f:a7:1d:f4:9a:28:29:58:4e:36:55:58:21:33:3e:
                    52:00:61:ef:aa:73:9c:7f:08:92:0c:b0:75:a3:27:
                    0e:7f:b0:c8:8a:14:f6:bf:31:6b:64:3b:ce:ae:3c:
                    61:d0:aa:be:e7:a9:c6:27:f7:7e:f1:a6:80:af:51:
                    28:dd:5d:e1:e0:07:1c:a0:e7:46:f3:7d:f2:29:78:
                    ca:80:50:75:dd:d3:68:f1:00:94:74:6b:a0:d1:22:
                    10:05:c7:67:67:7e:f3:2a:f1:56:84:a5:e5:6f:80:
                    13:9c:3a:29:3b:96:e4:35:59:6a:de:ec:ae:9f:a8:
                    32:64:93:59:5b:d4:37:90:6e:1e:63:93:5f:d8:ce:
                    21:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:22:8F:84:35:9B:15:4E:BE:B0:1F:99:8E:D1:19:BC:45:03:2A:37
            X509v3 Authority Key Identifier:
                keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:73:14:af:94:6a:29:5c:08:88:29:0c:7d:bd:3a:d5:14:33:
         fd:1b:0b:65:2d:e1:d0:78:f9:ad:4f:26:c6:fd:b1:5a:7e:75:
         94:c1:4c:2b:09:4f:33:de:86:a2:7d:26:48:ea:c5:e6:57:1a:
         3e:cb:21:a9:12:f2:73:07:4b:48:af:6d:c6:4e:3c:1e:ff:a4:
         7b:ce:97:3e:3f:7c:88:41:18:97:23:bf:06:36:7c:38:07:6e:
         21:dd:77:4d:8e:4a:64:26:d1:b5:57:b8:7a:3e:a2:15:de:7b:
         81:36:93:8c:c7:e5:80:a4:e8:49:1b:5b:fb:72:67:d8:78:ce:
         e1:cd:fd:a5:70:13:3a:de:84:fe:04:a9:85:13:1e:75:fd:dd:
         de:09:f8:70:b8:b9:e0:94:6b:33:54:d0:e5:83:2a:da:6e:fa:
         0f:be:ef:49:94:0f:8c:62:6c:49:32:19:e5:4c:cf:6e:e3:80:
         fe:2f:c9:43:97:a7:f6:30:b0:35:d5:3a:e9:40:f9:4a:51:26:
         0e:05:cb:c8:db:db:88:cf:78:c3:b8:a4:80:23:8a:3a:60:62:
         6b:b9:db:99:64:65:f7:2c:9d:e7:bb:9c:fa:d7:ed:99:fc:b4:
         b8:64:89:9d:4e:27:68:45:10:5c:cc:46:05:35:ef:23:d2:c4:
         f4:86:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:16:13 2025 by rpki-client