Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File:                     XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier:          ZalgzyasEnOXw2F8lZezrTdQHvuKCgWIMiBp2GMq8Kw=
Subject key identifier:   74:B8:AD:6B:EB:1C:5E:4D:9C:D6:BE:A9:F9:7D:28:81:CD:42:28:22
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer:       /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial:       01974AE8F58E2B7CD6B3E99B6E10A8425844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number:          054E
Signing time:             Sat 07 Jun 2025 15:01:10 +0000
Manifest this update:     Sat 07 Jun 2025 15:01:10 +0000
Manifest next update:     Sun 08 Jun 2025 15:01:10 +0000
Files and hashes:         1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: Mlb0gH21EYUhNhOcbqDfmOvP8Dl9P1G0HILBTuRTcfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:f5:8e:2b:7c:d6:b3:e9:9b:6e:10:a8:42:58:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
        Validity
            Not Before: Jun  7 15:01:10 2025 GMT
            Not After : Jun  8 15:01:10 2025 GMT
        Subject: CN=74b8ad6beb1c5e4d9cd6bea9f97d2881cd422822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e3:98:35:f6:17:18:c4:b7:f1:1f:41:69:de:
                    9f:00:d5:b4:85:36:64:c9:42:d1:ff:97:f1:82:84:
                    8a:ef:c0:88:c0:2b:90:ca:77:07:07:73:86:7c:45:
                    18:a6:30:83:61:ea:9f:58:46:7b:b2:e3:ab:3c:dc:
                    9e:53:19:e7:5d:75:91:d6:af:d8:65:b5:b6:f8:e1:
                    5f:47:f5:78:cd:99:d0:5f:ba:0f:bc:e4:df:1c:2b:
                    09:e2:8e:2e:44:eb:02:ef:70:5a:59:46:9d:c2:a5:
                    d6:b7:c0:ef:ad:b7:42:74:53:22:70:f6:7e:84:d0:
                    19:78:01:96:ea:6c:e7:a5:de:9b:71:86:2d:e7:fe:
                    a9:5c:88:98:41:58:c4:c4:ac:7e:55:03:e0:32:65:
                    3c:e4:7a:e9:30:91:5e:cd:f1:40:01:67:7e:a1:8b:
                    e6:4d:ea:77:f7:31:99:84:fb:5d:71:e3:68:65:f4:
                    60:b7:dd:c0:3a:04:7b:8d:0a:08:d4:74:84:7e:42:
                    0b:38:1f:ac:d3:82:24:f5:c0:ee:1d:50:31:d4:95:
                    8c:95:b4:52:35:07:6a:a1:5d:72:9b:5b:ab:62:f9:
                    4a:6b:9e:2d:2d:3f:5f:ca:41:15:6a:7b:28:31:7d:
                    7d:e1:c2:73:72:45:1f:83:0d:42:55:52:e6:a8:f3:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B8:AD:6B:EB:1C:5E:4D:9C:D6:BE:A9:F9:7D:28:81:CD:42:28:22
            X509v3 Authority Key Identifier:
                keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:2c:d5:a8:b0:0f:ca:c8:2f:2b:55:b8:16:90:66:75:9a:
         89:9b:b2:99:46:6d:be:69:01:ed:36:e6:b9:80:ca:e5:16:bd:
         c9:e2:bb:b4:cb:e3:e6:82:7f:71:51:87:e8:b5:c3:df:6a:c2:
         d3:c7:83:1d:92:27:eb:80:e2:fe:bb:1e:d4:40:86:5f:3d:6c:
         5f:4b:d0:d2:22:11:d9:57:57:b6:44:11:a5:2c:39:3e:7f:a2:
         23:75:a6:a8:8a:6e:3a:ed:3e:70:b4:17:01:6f:65:9e:4c:2a:
         f5:1f:ac:75:2c:03:74:3d:6d:72:4f:17:f0:60:e0:09:c8:ed:
         16:66:af:73:0f:de:4d:87:31:20:f4:ce:69:e2:f0:d8:b3:2b:
         a3:9a:82:47:48:16:97:14:67:f3:9d:e7:de:f4:12:9d:2f:97:
         83:8b:35:18:b3:48:fd:3e:f3:08:04:c9:86:96:52:a6:b7:45:
         03:c8:59:fd:94:9f:a5:65:02:4a:5d:d1:bf:3f:36:f1:1f:a9:
         b8:0e:59:a0:d5:a5:9c:70:6c:9f:4c:1a:48:a0:f1:9f:72:de:
         ae:d6:84:aa:08:67:18:b4:51:3c:bc:14:08:2d:02:72:f1:75:
         59:04:d2:fb:9b:48:13:82:8f:03:fb:fd:4e:00:5f:f9:ce:07:
         fa:bc:67:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6PWOK3zWs+mbbhCoQlhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNTRkNTFhMzI0N2IxN2Y2Zjk2YTBjY2UyNTMwMTkyZGM5
Zjc0MjIwHhcNMjUwNjA3MTUwMTEwWhcNMjUwNjA4MTUwMTEwWjAzMTEwLwYDVQQD
Eyg3NGI4YWQ2YmViMWM1ZTRkOWNkNmJlYTlmOTdkMjg4MWNkNDIyODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+OYNfYXGMS38R9Bad6fANW0hTZk
yULR/5fxgoSK78CIwCuQyncHB3OGfEUYpjCDYeqfWEZ7suOrPNyeUxnnXXWR1q/Y
ZbW2+OFfR/V4zZnQX7oPvOTfHCsJ4o4uROsC73BaWUadwqXWt8DvrbdCdFMicPZ+
hNAZeAGW6mznpd6bcYYt5/6pXIiYQVjExKx+VQPgMmU85HrpMJFezfFAAWd+oYvm
Tep39zGZhPtdceNoZfRgt93AOgR7jQoI1HSEfkILOB+s04Ik9cDuHVAx1JWMlbRS
NQdqoV1ym1urYvlKa54tLT9fykEVansoMX194cJzckUfgw1CVVLmqPPRAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHS4rWvrHF5NnNa+qfl9KIHNQigiMB8GA1UdIwQY
MBaAFF5U1RoyR7F/b5agzOJTAZLcn3QiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGxUVkdqSkhzWDl2bHFETTRsTUJrdHlmZENJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy82NTI0ZjYtNTMyMC00Njg2LWE1YzMt
NzJlMWZjNGEzMDZlLzEvWGxUVkdqSkhzWDl2bHFETTRsTUJrdHlmZENJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy82NTI0ZjYtNTMyMC00Njg2LWE1YzMtNzJlMWZjNGEzMDZl
LzEvWGxUVkdqSkhzWDl2bHFETTRsTUJrdHlmZENJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhYs1aiw
D8rILytVuBaQZnWaiZuymUZtvmkB7TbmuYDK5Ra9yeK7tMvj5oJ/cVGH6LXD32rC
08eDHZIn64Di/rse1ECGXz1sX0vQ0iIR2VdXtkQRpSw5Pn+iI3WmqIpuOu0+cLQX
AW9lnkwq9R+sdSwDdD1tck8X8GDgCcjtFmavcw/eTYcxIPTOaeLw2LMro5qCR0gW
lxRn853n3vQSnS+Xg4s1GLNI/T7zCATJhpZSprdFA8hZ/ZSfpWUCSl3Rvz828R+p
uA5ZoNWlnHBsn0waSKDxn3LertaEqghnGLRRPLwUCC0CcvF1WQTS+5tIE4KPA/v9
TgBf+c4H+rxnOw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:51:49 2025 by rpki-client