Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          Ulg1kTsMeFm4QoIZ9ubvd1FeZ6iVo+qCsd3bRBPpTzY=
Subject key identifier:   60:0A:FF:C9:B7:B8:1C:1E:CD:9F:39:51:3D:2F:25:70:48:A9:B6:84
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       019745F8E36E7040B4FFF57770299C52D4D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          15B1
Signing time:             Fri 06 Jun 2025 16:00:28 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:28 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:28 +0000
Files and hashes:         1: 0U3Gso3ODnWaRUyku2KbHXOd2nE.roa (hash: OjHUqZ7uYTApLthTiQNLejjbsCRnlAUYsAqNFNIG54g=)
                          2: 54ZmeVEdiSRDGRRG_DI6wWiUd7g.roa (hash: JFZc+GyxBOryjMHw3/n1I31IV2py6fuY1AjRNQU0bIg=)
                          3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
                          4: wVptusVHIdbO2Rty9inFJlCpXfo.roa (hash: VLpPb0bMQpDYHBCAVfuSVFIISUNTNn9pYkADsImtNL0=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: z/syBXzWrpY8llncFzsjxO7ctysNlkaU2RXk0zH0Jas=)
                          6: zQ-KSJ7-TjaiG9uymKq9s3FHrzQ.roa (hash: FbTMvTLuTW6XcX7GqJJNJmaL2pjOC6IOrZv/ZrzS0Uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f8:e3:6e:70:40:b4:ff:f5:77:70:29:9c:52:d4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Jun  6 16:00:28 2025 GMT
            Not After : Jun  7 16:00:28 2025 GMT
        Subject: CN=600affc9b7b81c1ecd9f39513d2f257048a9b684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:e2:cd:a9:b9:14:7a:db:40:f2:4d:05:32:
                    14:78:a1:d8:e8:a6:e8:8d:48:f4:f4:5f:ec:f4:85:
                    3e:4a:b3:5d:9d:f1:20:00:07:89:da:4e:93:2c:c6:
                    34:58:f1:db:c1:0e:ed:bc:75:cf:40:9a:f4:aa:08:
                    fe:6b:12:4b:30:d6:d3:f4:f6:c0:5f:db:a8:61:5a:
                    53:e9:83:71:4d:4f:22:bc:79:22:7f:23:18:2c:4b:
                    49:bd:15:17:d3:44:0d:ee:8f:e4:33:24:87:c7:b2:
                    41:f3:37:29:8f:99:49:be:9f:c5:06:f2:a0:d7:17:
                    77:60:c9:87:44:2c:6d:d9:b6:cb:2a:ad:37:da:f4:
                    a4:a2:24:a1:5b:02:cd:f3:7a:ba:9e:d7:95:ed:03:
                    a4:4a:8f:04:3e:6f:ad:53:5f:a5:8a:40:76:7b:87:
                    30:ca:f5:01:fb:8e:7d:68:ed:4e:b6:b6:70:68:30:
                    d9:ff:6c:98:7b:6c:61:22:d1:e5:90:4c:f8:f6:ea:
                    d0:ad:1b:e7:99:27:d9:30:a6:c0:81:a3:6d:85:f2:
                    66:f5:7e:1c:34:6a:24:4d:94:1b:8d:a1:86:4a:37:
                    b4:d7:4d:5e:79:e0:f3:aa:fe:2b:9b:8d:13:97:28:
                    96:14:13:eb:da:ca:30:fc:09:d9:f0:4e:a1:ae:b6:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0A:FF:C9:B7:B8:1C:1E:CD:9F:39:51:3D:2F:25:70:48:A9:B6:84
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:d7:52:86:b0:ed:fd:2d:52:d0:63:ce:fd:e0:32:34:dc:11:
         be:a4:af:ba:0b:76:bb:95:7d:de:4f:29:bd:38:0b:52:1c:e1:
         0d:1d:26:9d:65:6a:a7:66:0a:9b:55:eb:9e:80:7f:b8:01:58:
         43:7f:3b:e4:cc:0a:b4:cb:65:48:46:41:a4:d7:6b:b2:7e:23:
         37:54:f4:f1:7e:76:04:1a:ee:2d:cd:8d:a9:31:4c:0f:e8:07:
         2e:5d:ef:4d:40:f6:b6:ef:7a:93:eb:d5:78:62:09:f2:63:9e:
         30:aa:47:e0:d4:1a:4d:1b:e2:b0:fa:ba:59:9d:ac:bd:bd:4f:
         15:57:38:93:b3:e7:bf:c3:33:18:9f:39:83:34:30:94:85:e1:
         71:b3:8f:c6:10:1d:e1:02:1e:a4:63:09:54:22:d3:3a:b9:11:
         fc:36:c0:30:16:16:61:32:fe:fb:7b:e5:f2:a2:0b:55:94:79:
         00:35:91:0d:73:a6:40:c2:4f:e4:4e:f4:e5:83:61:8d:c4:f9:
         12:f2:52:f9:04:93:f2:80:2c:e2:d1:1a:72:5b:bd:1f:d3:72:
         c3:13:5a:f4:d4:2b:4d:8c:42:7c:f3:b7:b9:b8:db:41:02:a1:
         41:2e:52:04:5c:5e:93:94:18:1d:47:be:af:0b:f2:89:c9:b9:
         02:65:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:28 2025 by rpki-client