Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          Eak6KcLapoWaphx9P4PZs+CewHsajJp0ArTw4WX6WNg=
Subject key identifier:   06:8C:25:7C:34:3E:25:7D:B8:DC:5C:65:D3:3D:3D:23:01:44:BC:63
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       01950F466E01B3812F2C97966E29E67C6887
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          1489
Signing time:             Sun 16 Feb 2025 15:00:28 +0000
Manifest this update:     Sun 16 Feb 2025 15:00:28 +0000
Manifest next update:     Mon 17 Feb 2025 15:00:28 +0000
Files and hashes:         1: 3WOk5xXxxuij6cp4c509MovFTR4.roa (hash: BRAq5QglZZSLB27mttfzU3uMrFESkt4pXeL0Rv1+KDY=)
                          2: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
                          3: iiEWkUxoXvnWVydpu0dagCSQVpg.roa (hash: OBksw9xO5INaqvopdFNxLktTwvc18i++tsqNIqF6kb0=)
                          4: lBd5ayKV19qIMGuCBhbbrB6mWpM.roa (hash: +DZa9foRJclwsy6vlDnsvddvxMKMT8TD44d1ng4qPj0=)
                          5: vjPba2JgQbHt0hsYkVRnRgmwBAM.roa (hash: 8c+Ryn63xF27R3BvDUYHmIGYqOss/zkgsLLLH0vxvzU=)
                          6: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: crooG7xAUvAMDqDKa8b4FIkeVnMqIUXotEoDoDWiduM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0f:46:6e:01:b3:81:2f:2c:97:96:6e:29:e6:7c:68:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Feb 16 15:00:28 2025 GMT
            Not After : Feb 17 15:00:28 2025 GMT
        Subject: CN=068c257c343e257db8dc5c65d33d3d230144bc63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:0a:66:9f:e8:2a:70:81:29:f6:b4:a8:22:
                    db:ab:7e:ec:57:64:12:f7:b1:a4:cf:80:53:28:38:
                    5a:7e:a8:f2:8d:65:e6:0e:f3:02:8c:28:86:f8:c2:
                    cf:a3:b2:f2:21:ee:4b:5b:16:ea:61:f7:33:56:b9:
                    bd:e4:ba:1a:9e:8a:08:a2:77:c7:c4:f1:71:a1:3b:
                    dd:5c:07:a3:07:80:bb:d3:3f:d1:5f:ae:37:36:28:
                    0b:16:22:14:e8:79:63:87:7e:6a:19:c2:22:0d:e7:
                    59:72:c4:98:5d:73:73:7e:8c:b6:72:3c:0e:5c:4d:
                    ce:36:6b:17:ae:ce:4d:6e:12:03:eb:f9:9d:28:cb:
                    56:49:67:f9:82:f3:21:93:88:72:a5:d0:2b:8b:74:
                    55:49:46:f3:60:90:c9:56:e1:54:77:74:3a:6c:87:
                    2d:65:9e:87:c5:97:75:df:73:79:74:0e:c6:ca:34:
                    ba:ff:87:23:ca:8e:20:5c:33:e5:60:30:4d:51:aa:
                    98:93:57:22:5e:20:83:53:4d:93:1f:c1:39:26:a7:
                    6e:7e:61:7d:e4:39:79:a4:1f:45:0f:11:26:d1:47:
                    a1:35:e5:1c:e2:59:b6:c7:a0:f3:ae:9b:d6:f8:b5:
                    ea:7b:b2:84:28:89:82:ba:0a:45:da:45:d5:46:de:
                    4f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8C:25:7C:34:3E:25:7D:B8:DC:5C:65:D3:3D:3D:23:01:44:BC:63
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:b9:0d:93:24:1d:31:1c:86:03:51:9a:0d:91:f1:e0:f1:2f:
         74:45:88:1f:1f:ec:8b:e6:1c:8a:e6:e5:0b:49:24:6c:74:26:
         c3:41:f7:2d:8e:7b:5c:da:ae:b7:9b:0d:4f:9c:52:72:cb:2b:
         1d:ab:66:f8:b9:29:9b:c9:af:20:5a:e7:52:79:08:78:52:d7:
         81:98:3b:b1:5c:58:0b:9b:5c:ca:b0:4b:78:bd:7e:93:2d:56:
         c2:30:22:60:20:be:ba:91:04:1a:de:83:47:3f:31:e9:48:e2:
         e7:b7:55:98:29:70:69:b0:e7:95:b1:fb:a4:b8:14:11:9b:55:
         99:5e:02:94:b1:b7:84:11:ae:64:47:b9:e6:45:e8:21:58:94:
         a2:9c:1c:49:5c:9d:c4:d7:f1:5b:81:a6:44:b2:c5:38:bc:7d:
         d1:c6:fe:b0:91:8f:ba:2c:5d:e4:69:e5:a7:c9:91:2b:ab:3b:
         31:43:bd:90:1f:c4:3c:15:30:86:48:a0:63:4a:3c:ed:8c:e7:
         30:5f:24:2a:90:e6:d7:c8:60:a5:02:50:3b:37:90:9b:29:dc:
         68:d8:87:35:8b:fc:fa:8a:49:51:62:84:0f:02:17:de:08:f1:
         4c:b9:a9:09:52:ad:73:19:87:cd:1f:55:99:f1:e6:74:53:08:
         9f:51:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:30 2025 by rpki-client