Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File:                     Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier:          eLlbITmxRvJT7sdDC0yOkB7KETtiiYblTmINhJLDbA0=
Subject key identifier:   6C:47:A8:46:11:08:98:68:00:9D:2D:3F:38:42:CC:53:1B:96:AA:AB
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer:       /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial:       01969ED13305357DD8C75BCC470F3B20026D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number:          1525
Signing time:             Mon 05 May 2025 05:00:32 +0000
Manifest this update:     Mon 05 May 2025 05:00:32 +0000
Manifest next update:     Tue 06 May 2025 05:00:32 +0000
Files and hashes:         1: B9inWc_Zru3DBQYoTCckNvJAJjc.roa (hash: rR3/vKr9FiP0LIExuGsty/9oTkiBHkZoBOxEJZQ25PU=)
                          2: N2iXQzwnJ7HrnDOcVCjZn3aCcVw.roa (hash: YJwpPg1gpuiDf+AucM/2eZ40ZoPeyXC6eibq/R/5usA=)
                          3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: RoWFFHa/sad5t5XtLBxX94uq6l9d85ISXgxyON2XmUE=)
                          4: fXCcgUSD-6HNgkjQxM90O6lfJzY.roa (hash: hPPYSOb/+jw/H4XCWA1NGkrCD/90gdTOvYWg/h1cmfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:d1:33:05:35:7d:d8:c7:5b:cc:47:0f:3b:20:02:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
        Validity
            Not Before: May  5 05:00:32 2025 GMT
            Not After : May  6 05:00:32 2025 GMT
        Subject: CN=6c47a84611089868009d2d3f3842cc531b96aaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:ec:f4:b6:99:49:94:4d:29:ed:44:93:1b:
                    82:14:56:da:d5:00:ba:ca:fb:49:68:d0:28:90:ea:
                    69:43:cd:54:3c:0f:76:a3:75:df:40:e7:1b:ea:3e:
                    66:65:23:71:eb:48:9c:d4:63:70:8b:00:43:de:8e:
                    76:02:d7:4c:6f:11:fb:4d:10:37:2f:31:29:43:38:
                    f3:ea:cb:c8:5c:90:09:3d:f6:63:7b:c7:bf:4e:1f:
                    33:e1:ac:55:ec:82:f9:46:2b:c3:d2:3d:40:94:40:
                    0d:85:8f:18:0b:37:fa:37:d7:6e:80:a2:cc:41:bc:
                    a2:93:da:5b:41:77:67:6a:23:5d:03:b1:74:18:7b:
                    c8:c2:4d:fd:a6:ae:db:72:0a:57:15:36:d8:7c:c1:
                    c5:20:ee:88:d4:29:59:d5:54:27:4d:90:26:78:a0:
                    03:b8:67:cb:68:4e:fa:cb:d2:96:40:72:29:c5:42:
                    74:29:ef:ee:f2:cb:dc:e7:e3:a3:a7:fe:78:61:08:
                    6b:0e:bf:eb:bf:b0:87:5c:21:90:9f:7d:ea:5b:8c:
                    d2:57:b5:f1:ce:1d:66:d8:92:b6:97:f6:c8:59:53:
                    c5:ca:3c:cd:af:48:8a:06:f9:e0:4c:8d:9f:b8:3e:
                    0f:24:da:2a:cc:8c:23:c9:a2:a2:55:7c:38:25:cf:
                    ae:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:47:A8:46:11:08:98:68:00:9D:2D:3F:38:42:CC:53:1B:96:AA:AB
            X509v3 Authority Key Identifier:
                keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:49:02:a4:a4:70:e2:d2:c5:e7:4e:27:7a:bf:71:4a:5d:a5:
         af:11:f1:53:19:01:22:35:df:6a:40:57:02:b2:7b:f8:66:a2:
         16:cd:a6:78:80:4c:5c:c7:44:0c:08:a7:f8:d0:4a:f9:d9:89:
         fe:e3:bd:fb:33:66:d2:fa:12:0d:de:71:cc:dd:96:42:f1:f2:
         32:b6:2b:01:6c:02:de:02:3f:ba:83:60:84:19:b6:40:9a:08:
         f8:c7:fd:8e:d5:ad:b7:70:92:56:0a:58:0b:24:6f:39:d9:a5:
         81:d1:30:c2:61:17:8b:1e:3a:fa:2f:7c:77:5d:2e:49:27:ac:
         39:d0:26:2e:35:4a:ae:6a:8c:27:30:31:2d:42:e7:2d:2f:16:
         a7:91:79:ad:3a:14:17:99:e7:48:e9:82:62:1a:57:d5:fd:54:
         90:a7:9a:a4:c5:7b:00:a8:1c:c7:4b:00:ec:5c:b6:ed:e4:62:
         63:8f:a1:22:91:f1:2b:97:85:da:66:65:ea:b9:5d:f1:c9:87:
         99:90:9c:62:c6:f1:b4:40:aa:68:da:9e:49:30:f3:59:e0:77:
         98:77:bd:14:a8:db:7c:6d:1f:b0:ce:4a:be:a0:92:78:d0:68:
         61:81:1a:a0:d3:0b:4d:4c:c7:1d:70:a4:1f:4f:00:ee:3f:a2:
         aa:97:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:41:16 2025 by rpki-client