Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File:                     XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier:          hUT6HDALx7oYyBRqSexG+aOYKLOmdAOaxf6mcMy8p2Q=
Subject key identifier:   F1:05:FF:57:30:08:7F:0D:B6:7D:18:91:38:E4:F6:14:34:A8:75:AA
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer:       /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial:       0197B77C7C0991025BCBEE79127876F7D113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number:          0E1C
Signing time:             Sat 28 Jun 2025 17:01:18 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:18 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:18 +0000
Files and hashes:         1: 5tqPEp3EliYZS2xI-t2SOYASA6Q.roa (hash: rrWZ9V7KWJ4Q+nTEuZg3LRcJ0iLHgZLsCePpW9vxZts=)
                          2: CFHgd4L73NmnKwbNZX4Ea5xUqNI.roa (hash: 1vwfxPtMAo6Ane/X/c4BMzTm00LQJy+F2i0HA+2GRDU=)
                          3: FNknYOM-2Xofk1XbcOJNM1rObAg.roa (hash: FASTd9f7x4x3qa5aRCBcwSFhMWBiMZ3cOy9OdE4lRwc=)
                          4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: tuFxruGXgoZv60SJ51gTp/NqYq6pPD1zDNEGMSP2qyQ=)
                          5: eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa (hash: hzDVmxrumNi1ZIRQoc0ZsLrFlPxpdn6MZXTqnc7Rq58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:7c:09:91:02:5b:cb:ee:79:12:78:76:f7:d1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
        Validity
            Not Before: Jun 28 17:01:18 2025 GMT
            Not After : Jun 29 17:01:18 2025 GMT
        Subject: CN=f105ff5730087f0db67d189138e4f61434a875aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2a:15:32:3d:8d:70:39:26:3e:44:f4:f5:d0:
                    de:eb:ff:3f:6d:b1:05:8d:77:4b:9a:87:9b:6d:b2:
                    6d:81:65:02:16:b7:c4:3c:59:8a:0e:20:0f:c8:a1:
                    77:58:74:65:25:5d:ab:04:55:38:23:e8:36:ca:66:
                    0c:2b:e7:43:f0:e1:8f:ea:6f:3e:d2:46:6c:4e:18:
                    30:7b:94:95:a0:02:45:e7:d9:02:b8:ab:09:c8:ea:
                    8e:79:a0:43:bb:eb:5f:17:e0:c1:83:3c:c2:0a:37:
                    02:3f:3e:a7:96:9b:65:d9:12:79:77:64:55:3c:f7:
                    e0:05:61:1e:b3:99:62:43:09:da:d1:ed:e8:5f:e0:
                    6f:01:22:14:95:0e:eb:14:a6:26:4a:a1:83:4e:6d:
                    20:c5:9b:56:1b:93:e7:1b:e4:3e:cf:45:80:81:03:
                    23:46:09:c4:fa:fe:b8:ae:ea:bb:c4:fb:f0:d3:ac:
                    35:09:11:26:9a:c1:66:a2:6b:66:0a:d0:bf:d4:0d:
                    d6:c2:36:3d:73:ab:a1:c7:81:0d:3f:f3:3d:fa:b3:
                    69:fa:4d:5e:08:92:b3:83:84:9a:f9:2c:10:3c:e6:
                    34:b9:ee:2e:3e:b5:85:98:f4:d9:37:dd:37:5e:e9:
                    74:f2:3a:05:de:57:92:98:a4:03:42:67:9a:b1:3e:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:05:FF:57:30:08:7F:0D:B6:7D:18:91:38:E4:F6:14:34:A8:75:AA
            X509v3 Authority Key Identifier:
                keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:5a:8e:f6:2b:0c:cb:83:10:e4:37:59:5c:54:fd:3a:8f:e5:
         e0:c4:3a:4b:0b:ae:29:f9:c0:97:82:42:03:77:78:e9:95:c6:
         d8:e7:c8:74:1d:32:38:83:05:45:4b:68:67:2e:25:26:fd:01:
         d8:36:e9:7f:ca:56:81:7d:29:96:96:04:b9:8d:36:47:a4:89:
         a3:24:55:82:48:ae:79:97:87:82:d4:96:83:56:7e:59:5f:6f:
         c2:97:4b:1b:d5:3b:a4:0e:64:e8:10:f2:10:fb:60:2c:67:bf:
         32:07:27:b2:3f:fe:ce:fd:0f:2d:c1:6a:4a:e2:da:09:a0:44:
         5d:4c:22:b7:d4:89:25:77:6e:5d:29:01:37:f5:05:e0:00:83:
         6c:4b:b7:9b:7b:e6:34:a9:3b:22:d8:c4:bc:a0:04:8b:67:77:
         93:10:99:a6:2a:71:35:49:ef:d8:1e:e2:25:5e:e7:91:66:04:
         e6:95:2b:91:c0:27:be:d4:a5:fc:be:ce:06:0d:62:0f:63:f2:
         79:4d:46:bd:06:6f:30:b0:9c:ec:f1:9f:7f:f5:e2:af:8c:54:
         55:68:25:43:7a:ae:35:a4:c2:71:32:19:aa:6b:8a:e3:74:1d:
         9e:f1:30:3a:4f:85:76:8d:a5:f2:58:5d:6e:3e:ee:0e:7c:a2:
         50:13:99:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:43 2025 by rpki-client