Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
File:                     XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json)
Hash identifier:          fy9OC1EQrCdss249xtTiWQIIsEGFKa4SipEP33dfZ68=
Subject key identifier:   B6:A3:87:13:FB:7B:3A:10:6E:A7:93:3C:E1:C3:AC:2E:D0:39:E1:6C
Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
Certificate issuer:       /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Certificate serial:       0196BA48E7A66ABAB66A6D0ACCB2D728A2D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
Manifest number:          75
Signing time:             Sat 10 May 2025 13:01:02 +0000
Manifest this update:     Sat 10 May 2025 13:01:02 +0000
Manifest next update:     Sun 11 May 2025 13:01:02 +0000
Files and hashes:         1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: kS1tcUl17DBJ0dSl+oCGRjdM3xYcBdzszuKm6NI4Fek=)
                          2: sHWJgB25eZ5MsxkzvHCaC9Q9eBU.roa (hash: tfZrpnb6Dc4xLEKe9XCNdEh3R+ehL6A7wZM06Ogyh8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:48:e7:a6:6a:ba:b6:6a:6d:0a:cc:b2:d7:28:a2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
        Validity
            Not Before: May 10 13:01:02 2025 GMT
            Not After : May 11 13:01:02 2025 GMT
        Subject: CN=b6a38713fb7b3a106ea7933ce1c3ac2ed039e16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:dc:90:b4:e3:3d:b6:8b:a9:79:c8:97:df:
                    f0:63:bb:0e:86:39:55:c3:fb:88:ec:af:bb:f4:e8:
                    34:8c:ac:24:68:32:3f:61:bb:97:6a:95:c9:5c:a0:
                    0b:0b:1e:0a:96:99:f6:e2:b2:82:1d:bd:8d:4d:79:
                    67:7c:a1:0c:c9:bd:7f:97:d4:53:35:9b:04:52:8c:
                    7b:ea:86:59:05:37:93:f4:16:cd:34:a4:93:1b:01:
                    27:ba:53:78:9e:51:fd:8b:e9:68:7f:34:4a:90:fe:
                    22:80:20:26:c7:78:c6:95:65:7a:22:29:d3:5c:a3:
                    40:af:b1:ab:58:b9:eb:df:85:66:d0:0c:af:b8:16:
                    2f:00:73:47:0f:3d:6a:05:20:46:06:4c:8f:87:ee:
                    72:f9:70:1e:3d:11:0b:06:45:d8:e7:e1:4d:1f:ad:
                    c9:3e:2c:e2:3b:ad:ee:0e:82:ee:94:86:18:58:41:
                    9d:cc:81:68:54:03:17:83:67:52:bd:82:8e:2b:70:
                    4d:a1:de:7f:ee:77:74:a1:04:e6:fa:dc:6a:1c:77:
                    53:97:eb:9b:02:18:d3:68:c8:5f:98:97:bd:f1:cb:
                    27:8b:d4:45:5d:6f:6b:67:53:da:ca:31:89:bc:36:
                    29:55:aa:99:16:5b:66:c0:60:3e:d1:ef:7e:72:d1:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:87:13:FB:7B:3A:10:6E:A7:93:3C:E1:C3:AC:2E:D0:39:E1:6C
            X509v3 Authority Key Identifier:
                keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:22:9c:85:31:62:a8:0e:9a:7d:13:3e:25:05:67:a3:c2:9b:
         e1:f2:b3:26:72:b8:02:47:3d:a9:48:34:ab:e2:59:97:00:3a:
         cb:d2:35:dc:99:1a:b0:a1:44:78:b5:02:d4:76:b4:92:2b:e8:
         1b:85:c3:71:86:4a:87:78:75:b6:0f:5a:67:a0:00:4f:7f:c0:
         05:44:f2:f0:1a:6d:3e:19:47:dc:29:24:09:a7:74:c4:a2:ed:
         72:97:7a:47:49:43:b2:91:06:c2:5e:9d:fa:8a:b6:eb:e3:1a:
         9a:d4:1f:aa:51:45:1a:9a:e7:7d:68:73:09:52:30:e7:bf:a2:
         93:dc:a7:48:46:3d:47:17:51:b2:d8:ae:9b:89:63:5a:ae:d1:
         ba:87:d5:1f:00:c4:dc:9a:87:5e:86:81:50:06:aa:03:ff:39:
         b9:b8:6b:e9:02:1e:1b:26:ed:7a:7b:76:d7:da:89:e2:bf:64:
         d9:43:92:3a:7e:37:d1:7e:64:71:b0:63:82:84:71:2c:4d:c3:
         96:3f:e3:83:99:d8:0d:72:52:1e:6e:03:83:7e:2c:a2:75:f6:
         a3:25:60:34:41:b4:2f:a9:13:66:77:cf:52:9a:94:1a:f9:2d:
         bc:75:55:21:1e:4f:4a:5b:f0:47:3c:05:9a:12:f2:57:62:33:
         c6:36:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:22:51 2025 by rpki-client