Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
File:                     x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft (raw, json)
Hash identifier:          4hsw1Ht+4jvUit3MFgdSSRDfN2DWQ6JlAZ3jwpP3Bdg=
Subject key identifier:   ED:55:6F:2D:81:9C:75:BD:41:D5:62:20:F7:5E:ED:09:CE:1D:3D:44
Authority key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
Certificate issuer:       /CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Certificate serial:       0197C6821AD5237CCBBB9837F8B0791D7416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
Manifest number:          129B
Signing time:             Tue 01 Jul 2025 15:01:44 +0000
Manifest this update:     Tue 01 Jul 2025 15:01:44 +0000
Manifest next update:     Wed 02 Jul 2025 15:01:44 +0000
Files and hashes:         1: MnEhxi_woQM3cXv5W6rDC8mvyKY.roa (hash: kYcuDCyVLUhxBSbVQtzSrwd5iX/KUoxvsuaVTI7bR60=)
                          2: x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl (hash: jupYDincmKzQUyTOoT5WZUYOHsjdrhjkSrqQgRUFmB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:82:1a:d5:23:7c:cb:bb:98:37:f8:b0:79:1d:74:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
        Validity
            Not Before: Jul  1 15:01:44 2025 GMT
            Not After : Jul  2 15:01:44 2025 GMT
        Subject: CN=ed556f2d819c75bd41d56220f75eed09ce1d3d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:a4:bc:57:2d:3b:06:1a:44:cd:64:a5:58:
                    04:a8:ff:92:19:44:79:2e:df:b0:db:aa:7c:d9:7f:
                    a3:95:33:e9:54:8c:b8:e6:f3:79:e4:0f:bd:f7:ca:
                    63:dd:e9:4a:df:c1:db:30:62:c8:e2:07:ae:c4:39:
                    c6:6f:c2:fb:e3:20:6e:ac:fd:08:02:e1:24:75:db:
                    8f:f4:01:77:d6:8f:d7:93:c4:07:0d:42:7e:ee:67:
                    5d:2c:8d:c3:24:1d:6e:3c:34:87:05:54:3c:67:2e:
                    91:bc:f0:73:b9:a4:f6:e4:f8:96:23:37:07:b0:a5:
                    98:6e:f0:c8:ce:9c:76:d6:aa:9c:dd:f9:65:56:d3:
                    01:57:55:ef:e7:cc:53:23:4d:a3:8d:20:e8:48:a4:
                    ca:3a:86:35:b8:c6:81:51:a6:06:02:fc:69:07:13:
                    8b:1a:42:c6:05:1a:33:55:17:4e:ae:e7:0e:d2:d6:
                    06:09:88:d8:00:4b:18:5c:09:93:0e:2d:58:f5:9e:
                    93:6e:60:33:ed:59:52:b9:43:f2:82:a7:f1:2e:8c:
                    65:da:83:1c:cf:9f:27:37:b1:1e:2a:e0:d6:b3:7b:
                    67:fd:17:61:ad:3f:74:80:f5:af:14:ec:cb:0b:c2:
                    4a:8d:d3:44:86:ab:da:2f:b4:e9:9d:74:eb:56:21:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:55:6F:2D:81:9C:75:BD:41:D5:62:20:F7:5E:ED:09:CE:1D:3D:44
            X509v3 Authority Key Identifier:
                keyid:C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2a:74:a7:56:02:04:8f:f1:eb:aa:ff:e4:c7:f6:63:a5:db:
         a6:9b:ca:77:e4:2b:b7:e5:e5:df:8f:4a:82:a7:31:fa:4d:05:
         11:10:9d:bc:e8:61:56:0a:3d:ef:f2:b4:d9:55:dd:78:d1:cb:
         79:0e:1b:b2:81:9b:bf:ca:07:9b:e3:23:c0:6f:3d:36:2d:3a:
         3c:19:df:60:5e:6e:af:45:a3:87:f2:7b:c1:85:3b:0b:ed:34:
         82:7c:24:bb:71:60:82:ec:ca:e8:0d:ee:de:b8:cb:f0:ec:be:
         a6:7c:6d:52:96:c9:e0:f6:6a:47:7f:a0:1a:92:6f:0d:7e:e7:
         a1:2f:87:de:4c:bd:1a:2b:3c:c7:0b:f8:9d:95:2f:10:b2:08:
         99:ec:2a:21:4c:45:e4:00:2d:9e:81:f9:db:2a:b1:fb:e0:38:
         a0:04:ed:2a:fc:dc:72:b4:19:e5:5c:ba:09:8c:b8:dc:e2:b8:
         11:6d:b5:2f:2c:09:1e:e9:4f:67:40:1a:5d:97:8f:e1:f9:36:
         3b:c6:7c:37:d5:57:b8:19:56:84:26:1d:b6:dd:ca:5f:fe:27:
         3d:34:1c:d3:82:9a:28:08:a1:f4:90:f6:83:29:6a:51:68:1b:
         c4:f0:1f:69:a3:40:e9:a6:ea:0e:9c:1d:78:c5:a2:85:d5:04:
         84:18:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:30:59 2025 by rpki-client