Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File:                     xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier:          erW5qX3uq6Vqpe/LbzmFrpEgxpdNo53DZVUjJf+BEPc=
Subject key identifier:   CB:ED:5F:67:6B:EA:1C:C5:AA:34:26:C5:6B:78:44:40:E4:72:59:3D
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer:       /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial:       0197C9F06B586D25C357050C42A262501D7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number:          0A78
Signing time:             Wed 02 Jul 2025 07:01:05 +0000
Manifest this update:     Wed 02 Jul 2025 07:01:05 +0000
Manifest next update:     Thu 03 Jul 2025 07:01:05 +0000
Files and hashes:         1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
                          2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: 63EWeNSD48WZmls3MVM4zg223cfeoB9ZethnT+5Pwds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:f0:6b:58:6d:25:c3:57:05:0c:42:a2:62:50:1d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
        Validity
            Not Before: Jul  2 07:01:05 2025 GMT
            Not After : Jul  3 07:01:05 2025 GMT
        Subject: CN=cbed5f676bea1cc5aa3426c56b784440e472593d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:ab:e1:57:47:7a:f6:51:f9:5e:c5:eb:46:
                    4e:b0:b8:8a:5c:1b:32:bf:e2:cc:16:dd:47:cf:77:
                    d6:0b:6b:97:8a:6f:f8:7b:bd:42:5f:82:2f:10:5b:
                    1e:2e:a5:03:f4:bb:7f:da:2a:a4:5c:9d:43:37:6f:
                    04:20:cd:7a:12:5b:02:77:d2:5c:9a:30:a6:08:39:
                    76:0f:6a:b7:5d:03:11:ad:4f:f7:2d:de:d9:7b:5e:
                    1d:66:5b:74:a8:cc:f7:62:b1:9f:80:2d:1a:ed:93:
                    47:a9:1a:86:2e:b2:d0:ef:56:d6:2d:88:e9:06:82:
                    4c:c3:f6:15:df:0d:90:71:fa:6f:fa:bd:c5:2e:7e:
                    cb:38:b4:1f:b7:e3:bf:56:bf:c5:63:22:91:d5:ce:
                    30:f5:9b:56:87:ac:42:32:88:de:32:0d:5d:14:c5:
                    00:12:0f:29:9b:46:f4:46:2d:99:24:6b:e8:e1:ac:
                    75:86:23:1a:d0:bf:2a:cd:46:49:7b:df:38:89:3d:
                    44:35:7b:e7:4c:8f:31:ff:ea:2a:c5:8d:fb:41:5e:
                    1b:e8:e3:9c:74:9f:17:f5:14:e5:7a:da:be:02:ab:
                    e5:c5:69:34:a6:b9:82:91:f8:f3:fb:5e:fa:c3:7d:
                    d0:59:90:b9:b2:a5:5f:e4:1e:3e:80:d3:3c:ef:80:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:ED:5F:67:6B:EA:1C:C5:AA:34:26:C5:6B:78:44:40:E4:72:59:3D
            X509v3 Authority Key Identifier:
                keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1c:8a:16:af:04:1c:8a:14:dd:64:41:d0:71:21:00:ca:fe:
         6c:0d:2d:9f:cc:ab:c2:30:35:65:fb:aa:f4:8b:ef:bb:c7:0b:
         72:9a:8b:6d:73:0b:ba:52:c9:83:06:8f:bf:8e:ad:ae:ce:78:
         0c:89:2b:d7:95:7d:1c:45:04:17:5b:ec:fc:2f:5d:53:32:91:
         5d:3a:9d:16:9b:97:05:27:9b:88:26:48:cd:a2:e5:43:a7:b5:
         93:c3:ce:de:bc:ee:68:58:c7:f2:94:b1:97:5d:ff:30:be:ee:
         b0:4d:e9:8f:79:f6:2a:3e:b6:92:31:cf:1b:00:49:8c:7a:0a:
         64:3c:74:ca:f4:18:c9:c6:76:be:d3:4e:a3:f4:b5:2b:23:99:
         72:0a:a4:a2:e1:88:50:20:7b:97:9f:ae:32:be:ac:76:05:b0:
         5a:2f:dd:6a:d8:4a:e6:e4:72:63:90:41:df:f6:8f:b9:d5:72:
         cb:8a:67:3c:e4:6a:53:8c:2b:0b:9c:7b:fa:e4:fc:f2:59:fc:
         2f:7a:47:db:73:64:f7:68:3b:b0:17:86:46:37:79:06:f6:29:
         2e:56:ef:73:06:e0:0d:53:8b:ec:7b:0c:a1:26:ef:8e:c7:dd:
         f8:f3:8f:3e:eb:1b:aa:42:27:2f:47:49:be:85:1d:e2:9f:ab:
         7e:6e:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:11:18 2025 by rpki-client