Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          63RYAaGQJ1bu9WQwK4izFpcfJ08k2a41TkosDcMCTKw=
Subject key identifier:   F6:65:9C:7D:3D:90:59:64:48:85:B2:3A:1B:23:4E:E9:EA:67:19:AF
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       0196B10E688078EA5B3F644E8B8BD33608A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          05F5
Signing time:             Thu 08 May 2025 18:00:33 +0000
Manifest this update:     Thu 08 May 2025 18:00:33 +0000
Manifest next update:     Fri 09 May 2025 18:00:33 +0000
Files and hashes:         1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=)
                          2: ISwu8WB7qyBLfmKkrp_dDZ3x_1U.roa (hash: qQJXsssGcHnCv5RADljHJRBio84QXVcGD1FkE+MM62U=)
                          3: NLVTq0fOyRU_8jDE40NtcMyd-CQ.roa (hash: raIph2bihZjajkCc/rrPwQ/IODtF/UxH380z+IjhFkM=)
                          4: U8uZttP15oZyoOdC4yJMGnc-c0U.roa (hash: T5n+Pp56XalYqTIUYU27BO7TOuaAqMSh2xkCxmvOElQ=)
                          5: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: FDEXxwOJeFR8tCQ9pf5Bu3tWVCVzsX3VhRZfMqdND/c=)
                          6: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=)
                          7: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:0e:68:80:78:ea:5b:3f:64:4e:8b:8b:d3:36:08:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: May  8 18:00:33 2025 GMT
            Not After : May  9 18:00:33 2025 GMT
        Subject: CN=f6659c7d3d9059644885b23a1b234ee9ea6719af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:ed:cf:3f:ba:d4:13:e3:fb:74:01:76:6e:
                    9c:74:de:37:95:8c:10:b9:79:de:15:bd:30:f4:73:
                    49:37:9f:6b:46:80:b5:d4:3d:3c:8b:2c:1c:a0:19:
                    f2:8d:6a:55:f6:51:eb:e8:a0:7f:aa:c4:06:9b:c5:
                    6b:27:b4:16:f5:69:4e:5c:77:39:dc:a0:11:12:b4:
                    df:c4:0d:66:ad:1b:db:f1:61:cd:e7:ab:5d:91:6d:
                    de:e0:6a:b7:8d:ff:24:fd:00:e6:66:cd:82:6a:57:
                    79:da:d3:50:2a:85:0f:9a:ec:2f:c1:d3:5b:02:3d:
                    1f:0c:03:42:2d:e2:b2:55:3f:03:a4:a3:7e:37:bb:
                    98:5a:71:9a:f7:3c:94:1a:42:9c:a2:c8:c4:6a:44:
                    17:3e:93:64:7d:9d:84:40:f0:7c:d3:47:9b:f8:b6:
                    59:28:14:97:83:7d:90:74:6b:22:ab:e3:03:39:3a:
                    71:ae:31:e2:05:78:ad:4c:9c:4b:f0:50:90:ae:a7:
                    aa:0b:8e:46:89:e0:29:6a:6e:16:5f:09:26:3c:e2:
                    42:75:4b:18:a5:39:4b:ac:b9:f7:09:8c:91:3e:6c:
                    0a:79:98:72:d5:7c:85:d5:e9:5b:79:f5:28:c6:34:
                    cb:d6:69:11:a4:3a:1e:59:ed:11:3a:88:3c:c7:ca:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:65:9C:7D:3D:90:59:64:48:85:B2:3A:1B:23:4E:E9:EA:67:19:AF
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:8a:66:18:7a:13:cf:14:34:00:d5:f3:c9:7f:bf:e3:a3:7b:
         11:b4:b2:16:2b:c9:cb:0a:0a:cd:d1:61:c0:bf:01:14:ad:0e:
         9e:aa:05:90:77:bd:15:0b:8d:5e:26:08:26:56:3f:b9:25:5c:
         3f:27:5a:8e:2c:27:9c:0e:93:a2:e6:7c:7e:60:df:b1:97:eb:
         8c:be:42:7a:bc:e7:c4:66:8a:67:60:f6:97:e0:d7:e4:29:4b:
         32:f1:92:a5:4c:41:6f:a0:0f:2f:36:c0:eb:f0:8f:54:4e:b6:
         68:63:7b:ac:a1:fa:2b:54:29:55:4e:0a:3e:ac:3e:6e:e2:4e:
         65:08:49:9d:5f:a1:01:03:8e:f8:65:d2:ad:f4:db:3f:3c:98:
         81:6a:85:d4:c0:c4:41:4f:9b:89:ee:02:c3:11:4c:87:f1:18:
         ac:0b:c4:05:95:cb:82:da:57:fb:72:af:24:06:93:42:f0:19:
         2d:6e:7e:a2:d0:cf:db:fe:94:d3:5e:13:37:a0:8f:e8:c8:a3:
         08:f2:88:6b:39:24:d2:17:64:b6:8c:30:a5:76:66:59:60:df:
         82:b0:b4:8a:3e:e2:8b:17:cf:d3:49:5c:76:25:37:db:2d:dc:
         0e:84:1f:13:dc:79:b2:17:79:8f:e4:be:6a:b5:a0:40:10:59:
         e7:f0:82:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:06:53 2025 by rpki-client