Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File:                     xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier:          aIO9oDgO1eOFw5FOgfn2n5V3ZC/0E0ajbh3OQP7BrsI=
Subject key identifier:   83:2B:34:77:57:97:67:75:7D:DD:8C:A8:E2:14:4B:79:C4:4E:52:DF
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer:       /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial:       0197CDCE9C63EAF289C35B8DF3A291E8D92C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number:          1554
Signing time:             Thu 03 Jul 2025 01:02:39 +0000
Manifest this update:     Thu 03 Jul 2025 01:02:39 +0000
Manifest next update:     Fri 04 Jul 2025 01:02:39 +0000
Files and hashes:         1: kFAWzJxAiMhkm4NOvHOiD5PY66g.roa (hash: QJZEuzHLkJsVvRtJ8dcL8i0clH/1NRZmPUpPgEFazCw=)
                          2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: o9jbkv0EE4QiPi2TMVlFj5vmT6vAsXDGktgiibIKe0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 01:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:ce:9c:63:ea:f2:89:c3:5b:8d:f3:a2:91:e8:d9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
        Validity
            Not Before: Jul  3 01:02:39 2025 GMT
            Not After : Jul  4 01:02:39 2025 GMT
        Subject: CN=832b3477579767757ddd8ca8e2144b79c44e52df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:d5:a2:08:26:c8:1c:1f:9c:44:24:78:90:
                    5a:f8:31:01:52:b9:bb:c8:1a:a5:50:3b:3c:7f:af:
                    49:7f:be:8a:41:9b:63:3e:2d:76:58:c7:e0:77:4b:
                    bc:40:54:9f:49:9b:7e:5e:e4:46:a2:51:60:21:1a:
                    bb:02:8b:22:1c:0d:a7:f4:5b:ef:1d:d3:78:b7:be:
                    87:37:70:71:9d:5e:12:00:21:7c:2c:a7:5c:b1:df:
                    e1:70:27:d7:e3:8b:26:43:24:97:40:ea:86:57:7b:
                    57:fa:5f:79:86:42:45:fd:36:8a:0d:8c:31:cc:2c:
                    be:a9:96:8a:85:bd:6b:98:db:9a:72:12:6d:db:57:
                    60:db:18:e4:9f:2a:47:7b:1d:6a:46:34:d3:7c:d7:
                    a7:ed:f7:77:e5:35:84:d3:68:d5:b4:95:78:51:57:
                    4d:be:7c:e0:dc:92:cb:2a:0c:a9:67:ad:4a:12:01:
                    cd:51:28:31:d4:ad:95:71:0f:6f:3b:47:14:a0:bc:
                    88:05:70:da:95:ac:24:96:5f:e5:2f:1a:b7:01:34:
                    74:3e:19:81:10:9c:f7:79:1d:d7:aa:e3:1e:28:30:
                    cc:ba:ca:d0:9a:73:f7:6e:61:c3:b2:20:8b:ee:a0:
                    15:82:b5:53:80:3e:0d:83:60:f7:b7:36:ba:67:32:
                    b4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2B:34:77:57:97:67:75:7D:DD:8C:A8:E2:14:4B:79:C4:4E:52:DF
            X509v3 Authority Key Identifier:
                keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:04:08:bf:26:b6:dd:32:35:1a:22:82:33:83:dd:c8:fb:37:
         0b:ce:c2:5b:84:1c:e4:c8:17:3a:32:cf:02:07:ac:ed:e1:e6:
         ee:35:07:bb:3d:ed:9e:6d:52:e0:c4:af:57:ff:f6:48:89:0f:
         9c:38:2f:00:63:4a:db:de:49:d8:64:c8:53:76:e2:8c:4f:2a:
         a1:3a:76:ab:09:85:e6:75:18:07:3e:a8:c4:d6:21:32:11:11:
         07:94:e3:9e:27:5c:c3:57:81:e2:38:81:2c:46:49:f7:39:55:
         fa:51:75:5e:80:f0:9a:33:fa:3d:bc:61:59:1e:43:9f:ad:d3:
         27:7b:0f:3f:0b:29:f7:76:24:e8:50:d9:96:e3:a1:3b:6b:f2:
         8d:e0:a8:76:4e:25:1b:0b:e9:c6:ca:ca:a8:8e:00:b9:ae:5a:
         ab:bb:cb:56:79:16:a3:e3:da:df:4d:a5:6e:0c:85:ac:a1:18:
         6b:b8:75:f6:45:2e:71:5d:b7:17:8f:00:8b:a8:96:f8:97:3a:
         ae:e9:8e:b2:80:84:cc:40:68:24:a7:4b:bd:6b:cc:c4:0d:89:
         74:30:58:a2:9c:6f:94:69:dd:80:aa:69:34:6f:c2:81:e7:7c:
         11:d6:31:28:54:fd:8e:dc:4f:44:59:0e:27:67:5e:a3:64:da:
         5c:34:73:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:14:35 2025 by rpki-client