Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File:                     xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier:          cjHnsJcoGwROT+g4R2Ntkp9bimbZCa7WNGYr4/FAUz4=
Subject key identifier:   07:2C:A9:1D:65:63:7C:2B:ED:88:B1:DB:85:94:FE:BE:39:1A:AB:76
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer:       /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial:       0196C2DD8EFB0BDB0E6EE2A55C462CC46FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number:          01A5
Signing time:             Mon 12 May 2025 05:00:22 +0000
Manifest this update:     Mon 12 May 2025 05:00:22 +0000
Manifest next update:     Tue 13 May 2025 05:00:22 +0000
Files and hashes:         1: FMgcehrq11NYnach5jymNFMSCJo.roa (hash: 23485LoqiVIG63SHNB561yBglraAa3rXuSfMUv494ng=)
                          2: h0nRURZObDQGUY3lgCCRW5dgsdU.roa (hash: tHlLzC2mNo3zNr8LZV0r1UgQyBm2/nkWYYJopdfozpA=)
                          3: jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa (hash: qBF1JuuPaQkLpju5JJkqO3MhIuKn8gMr+bEddTrSCho=)
                          4: nvo5kYS5Gt5n8tNt2QdYcZApDBc.roa (hash: zlWPVIjJT4fAh1Xfi/EWmZKxdKql19zmnHIxNlxz2Ss=)
                          5: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: ZOfLNlJxWuH0MOO/OwjGzvjsEGVxujouX2phMTO4TWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:dd:8e:fb:0b:db:0e:6e:e2:a5:5c:46:2c:c4:6f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
        Validity
            Not Before: May 12 05:00:22 2025 GMT
            Not After : May 13 05:00:22 2025 GMT
        Subject: CN=072ca91d65637c2bed88b1db8594febe391aab76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:b1:49:f6:c7:cc:65:db:47:4d:29:6f:a0:
                    f2:53:f7:a3:1c:57:c1:32:1f:37:31:0f:5a:23:5d:
                    2d:6e:e2:a4:cd:d2:16:3d:e5:36:4a:79:70:4c:f3:
                    f6:08:ce:36:e7:11:11:fe:92:b8:b0:b2:b1:c1:ce:
                    c5:d8:96:43:36:0b:e1:89:bc:2d:35:18:e9:88:3d:
                    a1:d9:84:9f:1c:8c:76:a3:c9:5d:7a:fa:d0:3c:7b:
                    cf:3a:b2:14:0d:be:7b:b5:f7:80:06:11:4e:76:a3:
                    63:2c:fe:ea:f9:68:59:6f:97:64:04:7d:f9:0a:32:
                    7a:f5:cb:51:4d:bd:a9:a0:61:4a:b9:42:f8:3f:ca:
                    fe:79:92:47:d6:89:71:81:c0:0f:d8:c2:92:6e:f2:
                    05:65:60:09:da:9c:19:bc:04:83:50:c2:48:e2:c5:
                    3f:60:db:72:d3:6f:4d:c9:6e:8d:86:f2:26:67:2d:
                    6c:0f:5d:3d:22:f9:9e:c2:5b:76:de:ee:c4:24:26:
                    77:23:5e:42:cb:17:03:c5:36:a7:04:31:94:6a:ee:
                    d5:f4:c6:5a:d0:9a:73:6c:27:13:80:ea:fe:d7:1c:
                    78:ad:bb:81:ed:a1:a7:b9:07:d3:8d:b5:42:f4:7d:
                    cb:62:42:ee:84:d1:61:aa:72:45:d7:30:c7:89:a7:
                    3b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2C:A9:1D:65:63:7C:2B:ED:88:B1:DB:85:94:FE:BE:39:1A:AB:76
            X509v3 Authority Key Identifier:
                keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:0b:80:c3:ed:8a:43:77:76:40:16:f0:79:42:3f:51:32:05:
         01:7c:4a:9a:c7:71:6c:15:17:e3:ff:36:29:ac:ba:4f:28:6e:
         51:6d:7d:6f:d7:4f:50:d5:74:75:88:a6:83:46:3e:d1:c4:a2:
         54:83:71:77:4d:ef:71:e9:59:d3:2c:2b:68:d7:21:4c:84:99:
         6a:b7:89:c7:44:61:ed:cf:bd:7d:54:77:43:36:de:49:fb:6e:
         0d:f2:ff:78:66:7f:8a:d4:3b:05:b2:de:d4:4a:17:6a:bc:cf:
         bb:48:a9:45:41:ca:ad:e6:eb:cf:24:e5:8b:4b:4e:5a:6c:c3:
         e5:57:ca:6a:b9:aa:11:93:eb:ff:83:6f:55:00:65:5a:91:54:
         e8:bd:35:af:b6:d6:23:33:18:32:87:5e:19:7d:76:5d:78:2e:
         f6:a4:38:bc:a2:b3:db:cb:bb:59:84:6f:67:db:77:87:ec:ba:
         1d:bc:1d:49:15:d7:10:cf:43:0c:4b:38:dc:6c:7d:73:09:83:
         03:af:ba:9b:04:ed:25:8f:ea:66:66:70:12:f0:6e:ed:20:00:
         ff:07:70:76:ca:47:84:ff:a0:82:cf:80:20:f2:b0:00:a7:cd:
         31:8a:e1:4a:ff:58:eb:27:ff:fb:0f:a6:65:6e:e5:ec:0f:b9:
         3b:0d:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:33:43 2025 by rpki-client