Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
File:                     xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft (raw, json)
Hash identifier:          eyCbR7wnjpZMSgb1kAmiPmiTU5Oa1ahYqwnKr4wS2iE=
Subject key identifier:   D7:C4:F5:F3:01:4E:CA:8F:79:0E:2E:BF:CA:D6:EA:D6:9A:60:C2:11
Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Certificate issuer:       /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Certificate serial:       0198D698759EEC962F3D5E645E3C7E16759A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
Manifest number:          05B6
Signing time:             Sat 23 Aug 2025 11:02:52 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:52 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:52 +0000
Files and hashes:         1: XtEdAEEop3HSdnOxibG98C_uMCU.roa (hash: +p4FtnANqp2tZpv3Dmdn2vhOEqjGwMWFA5juiZbc568=)
                          2: xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl (hash: 2ff6QIImyWfGekDH8P6UMvm9o9clLIfI+IOPBrK+cNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:75:9e:ec:96:2f:3d:5e:64:5e:3c:7e:16:75:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
        Validity
            Not Before: Aug 23 11:02:52 2025 GMT
            Not After : Aug 24 11:02:52 2025 GMT
        Subject: CN=d7c4f5f3014eca8f790e2ebfcad6ead69a60c211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:68:e1:dc:52:70:93:32:16:70:6e:af:b8:
                    2b:19:1a:80:61:b7:97:a3:34:ff:f1:03:d2:23:ee:
                    82:5c:c1:aa:17:4a:fa:ce:46:cc:cb:f8:6f:a1:65:
                    ab:f0:3c:72:67:a5:c6:ca:f1:c8:6f:d9:26:65:bc:
                    45:45:ec:a4:1d:2c:f5:f1:8c:5a:d0:00:98:6f:15:
                    76:72:10:c1:ad:7e:51:91:b1:08:5d:80:f5:7e:c9:
                    ca:f7:13:5f:d1:dd:c3:7b:14:92:cc:b8:ee:0a:30:
                    d8:de:d3:68:0f:41:19:88:a8:eb:8e:82:46:cc:ae:
                    52:00:62:39:94:15:bd:07:d3:08:da:84:cf:2b:a2:
                    34:8b:2e:c7:58:7a:23:56:5c:fa:49:f3:79:cb:0d:
                    f7:17:ad:36:1f:de:07:35:1e:53:5d:ce:d9:4a:78:
                    41:23:e8:0b:b5:88:5d:8b:aa:02:89:7d:d9:9c:d9:
                    15:4f:72:8f:62:94:bf:45:af:01:17:39:6a:ea:d4:
                    4e:6d:50:ce:e6:b9:5b:19:9f:9b:e5:8c:a4:6f:71:
                    10:5e:a4:f7:69:13:68:ed:d6:47:14:d9:32:61:54:
                    77:43:9d:f2:c3:8e:97:fc:dd:e5:3d:4b:bb:f9:ec:
                    5e:80:53:77:fe:b0:92:48:66:4a:32:82:c4:52:d3:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C4:F5:F3:01:4E:CA:8F:79:0E:2E:BF:CA:D6:EA:D6:9A:60:C2:11
            X509v3 Authority Key Identifier:
                keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b5:20:bc:eb:da:cf:6b:b4:bb:54:4b:70:ec:d3:bc:dc:63:
         37:50:98:dd:14:4f:ec:2a:92:60:b6:66:f4:7e:e7:23:9a:73:
         af:69:86:44:d5:c3:90:d9:b5:80:7e:ff:49:17:38:12:b2:cd:
         fe:a1:b8:42:97:eb:6e:23:a0:ec:9d:a0:0b:51:0b:43:0c:56:
         5e:62:74:c6:6d:fa:8a:d6:bb:4c:b0:b2:35:17:43:32:bb:a0:
         15:60:d7:9f:20:78:b1:48:a5:55:55:2f:10:80:d2:44:08:dd:
         70:0b:7f:21:63:c5:7d:05:31:c2:16:f7:0d:a6:05:d8:f2:fa:
         95:c1:62:8d:57:9a:7c:96:23:9d:31:3b:6c:4a:3a:af:2c:e9:
         66:b2:65:34:0c:4a:bf:4a:5d:b2:dc:0a:1d:dc:83:49:d5:67:
         81:fa:d9:86:75:d4:99:07:62:72:11:64:79:84:98:f2:b2:40:
         7f:49:43:c4:ea:4b:d4:f1:75:e2:44:d5:2a:75:09:4b:ad:38:
         14:13:fd:72:5a:7c:5f:e1:10:9d:a2:c0:7e:12:9b:bd:e9:c6:
         04:31:bf:9e:77:8e:19:1a:8b:38:90:db:ac:37:48:cc:c8:f2:
         60:62:21:6b:da:27:47:07:51:ff:65:e5:ca:67:11:a3:ce:9d:
         75:45:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:03 2025 by rpki-client