Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
File:                     X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft (raw, json)
Hash identifier:          BgvHhyeQRhYwZOqIRMJCTpTyCNoSEsg7AVNEe/nKyR4=
Subject key identifier:   8F:79:6C:05:77:B0:B4:62:5C:75:FB:94:4E:8D:24:A4:52:DB:69:19
Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
Certificate issuer:       /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Certificate serial:       0196B89155A4BCBDF0491E7CE5D19FF1B7F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
Manifest number:          0C59
Signing time:             Sat 10 May 2025 05:00:54 +0000
Manifest this update:     Sat 10 May 2025 05:00:54 +0000
Manifest next update:     Sun 11 May 2025 05:00:54 +0000
Files and hashes:         1: FjrlAXrbDvDS2HfDrOYX8s6VeoI.roa (hash: rrLNQtMJaYm4qKAUxLrF7WkgOLeuL0rvTXSBW6y9Fvw=)
                          2: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl (hash: RcXTdPKZV3ZxnNp+EeZkdzkRhj4wxxWD9sQRnB6qM1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:91:55:a4:bc:bd:f0:49:1e:7c:e5:d1:9f:f1:b7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
        Validity
            Not Before: May 10 05:00:54 2025 GMT
            Not After : May 11 05:00:54 2025 GMT
        Subject: CN=8f796c0577b0b4625c75fb944e8d24a452db6919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:17:cc:a0:6a:e8:9d:0f:d6:3c:24:9e:1f:
                    1e:ed:66:3f:fa:d5:a7:1e:4e:33:06:85:de:d1:25:
                    0a:3e:5d:4f:3b:f6:3e:b7:0e:57:db:cc:36:51:07:
                    82:ee:eb:d7:87:89:ac:b5:39:d0:d2:cf:2f:05:fb:
                    ae:d1:1d:79:28:ea:e8:b6:e9:0a:f4:19:db:50:57:
                    11:cc:24:e1:a3:40:29:94:29:dc:a7:c1:32:2b:5b:
                    bd:2e:7a:fb:21:ec:da:a3:a6:c9:7c:bc:2e:38:38:
                    f2:4d:3b:f0:18:ff:99:42:57:6f:79:1f:5d:f1:65:
                    7a:97:27:35:31:87:f3:30:6e:f7:b7:82:93:c8:c3:
                    8e:d2:6c:fc:1c:96:35:39:ec:44:7d:48:42:aa:50:
                    23:b6:a5:03:be:15:2c:e8:93:22:65:57:c5:b5:8b:
                    45:76:16:5c:fb:08:21:00:22:51:81:df:7a:5b:b4:
                    30:03:7b:01:ce:9b:11:ae:e5:21:0e:35:6a:0b:da:
                    f3:cb:d6:df:d8:2f:1e:c1:1c:df:3c:7c:10:ec:5d:
                    c6:81:56:1e:d1:71:4b:ad:e8:2a:1f:dc:60:79:95:
                    80:2d:6c:d7:72:a7:e4:eb:e3:54:23:04:93:4c:af:
                    79:97:7b:d8:f8:ff:2c:2b:71:d5:eb:09:57:82:49:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:79:6C:05:77:B0:B4:62:5C:75:FB:94:4E:8D:24:A4:52:DB:69:19
            X509v3 Authority Key Identifier:
                keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:50:ec:d0:d7:1e:6e:e6:62:22:85:74:5d:f0:3f:4d:00:2d:
         61:5e:a2:12:31:2f:71:76:03:de:2a:d0:eb:57:4b:a6:81:c4:
         1d:07:71:1d:48:2a:c2:1b:eb:a5:fd:5f:68:b7:02:d2:66:f0:
         71:d8:c7:d3:1a:a3:db:37:cb:cf:d9:44:ce:af:53:04:39:7f:
         d2:ab:b3:c7:9d:38:21:51:3b:87:30:99:19:95:54:e6:54:1f:
         05:75:09:20:0a:9a:5e:ed:6e:f7:34:11:1d:5b:7c:73:46:84:
         bd:e1:45:e4:cb:19:10:63:bd:44:bd:16:d7:7a:e6:ff:3b:f6:
         b3:9f:73:99:2e:ad:c3:f9:7f:80:d6:fb:f1:17:b3:6f:05:7e:
         4d:c8:62:1c:36:0d:66:33:5c:59:dc:e5:a3:ce:d2:aa:27:f2:
         9b:b6:78:a3:ae:a5:c8:39:d3:51:f8:3c:fb:51:8e:6a:1b:58:
         c1:f6:d6:16:50:69:3d:e4:e3:a8:1c:b0:8e:cb:7b:d9:16:6d:
         78:66:3e:46:1f:c5:2f:c9:1c:39:47:0e:20:47:d4:b4:10:6c:
         0c:76:25:37:b1:a8:61:7a:72:56:18:e1:04:3a:2d:38:2a:f1:
         58:e6:42:eb:21:5f:5b:66:cd:2d:58:45:c9:f8:ef:e9:5e:56:
         aa:a2:5f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:22:55 2025 by rpki-client