Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
File:                     Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json)
Hash identifier:          mUEt0KEZg5hdjPa8txRWOFgR2Xi+F9OosOOCFfv3urM=
Subject key identifier:   EB:06:65:94:E1:DB:76:58:12:CF:79:51:9A:C5:4F:CF:55:D9:EB:49
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Certificate issuer:       /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial:       0196A31C25046C2CE4D40FEE311F5FACDCE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 01:00:52 +0000
Manifest this update:     Tue 06 May 2025 01:00:52 +0000
Manifest next update:     Wed 07 May 2025 01:00:52 +0000
Files and hashes:         1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: uVhWtL102BSdjjURAGxV4bJk8HLhkk/Pt2bb+sv6jGw=)
                          2: ZL3E7Adz2UxGlx__ehEXq17MBJk.roa (hash: eyCT9Oq7LBXIn9/dNlFO4JQgfNKfcXzeYyZGwsbG9dM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:1c:25:04:6c:2c:e4:d4:0f:ee:31:1f:5f:ac:dc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
        Validity
            Not Before: May  6 01:00:52 2025 GMT
            Not After : May  7 01:00:52 2025 GMT
        Subject: CN=eb066594e1db765812cf79519ac54fcf55d9eb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e0:9c:37:a7:31:73:60:92:76:1f:3b:da:44:
                    65:14:12:d9:62:60:fe:a9:8c:b2:03:17:c8:cc:49:
                    e5:92:e3:a3:aa:58:71:ce:6d:c8:d8:91:ae:e6:6d:
                    d7:ad:5f:6c:b0:4d:ca:ca:22:f0:ef:12:9f:b3:6d:
                    2b:12:05:50:20:09:c9:ec:ae:e7:d0:2e:14:45:f6:
                    8d:9d:4c:ce:3b:7a:54:5b:23:4b:16:63:50:57:45:
                    33:66:18:82:a9:9f:36:69:70:67:da:16:c3:8e:3f:
                    7f:20:aa:4c:ea:1a:ae:fe:1c:ee:68:ff:61:d3:a9:
                    8d:ba:2b:40:7d:db:76:a9:0d:cd:74:a7:9d:16:bc:
                    86:22:79:5f:4e:05:be:2d:53:b0:b9:fa:1e:bb:47:
                    66:76:73:91:76:eb:3a:ef:e0:20:b6:54:8a:2f:82:
                    4f:1d:25:a2:99:eb:17:70:ef:d1:e0:a0:91:67:0e:
                    b7:30:6b:03:6f:ad:48:a0:87:de:ee:65:06:fa:64:
                    08:77:62:ef:89:bd:f9:1d:94:94:66:d4:8c:a3:32:
                    e6:80:49:f3:e9:a8:36:00:c8:25:72:b9:e6:c3:69:
                    d7:94:77:c2:34:61:85:00:a2:82:67:b9:11:92:d2:
                    65:ac:3f:19:91:bf:b8:bb:66:67:4c:2d:31:c3:dd:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:06:65:94:E1:DB:76:58:12:CF:79:51:9A:C5:4F:CF:55:D9:EB:49
            X509v3 Authority Key Identifier:
                keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:64:85:fd:75:c9:10:06:46:73:e6:11:5c:52:6f:57:d8:2a:
         7e:63:21:e3:a6:93:5d:71:fd:a2:81:27:a0:9b:1b:f2:04:b7:
         35:c5:20:95:4d:37:c6:33:80:f2:b2:95:d4:19:6e:a2:86:80:
         ee:18:f8:74:68:f7:4a:c2:dc:e9:6e:23:02:de:02:2f:53:92:
         17:10:0b:3f:91:6b:55:b7:43:a8:b1:d1:57:53:ae:e0:2b:bb:
         f8:1a:56:33:1e:db:99:ff:5f:96:e2:4f:a5:f5:8b:aa:7c:0b:
         c9:36:23:7c:b5:24:56:f7:d3:88:63:88:e5:3b:e5:da:7c:de:
         60:10:4b:0e:a1:9b:77:18:5e:05:e7:7d:93:cb:84:1c:5b:24:
         0c:1a:c0:c8:51:aa:d6:55:2e:91:3c:77:75:20:06:9f:d9:90:
         84:ca:a5:53:6c:9b:48:b2:9d:57:cf:30:3f:a2:29:44:89:8d:
         b1:da:b9:e3:65:5d:fc:09:67:3b:b8:e1:86:fe:e9:9b:1f:0f:
         91:c9:c9:11:88:6e:4e:d2:0a:be:45:2a:e9:2a:60:d6:48:11:
         59:1d:3c:1e:c2:f8:7c:a6:ea:e5:b8:d5:bb:e8:5f:fd:5a:05:
         f2:f3:7d:a2:2a:d6:42:f2:b2:34:a7:68:c6:ac:0f:ea:4e:a2:
         98:23:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:15:05 2025 by rpki-client