Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File:                     xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier:          HXOe5tFoAK8vEenUjRp/i4yQWK5DvQDIker4zsIPWiI=
Subject key identifier:   BB:82:3A:4E:E0:06:51:40:C2:4F:4E:97:57:51:B1:1A:1E:3E:8E:E6
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer:       /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial:       0196D2F5C35A7E06A6BEE4770CB9C88D649A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number:          1540
Signing time:             Thu 15 May 2025 08:00:43 +0000
Manifest this update:     Thu 15 May 2025 08:00:43 +0000
Manifest next update:     Fri 16 May 2025 08:00:43 +0000
Files and hashes:         1: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (hash: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=)
                          2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: ttO8hbVJ6NXlKdd625IruqgFnRLQiC6IM5PVtcRx0d8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d2:f5:c3:5a:7e:06:a6:be:e4:77:0c:b9:c8:8d:64:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
        Validity
            Not Before: May 15 08:00:43 2025 GMT
            Not After : May 16 08:00:43 2025 GMT
        Subject: CN=bb823a4ee0065140c24f4e975751b11a1e3e8ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:30:b0:53:b2:d6:3e:43:66:3a:f6:0d:84:
                    b2:3d:81:e5:5d:f3:2a:4c:50:7e:7d:45:13:8b:07:
                    d0:91:f3:10:65:32:2a:f9:89:a4:45:65:0d:d4:ab:
                    3c:8c:0d:3d:59:c8:12:0f:91:7c:21:38:09:8b:0e:
                    02:28:72:aa:fe:ce:9e:04:9c:d6:87:f5:5f:a8:35:
                    73:06:a9:ac:44:36:8e:32:09:1f:44:8c:c5:c3:a0:
                    65:86:e9:42:62:96:36:53:80:c4:c9:48:4b:a3:ab:
                    60:66:ef:7c:18:e7:14:b8:9e:b3:1d:b1:71:e5:b6:
                    91:58:68:80:69:c6:3c:99:a4:df:78:2e:e5:fc:bb:
                    a6:27:f0:22:87:0c:17:c7:89:bf:40:fd:2a:69:ac:
                    0f:0b:e9:fc:2b:0e:16:16:72:a3:48:94:85:c9:e9:
                    7a:48:ca:98:e8:02:ad:aa:6c:ee:4e:96:c9:ef:69:
                    63:c2:dc:d9:d7:9a:fc:d3:87:c0:53:b8:76:44:c0:
                    e4:d6:68:18:a9:4c:fb:0e:a3:6f:9e:e3:98:5c:ba:
                    c0:d0:74:76:f9:6d:28:1f:c3:4f:b3:86:9c:f0:82:
                    9c:3c:d4:0d:e9:1e:95:4b:a5:15:e2:db:6a:d2:74:
                    84:c7:6b:96:1a:8f:b9:1b:bf:82:b2:06:51:ec:74:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:82:3A:4E:E0:06:51:40:C2:4F:4E:97:57:51:B1:1A:1E:3E:8E:E6
            X509v3 Authority Key Identifier:
                keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:83:ab:07:1e:a0:44:50:44:1d:f9:5c:c2:6f:70:d1:ac:5c:
         e4:2c:4b:fc:b1:70:aa:ef:7e:6b:37:66:df:54:b1:d0:ff:00:
         e0:bd:01:70:f4:11:38:67:da:d6:d5:b3:03:33:a6:ef:0c:e5:
         bb:16:32:09:71:fe:66:c2:0e:c5:73:7e:fd:26:f2:0d:36:fe:
         a5:6c:20:e1:e2:01:f4:c6:56:ff:4d:fc:d7:24:21:5f:7f:b6:
         6c:8b:2b:99:0a:59:1b:e7:0f:38:73:44:fc:28:62:7d:aa:61:
         ee:ed:e0:7f:93:4e:a3:c8:ce:7a:fe:58:c2:d3:d4:03:d7:5a:
         6c:9c:6e:c3:c2:f1:c1:17:c0:ed:f0:04:2c:c1:21:71:57:2f:
         d6:8a:69:aa:4d:d9:5a:41:52:72:53:82:da:1d:e4:56:18:09:
         37:66:8e:82:96:7a:69:83:88:2e:e4:a2:80:aa:45:f5:01:09:
         09:00:d6:35:b4:96:d8:cc:84:90:c2:9a:23:53:2e:2e:b6:fc:
         56:32:41:ed:83:cb:d4:7a:14:de:57:53:0e:51:f5:04:9b:c5:
         60:73:19:82:86:58:2b:e4:bc:52:2f:a0:c6:5b:3a:56:4b:5a:
         b2:0c:dd:51:81:4c:0e:e9:4d:4c:7e:08:1c:e8:22:03:83:b2:
         59:4e:65:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:44:56 2025 by rpki-client