Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
File:                     XOGq4Mk60EtymAgraL9qVPpovPA.mft (raw, json)
Hash identifier:          xxDRp8RXZCGeKOeh5/0j0DZ2DXNCK6gbQlEpfLT8rOw=
Subject key identifier:   A9:F7:8D:49:B9:E1:F4:64:79:7C:F3:6D:9A:A0:3D:53:06:61:A1:06
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Certificate issuer:       /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial:       0196CFF454A3D2BDB0B34F9B2369A570588B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
Manifest number:          1540
Signing time:             Wed 14 May 2025 18:00:18 +0000
Manifest this update:     Wed 14 May 2025 18:00:18 +0000
Manifest next update:     Thu 15 May 2025 18:00:18 +0000
Files and hashes:         1: FBcAeE9oQIOW9kKPQJ1vgouTAbk.roa (hash: L0pGWwbFutGyRI32rrNWdKvE3ZZY088xKR9lZle7SCg=)
                          2: Tz90Wvu7GQ9v16xjtv3fYSRjDy8.roa (hash: /VeLcpXw8PuMvzvcyJgx3jKW0zDlptf/ULhrAgfV2dQ=)
                          3: XOGq4Mk60EtymAgraL9qVPpovPA.crl (hash: 0NdgCEwWPQUsdx735V4yqhz3myWBkaRLP1bdi4y1NT0=)
                          4: jwOao49fuGzjzKpy4DVicXhqkq8.roa (hash: vTxxc3wFEPVm9vo1ixcSgxSo2myxU1VuH0FNYAoBops=)
                          5: pjWvLHgWJr8VfxqCyu_wjseZwrI.roa (hash: M+VetrzhMK4qS2ZDHlL6T1xkNC7G/F+gqzb3HNS9swc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:f4:54:a3:d2:bd:b0:b3:4f:9b:23:69:a5:70:58:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
        Validity
            Not Before: May 14 18:00:18 2025 GMT
            Not After : May 15 18:00:18 2025 GMT
        Subject: CN=a9f78d49b9e1f464797cf36d9aa03d530661a106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:0f:c6:39:71:bb:af:dd:c7:0c:70:74:40:
                    f7:95:c7:f1:07:fb:91:13:09:11:bc:7e:f4:e8:c4:
                    27:e8:ec:36:2d:e8:6a:6b:04:90:b2:06:4c:5b:14:
                    00:d4:2d:5b:09:fa:ee:fa:86:cb:a2:99:74:11:a2:
                    7e:99:27:e8:73:fc:c2:67:c9:40:4b:d3:64:19:71:
                    6b:a1:eb:c6:50:22:6b:80:08:c1:84:9e:95:f8:b4:
                    1d:24:84:3a:b1:d9:1a:5a:d2:81:50:19:fa:3d:4b:
                    1c:51:a2:b0:83:49:3f:40:30:6b:24:11:f7:ba:f5:
                    69:9d:d1:fb:ac:e1:7e:7b:1a:58:c4:2d:79:8c:5a:
                    73:8b:26:a3:24:9e:cc:cc:f4:d7:cf:45:d3:4f:9f:
                    be:6e:62:15:20:da:89:7e:17:c7:ea:5a:bd:67:90:
                    e6:09:74:87:57:69:ee:c3:0a:2a:6c:ba:e0:52:56:
                    9d:5c:db:75:36:cb:dd:26:2c:a2:bf:bb:e8:d4:81:
                    11:57:d5:3e:c0:89:47:bb:8b:7a:8a:ee:94:0b:d4:
                    f6:58:9b:ba:c0:dd:ad:99:13:88:bf:c2:7f:65:68:
                    0d:5d:a3:a1:bf:69:3e:a9:de:8c:d6:06:ce:6c:e5:
                    ba:fb:e8:44:49:d9:ac:3d:d5:1c:0b:f4:94:50:7f:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F7:8D:49:B9:E1:F4:64:79:7C:F3:6D:9A:A0:3D:53:06:61:A1:06
            X509v3 Authority Key Identifier:
                keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f5:f9:7d:3c:3f:ee:05:c5:4f:52:3c:40:d9:dd:7f:22:da:
         7e:95:ee:14:77:0d:7d:f8:29:4a:58:5a:af:47:f4:53:43:58:
         f3:ba:f7:8e:8b:30:fc:fa:9a:a7:01:91:8d:6b:9c:41:03:ef:
         49:77:6e:09:33:d7:3e:50:93:3e:6a:b5:68:a2:5f:98:a3:ea:
         16:8e:c8:08:f9:87:e0:0c:6e:78:a9:a3:5c:ba:7e:f4:9a:0f:
         2b:0e:6b:be:d1:63:20:3d:04:fc:a9:3d:e7:95:89:d9:57:1b:
         c6:61:20:ba:c6:d2:61:f2:f4:c7:51:2e:a6:93:8d:1d:83:03:
         5c:79:8e:70:38:fb:a3:03:56:3e:df:e4:07:cc:8b:81:90:77:
         15:db:e8:4a:0e:c0:bb:52:0e:74:9e:36:fa:84:f6:b6:cf:c6:
         36:3b:ef:fc:b7:43:41:af:f2:71:1e:bc:9e:53:e0:ce:74:f4:
         80:93:bf:71:9f:ef:cd:dc:79:41:fe:38:fd:61:24:f9:6b:0e:
         a1:7e:1d:df:3f:f8:1e:2a:04:f9:d3:47:1e:55:ae:02:81:d7:
         2d:61:8b:cd:a7:13:76:c5:73:64:9e:00:b9:80:34:c2:b2:23:
         52:ef:db:35:1e:07:51:cd:ba:57:ea:5b:cf:4c:d3:fd:3c:dc:
         00:90:2a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:19:20 2025 by rpki-client