Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File:                     XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier:          QdHMe8dFt5dW9y23gMXhnulJBeCaR5TdeSFwO1gI5C4=
Subject key identifier:   86:62:59:DA:05:A7:38:C0:D1:48:1F:AD:CB:8F:88:04:54:A4:66:7E
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer:       /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial:       0197B7452EDA925F42D14D19807B4D99C809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number:          74
Signing time:             Sat 28 Jun 2025 16:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:53 +0000
Files and hashes:         1: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: WZTv8luKzrlDwTOoG7N7uqzsXtbujbWau/jCdLo4mAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:2e:da:92:5f:42:d1:4d:19:80:7b:4d:99:c8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
        Validity
            Not Before: Jun 28 16:00:53 2025 GMT
            Not After : Jun 29 16:00:53 2025 GMT
        Subject: CN=866259da05a738c0d1481fadcb8f880454a4667e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:4c:1e:a4:cc:c2:80:7b:79:95:46:eb:1d:
                    8b:89:91:2e:2e:14:af:c1:39:48:23:7b:a9:1b:2c:
                    ea:93:c2:a4:ed:7d:0f:cd:f4:3f:36:32:f5:05:25:
                    23:0a:fe:ea:23:e3:c6:2f:11:82:97:8d:53:b4:8f:
                    e4:ce:73:02:98:a0:e6:38:f3:37:2c:b5:d5:ce:6d:
                    8d:a9:7e:87:8d:86:a0:9e:bf:7b:66:07:8d:df:65:
                    88:0b:ed:ce:20:30:d0:2d:55:10:4b:34:67:0b:33:
                    6e:34:a8:79:c4:59:82:30:7e:a5:3a:f9:de:8e:ee:
                    88:a4:69:c7:6d:12:86:d7:0f:8c:79:d0:01:f4:2d:
                    be:97:dd:f7:6e:35:c5:02:2a:de:94:af:fc:fa:52:
                    48:a5:b1:2f:54:fc:3c:8d:cb:17:55:a9:43:5a:22:
                    66:a9:60:29:72:df:f2:8f:62:dc:be:5b:11:8a:51:
                    4b:30:44:42:3a:c6:d8:c4:f5:89:fa:1f:28:f1:b4:
                    e2:8b:d0:91:a1:da:32:79:90:40:ef:97:00:90:62:
                    b4:49:0e:b6:d4:39:91:5d:79:88:bb:12:a4:95:8a:
                    8f:43:93:9d:b1:72:15:9d:0e:17:e1:8d:3c:17:14:
                    ab:68:f1:6f:a8:9e:c1:6b:4f:64:aa:f3:b7:56:d5:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:62:59:DA:05:A7:38:C0:D1:48:1F:AD:CB:8F:88:04:54:A4:66:7E
            X509v3 Authority Key Identifier:
                keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:44:07:f7:21:ad:cb:47:dc:3b:35:41:68:98:0a:e1:63:12:
         0f:0c:e6:7c:34:b8:b1:96:84:27:84:20:d6:83:94:f4:0d:1b:
         fe:f6:e7:58:5c:05:7a:1b:35:69:20:70:db:28:73:ae:ba:ac:
         88:91:0c:af:4a:16:2d:07:7f:5c:f3:9d:8b:9b:b6:ab:f4:1b:
         67:f9:e4:1c:9d:78:01:d7:95:48:5a:88:10:89:25:45:4c:0e:
         62:14:25:0e:72:97:14:63:61:d2:5e:ef:a5:47:c6:96:87:63:
         42:82:15:35:bb:ae:63:82:e6:d3:9c:53:17:fb:39:73:99:a7:
         a3:e1:dd:15:83:86:f0:26:90:39:93:f1:55:1a:e7:d5:87:5e:
         9b:ed:fe:56:fa:1a:9f:c1:e7:1e:05:74:f8:04:80:b1:c1:e9:
         ba:46:36:22:fe:72:02:58:aa:14:d9:58:ba:8f:f5:1f:2d:2c:
         0a:d2:e7:83:1c:ce:d7:74:66:64:c9:f9:e4:b4:77:a1:cb:d3:
         8b:a0:3b:54:eb:52:67:c6:64:f9:e8:5d:06:60:33:14:86:41:
         ae:6b:a9:f3:6b:2a:5f:bf:ba:df:98:15:b4:60:dd:2e:e4:9c:
         90:14:83:dd:9d:56:65:ba:96:b4:fa:09:03:0a:10:44:37:19:
         f4:11:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:02 2025 by rpki-client