Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          RhtAGqPOt3hSZpDMLBNqpbwSrHxSNiBMAjoJB8B0vfQ=
Subject key identifier:   F1:1E:7C:DD:3B:B1:B6:F1:65:22:20:9D:B0:0F:F5:06:8D:45:CE:54
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       0196B7EC4DFFD26BCC0CB1C62B04E922A30B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          065B
Signing time:             Sat 10 May 2025 02:00:39 +0000
Manifest this update:     Sat 10 May 2025 02:00:39 +0000
Manifest next update:     Sun 11 May 2025 02:00:39 +0000
Files and hashes:         1: JPDyuwyAVoJM2Iyx8CZ_ZB6RHCU.roa (hash: QuCzbV3mXtMMCr1dPTRw5qrXtwuzqj3+jKGWKorTdEc=)
                          2: Jm7SMMzLF7_5MDCh5Y02qECnHz8.roa (hash: riP9RQHRkB7J8WrFHbcO6lj526dMWJM+emj0CRiPnlQ=)
                          3: Ou48DrwJus08n3GsGbd-UDVpOCI.roa (hash: bLCIdBEHgXrvByLARx4buUO2V5j3WD8Kgcv0zCDTM/o=)
                          4: R8JsCaWwJlloIphsJ_SUQdItPT0.roa (hash: jdlAQ7N+wj+LUd6XKIUEeWcmdCEJH5KhrOrz0eN8lDM=)
                          5: V3wGcwOVhN0tAMoLaOO8eyDkTKY.roa (hash: LoyanmiphfJJ/rxmnZ49vq4eY1guWePbQk/rQBxZgok=)
                          6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: Kwf4zKuRTI4h1z40kZYzfSwyBzlCVyrv/UdrvJBJ4SU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:ec:4d:ff:d2:6b:cc:0c:b1:c6:2b:04:e9:22:a3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: May 10 02:00:39 2025 GMT
            Not After : May 11 02:00:39 2025 GMT
        Subject: CN=f11e7cdd3bb1b6f16522209db00ff5068d45ce54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:1a:b5:35:f9:25:f7:27:c7:5c:91:2e:f1:
                    77:44:b1:cb:69:86:52:72:f8:ff:9c:58:15:8b:56:
                    b6:82:16:c7:e1:f9:cf:43:51:ba:5c:63:22:a3:8c:
                    c4:98:c9:36:76:08:53:c4:e9:fb:c7:8c:10:20:52:
                    0b:eb:65:d4:fd:1b:a6:8c:93:99:d9:ad:fb:93:b6:
                    80:96:6f:6e:dc:79:16:1a:7c:f5:b1:9b:a5:c6:ec:
                    67:8b:01:c9:55:88:c0:4e:6c:95:28:2c:97:ab:6f:
                    b5:5e:e8:02:c3:38:9f:59:b2:24:c7:17:8a:c8:3a:
                    99:e8:a3:aa:ac:1c:32:18:f7:d2:e2:3f:87:05:32:
                    d6:d5:83:f7:4c:19:6d:ab:ba:2a:61:a8:bc:30:66:
                    e6:f6:fa:d7:a7:ab:b3:52:83:26:6c:b2:83:e6:a8:
                    4a:d5:47:3f:b3:6b:9e:df:00:49:42:f8:01:7b:ed:
                    13:08:b9:be:9d:43:e2:e9:a5:f1:5e:5e:99:8c:f8:
                    b2:55:d6:0b:df:7c:f3:a3:08:85:8d:40:6d:93:ce:
                    53:69:98:56:05:40:26:04:f7:bf:c9:59:12:47:23:
                    86:d4:76:62:dc:91:cd:d4:db:08:cb:08:43:b0:2a:
                    ff:06:cb:75:3f:15:96:ba:30:b9:51:b3:1e:5d:03:
                    7f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1E:7C:DD:3B:B1:B6:F1:65:22:20:9D:B0:0F:F5:06:8D:45:CE:54
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c6:aa:1f:d8:0a:26:28:33:69:6d:89:b1:05:ee:49:79:8a:
         e6:e7:ba:df:bb:ba:f4:4f:9b:5d:75:72:c1:69:06:52:b2:20:
         88:3a:b5:9f:ba:09:cf:43:35:b5:b5:ef:1d:56:b2:09:6c:2c:
         9c:16:49:e8:a8:e9:e4:f4:dd:d3:11:9f:5f:8c:c9:8a:8a:cf:
         f8:2a:b9:2e:90:3e:e8:84:d5:7a:1e:25:b7:bf:93:57:d7:ba:
         e2:1d:8a:d4:ab:29:9c:0b:25:4c:b4:06:58:e4:da:78:4c:61:
         26:87:a5:54:5f:2d:39:60:3e:12:a3:57:f8:9e:82:a1:f0:8c:
         64:2e:78:06:75:7d:f4:01:55:c4:b3:ac:37:a2:c1:54:3b:f5:
         f9:5d:87:69:b0:98:e2:b2:de:08:81:25:8c:e7:28:f7:ec:eb:
         8b:a6:98:40:e2:17:78:6b:4e:6f:90:88:ea:ae:08:58:ab:31:
         f7:05:7a:67:05:3e:e2:51:27:2e:6e:38:25:f2:f6:f7:b0:e1:
         10:03:5e:71:3f:8a:e1:42:f5:1b:44:06:fb:97:6b:09:64:57:
         48:b8:af:85:ee:6b:01:12:c7:d3:b0:68:30:46:d2:b5:6b:f8:
         a6:68:11:88:b7:6a:0b:16:62:96:93:d4:19:59:0a:99:3e:1e:
         4c:bd:3b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:31:55 2025 by rpki-client