Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
File:                     xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft (raw, json)
Hash identifier:          9BOWhMnSXkBQkTtpqczYGSz7yLIDQqYDNWMaXR5VFyw=
Subject key identifier:   9D:3D:D8:FE:68:7B:35:E8:55:AC:CE:51:CB:12:A8:33:47:A4:62:9B
Authority key identifier: C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53
Certificate issuer:       /CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
Certificate serial:       0196B634A3A148A67B38CB5AE876F8F3DF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
Manifest number:          1530
Signing time:             Fri 09 May 2025 18:00:25 +0000
Manifest this update:     Fri 09 May 2025 18:00:25 +0000
Manifest next update:     Sat 10 May 2025 18:00:25 +0000
Files and hashes:         1: Hmr7dkr0W7JFrepttGlqLP6NKbM.roa (hash: yDBwYp9xrxrLaEiVdQGFDv7xOzCGwLdfuFI8YUzQtLo=)
                          2: xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl (hash: lZEWdAz5T/4F28EodxHot5yPsI3zL7n1kBmCvLUD5oY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:34:a3:a1:48:a6:7b:38:cb:5a:e8:76:f8:f3:df:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
        Validity
            Not Before: May  9 18:00:25 2025 GMT
            Not After : May 10 18:00:25 2025 GMT
        Subject: CN=9d3dd8fe687b35e855acce51cb12a83347a4629b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:b6:31:3e:a6:c8:ef:53:7a:ab:ba:34:c7:
                    83:9c:ea:63:54:04:79:56:16:40:e3:af:a1:b7:8e:
                    2a:6f:da:8d:95:e4:5d:f0:74:6a:72:08:cc:c1:bf:
                    47:39:05:41:11:7b:b0:e8:35:d3:83:2f:e0:f6:17:
                    62:99:02:e8:a7:9e:29:0a:9a:9d:ca:d3:b3:45:2c:
                    23:b8:a5:56:d2:6c:91:18:ce:33:40:9f:49:b2:af:
                    cb:1b:05:b7:9e:f8:fc:a3:1f:61:c9:b5:74:b7:73:
                    69:cd:d8:bd:95:33:0a:f4:c0:14:e6:1d:73:8d:d4:
                    18:cc:d4:ea:52:f1:fe:2d:14:d6:3e:4d:c3:87:72:
                    8e:cb:3c:0f:ac:24:32:b6:0e:b0:6a:f3:ab:7c:4b:
                    90:14:87:59:7e:d1:70:6b:a0:a2:ac:8b:0f:00:2a:
                    b1:65:a7:0f:10:5a:17:a9:85:90:7f:3f:f0:56:33:
                    4a:be:b6:e6:e2:c4:05:22:50:25:09:2a:1d:a0:1f:
                    55:87:c2:b8:23:67:71:54:40:fc:3e:7a:89:ac:27:
                    e5:a5:ce:d7:e9:ed:10:53:30:d3:68:98:98:85:7c:
                    59:07:dd:5b:8e:97:cb:bd:99:a8:07:e2:98:a2:25:
                    62:f5:b8:d9:b8:d6:ff:27:24:53:eb:d5:bc:81:b0:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3D:D8:FE:68:7B:35:E8:55:AC:CE:51:CB:12:A8:33:47:A4:62:9B
            X509v3 Authority Key Identifier:
                keyid:C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d9:92:67:e4:be:76:f4:01:fa:eb:6b:a1:2a:69:f4:1a:e9:
         7f:33:d2:e6:38:0e:e9:42:7b:2d:d3:c8:51:69:fe:88:16:da:
         d2:63:3c:d0:e1:22:21:01:ca:ac:4b:b9:ce:8d:8c:70:78:94:
         e6:9e:b4:c2:11:62:11:08:e0:ed:c2:3a:22:3c:8a:49:64:f6:
         4a:99:d4:60:f7:af:55:d8:42:98:6b:f8:83:5a:27:47:88:26:
         95:4b:b8:e4:92:b5:61:7b:66:e4:c9:8b:87:bd:51:d2:bb:ef:
         b7:d7:71:8d:01:47:9f:a7:e4:40:57:28:2b:b8:07:44:63:1d:
         3a:6d:3c:a1:70:dd:05:da:f7:5c:8a:b6:29:4d:03:04:9c:2c:
         48:be:06:27:f3:fc:d3:b4:b3:83:b9:c1:ae:d4:eb:f3:c2:9c:
         52:c3:64:0a:b3:4f:b0:13:8c:13:a9:a7:06:bf:19:6e:c1:90:
         81:fc:45:c9:30:44:68:4d:49:40:c7:d6:56:95:67:c5:ae:95:
         43:6f:a2:41:d6:be:cd:ac:c3:ae:da:d7:3d:c6:53:aa:cc:9e:
         a3:b5:c9:cb:57:10:24:bb:a9:c0:ff:6b:4e:fc:e8:8b:6f:1e:
         e3:db:bf:04:88:09:0c:fc:25:0c:e3:2a:21:88:32:23:5c:19:
         db:74:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:14:44 2025 by rpki-client