Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File:                     xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier:          EdncjxgAoySmyhMhjDLlZkqlCvk1NOCyq6nC01WIk2E=
Subject key identifier:   79:6B:4C:25:75:E3:67:82:67:1E:BB:CF:E9:75:F1:5B:2A:69:13:55
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer:       /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial:       0196BB92F7FCF254828A7984567D7902514A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number:          0F2E
Signing time:             Sat 10 May 2025 19:01:33 +0000
Manifest this update:     Sat 10 May 2025 19:01:33 +0000
Manifest next update:     Sun 11 May 2025 19:01:33 +0000
Files and hashes:         1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=)
                          2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: rBQUD07V4XbAMnoG67+lRJEVmGVY747NopHHsyYb+vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:f7:fc:f2:54:82:8a:79:84:56:7d:79:02:51:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
        Validity
            Not Before: May 10 19:01:33 2025 GMT
            Not After : May 11 19:01:33 2025 GMT
        Subject: CN=796b4c2575e36782671ebbcfe975f15b2a691355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:16:02:8f:e6:d3:78:c5:9f:bf:5f:5d:48:07:
                    24:96:ed:f4:1b:30:f8:15:21:46:d8:dd:b6:6f:3a:
                    4a:1e:bc:06:c2:53:92:77:d8:4f:73:a7:81:fd:6f:
                    06:75:e4:a7:f0:ef:45:aa:19:5e:c1:e2:6b:77:f5:
                    f9:28:9e:fd:76:d5:97:04:4c:73:00:3a:9b:c4:a4:
                    18:70:96:f7:68:d8:58:72:39:e0:4c:ef:e9:9b:e1:
                    89:92:0a:c7:b5:c7:06:e0:af:b3:22:4a:0f:9b:db:
                    57:10:f7:8a:2c:01:40:5a:83:61:a3:6e:30:5f:a0:
                    d2:9c:60:11:63:57:a7:94:4e:28:af:07:72:ec:af:
                    b8:fe:74:7c:77:8a:c7:fb:4e:b6:e4:3c:7c:24:b3:
                    5c:31:f5:c1:4f:72:46:1f:3c:52:fa:c4:35:68:0f:
                    ba:bc:77:6d:94:6c:0b:65:c6:d9:64:ca:36:0a:0d:
                    33:da:2b:e7:a0:03:95:8a:d8:fc:10:fd:79:bd:99:
                    1c:8e:e3:d3:87:fc:dc:e6:f8:85:05:50:9e:34:3d:
                    8f:7b:36:b3:4b:c9:01:cf:97:9d:6e:ba:f1:80:9f:
                    e1:c9:1b:b5:e2:8c:43:0b:c3:63:3a:49:a8:b6:9c:
                    8e:de:20:f5:6c:7e:1a:11:94:9b:31:9d:4d:3a:41:
                    40:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6B:4C:25:75:E3:67:82:67:1E:BB:CF:E9:75:F1:5B:2A:69:13:55
            X509v3 Authority Key Identifier:
                keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:77:9d:37:d5:9d:8d:16:09:c9:4c:3e:a1:a8:f1:7b:d6:8e:
         73:c0:9d:5c:18:21:92:59:63:32:3a:7a:32:8b:5a:f9:81:5c:
         f1:ae:bb:84:cb:68:b3:80:d6:19:de:74:90:8f:1a:d0:05:3e:
         87:30:1f:e1:63:5f:2e:d1:85:ca:de:ef:18:4f:ff:93:3c:29:
         41:78:1b:0d:4f:5e:b6:36:c5:58:d8:db:43:dd:a3:57:27:da:
         40:cf:e5:3b:a3:a1:5d:11:36:43:1a:eb:c7:ba:fe:38:91:e9:
         35:f6:ec:2c:00:2d:07:d9:44:1c:12:6b:e9:a2:bb:77:20:2e:
         d2:48:e8:44:c6:12:77:31:02:67:f4:b6:22:91:4e:af:44:45:
         d3:4d:94:58:40:28:0c:63:1b:27:dd:25:b5:a3:0f:0b:9f:35:
         e4:27:63:5b:8b:77:ee:4a:db:0e:ab:10:c1:5d:4c:09:83:f7:
         9f:62:6e:97:fc:87:e6:28:8e:bb:99:55:47:0c:a9:05:6d:de:
         c0:cc:e2:0c:69:e1:1e:c3:a6:29:1e:ef:83:bc:1b:42:60:08:
         f2:37:7d:33:72:da:db:10:75:fd:46:44:2e:53:8b:1f:52:46:
         2d:f2:76:b5:c1:67:84:0a:6a:d9:9b:f4:8f:cf:2e:f6:15:83:
         b7:fc:5c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:50:35 2025 by rpki-client