Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          o5ey/VRt3NSldmCmwIGyhjj+l/K1OrIUE0/UzBZG41w=
Subject key identifier:   49:77:15:38:F1:26:1C:D8:EF:C4:72:E5:44:94:0C:2D:09:B6:43:50
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       0196AC1F9954D896D3A41E1052AF49884288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          1828
Signing time:             Wed 07 May 2025 19:01:13 +0000
Manifest this update:     Wed 07 May 2025 19:01:13 +0000
Manifest next update:     Thu 08 May 2025 19:01:13 +0000
Files and hashes:         1: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=)
                          2: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: VQaaxmT4cQpLg1LLb0Bfxw+z7TFMCDF7YoFlxueO140=)
                          3: ZqqZ7OMEjLNQ22eucijVInb2vR8.roa (hash: pM46+Khp0DNonNbQf2ZVAjSfm0mlEzK63xhejDg7fEM=)
                          4: g-gDnGYDElbKgzwYSDP2gPdUjgU.roa (hash: MWhLlIp3CcNIM+/42QFT1hg73NCRkvj/qnVhMmAdqeY=)
                          5: jPPJRlQHOW3Bdo3Xffl1cKS8yYI.roa (hash: +QHKisnDpujXyoJyM4AGTUHFPfJzBO245kYgUJWvE8Q=)
                          6: s6nYW-wwFY4e4FliH1slATjjkcI.roa (hash: IaJM9j4ERldNW3bqfwmZZck2Nh3sfZGgvyUZuPD1Rqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1f:99:54:d8:96:d3:a4:1e:10:52:af:49:88:42:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: May  7 19:01:13 2025 GMT
            Not After : May  8 19:01:13 2025 GMT
        Subject: CN=49771538f1261cd8efc472e544940c2d09b64350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:d6:36:a5:91:9d:bb:87:22:1d:10:5b:bb:
                    fa:af:25:c6:7a:29:09:00:8c:95:a1:ca:23:bd:e5:
                    f4:11:98:a3:89:f5:2d:bb:a5:d6:7e:f1:da:99:69:
                    63:be:74:48:4e:98:39:65:93:b5:1a:86:98:fa:08:
                    58:12:52:89:cf:e5:46:79:55:55:d9:ff:1a:49:0a:
                    86:c3:5b:e5:53:a6:6f:fc:8e:ca:7e:1e:30:a8:52:
                    de:7a:21:83:88:de:ad:90:66:e4:53:68:39:8d:b5:
                    fd:b1:2a:0e:f7:73:bb:e3:52:c9:68:5b:ca:8e:48:
                    59:4d:ea:b4:88:3a:30:ab:36:1a:e0:61:b5:f6:08:
                    e5:a1:67:86:3d:d1:8f:7d:e6:b9:f7:c9:6d:5d:19:
                    86:a1:cf:3b:77:e4:50:7c:d4:df:0c:5f:6d:5f:bb:
                    1d:64:e5:33:cd:25:60:64:a7:49:b6:3c:fd:a4:70:
                    32:96:65:c2:e6:91:2d:45:4d:11:46:82:3f:c0:32:
                    e4:c0:dd:ec:bf:2d:d8:79:3b:ba:ba:97:49:30:80:
                    9c:8a:34:a1:79:df:ca:05:9f:9f:2e:a4:96:a2:47:
                    37:ab:3f:d0:ed:f5:42:23:f8:30:1a:5d:5f:0a:6b:
                    45:2a:15:20:4a:45:7d:8e:f7:3c:d5:a0:af:0b:fe:
                    22:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:77:15:38:F1:26:1C:D8:EF:C4:72:E5:44:94:0C:2D:09:B6:43:50
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:30:5e:45:b7:de:53:8d:a9:03:11:60:1f:89:0c:b2:af:3e:
         86:2b:72:7a:7c:39:87:27:80:77:30:d8:fb:02:60:0f:60:90:
         85:b1:fd:bf:66:5b:98:07:75:ad:63:05:aa:ab:ed:da:a7:ff:
         44:08:3c:b5:51:8a:03:36:b2:36:16:d8:b1:d3:9f:75:ec:f8:
         4a:d5:f7:da:18:01:38:13:7c:a8:eb:f1:63:aa:cd:12:e6:f2:
         72:da:d5:a6:89:f0:07:87:3c:bb:a7:5f:f5:47:4e:f8:01:b3:
         62:78:0d:8b:d8:46:dd:74:e1:7c:c3:03:ee:6e:fb:ac:a8:4c:
         87:83:ca:eb:76:74:d4:65:e8:f8:f5:bd:57:ae:5a:68:6d:0c:
         e8:b5:61:4e:31:8a:de:6f:aa:e3:17:c4:ab:ec:0e:49:79:3d:
         9d:ce:65:c6:4d:e8:cc:a1:b3:00:21:c2:57:28:b3:4d:03:1d:
         13:43:58:f6:de:14:98:45:ed:e4:30:36:0b:57:3c:48:f7:9f:
         53:f0:07:b8:fb:97:fb:38:04:e4:db:45:27:53:3c:59:57:f0:
         3c:43:fd:ca:f8:cd:e8:32:b9:3b:6c:7d:2b:dc:5c:50:2e:7c:
         f7:c6:fc:aa:f4:ac:ed:c8:4c:52:0d:44:1c:80:5a:6b:68:c5:
         31:cd:22:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:14:27 2025 by rpki-client