Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File:                     XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier:          CdB/aEE0JW+UulqsCv65g2+zkLBWBdnW/gzGmR1YaXk=
Subject key identifier:   27:92:3C:7E:A1:85:D0:44:62:4B:5F:1B:31:93:17:9E:80:70:86:87
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer:       /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial:       0198D5F1BAC6C92DE2D5D72A634A3ED8DE3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number:          0E06
Signing time:             Sat 23 Aug 2025 08:00:45 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:45 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:45 +0000
Files and hashes:         1: 1-YgT2Dp81wwlxN4YhUFJI1jv6Y.roa (hash: yL6zyGeH92adtXQSKd8Mq3UDRt+aKFGYWzlFrk9kOSk=)
                          2: I8DMWQAbEysV4PDmbb3bRruhjec.roa (hash: Cl7Aw52r728Nutene1KOGwtu14nrh0ED/njKmWb9bKc=)
                          3: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: LwNQJd4OGjoHXgW+SZpxPBKrMZocN1ZzZclnOHF3iFE=)
                          4: Z81p6D_dRIvEDGrIYx1WijPMCWI.roa (hash: B0c4eefCOibc6e3+7zDAkWkLSK4xkeiQAdhY0t08sgw=)
                          5: h_7ZeyN0CJd5pV3oePoLMnfCfv4.roa (hash: eo68bGKMEV2uIG8GoiwpOo5Bk9D1vHS+LUaw94GkOVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:ba:c6:c9:2d:e2:d5:d7:2a:63:4a:3e:d8:de:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
        Validity
            Not Before: Aug 23 08:00:45 2025 GMT
            Not After : Aug 24 08:00:45 2025 GMT
        Subject: CN=27923c7ea185d044624b5f1b3193179e80708687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ab:6a:5e:da:e9:1b:a6:8b:4e:0c:01:57:99:
                    ae:00:b6:7e:82:70:e5:41:8f:00:1b:d1:5e:a8:d1:
                    87:b3:88:db:8b:07:7d:d6:21:6d:d5:ac:43:55:c5:
                    8c:da:99:09:e2:ef:f3:50:cb:7e:ec:6f:11:be:4a:
                    f1:bd:04:98:32:50:b9:02:3a:70:ba:5e:29:bd:b0:
                    8c:02:6c:05:e9:df:c0:1d:f4:ed:49:57:3c:bd:15:
                    38:1b:0f:53:c2:76:0e:83:38:e5:50:b1:9e:ee:09:
                    d6:98:51:fb:b0:37:2b:32:03:0c:e3:f2:8b:5a:fd:
                    20:97:b1:49:46:a7:70:ce:de:ac:ba:23:49:81:21:
                    b0:15:f1:73:35:65:37:52:7e:72:43:7e:9d:72:3e:
                    64:07:bb:6c:cc:1c:2f:8c:c5:5d:2c:2a:ec:b6:b5:
                    03:b6:d2:36:db:e3:ba:27:64:ab:ae:2f:d4:56:fd:
                    65:cf:3c:9e:ea:54:ec:f1:94:f4:f0:b9:5e:28:70:
                    4f:51:8a:8b:d3:8f:b8:85:23:87:d2:1a:36:20:71:
                    e8:91:47:f2:b8:64:d7:8a:a9:70:71:62:5a:0a:93:
                    bf:89:1d:c0:10:fb:c1:ce:f2:a9:fe:28:2c:9f:24:
                    f9:4f:8b:4d:6d:b5:c0:49:0b:aa:19:50:71:59:70:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:92:3C:7E:A1:85:D0:44:62:4B:5F:1B:31:93:17:9E:80:70:86:87
            X509v3 Authority Key Identifier:
                keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:b1:54:5f:aa:0e:72:f0:c9:11:a6:0e:a4:1b:fd:48:3c:
         36:71:c7:4a:0f:08:c8:26:ac:1d:2c:28:8f:ef:3b:bd:e9:4d:
         31:9e:77:54:5b:76:4e:d9:35:e8:a2:06:e7:92:cd:28:3d:af:
         4e:99:15:98:53:21:94:cb:9e:94:be:fa:de:63:65:50:f3:4e:
         0c:c3:6c:c2:7f:d0:d1:62:1e:e1:dd:13:17:5d:2b:46:e7:a4:
         77:01:14:d9:35:60:5e:a9:03:cb:87:e4:e1:1b:40:b1:2f:17:
         e3:54:d2:eb:2c:e3:d3:ef:7c:1e:09:82:45:da:55:5d:20:2b:
         a8:82:89:4d:1e:47:fc:b5:e0:3b:2b:c7:5a:9b:bc:ba:b4:09:
         d8:c9:94:f8:26:51:7c:89:48:b0:1c:e6:b8:d4:36:67:fb:5b:
         f4:a8:fb:67:2d:5c:c0:db:fa:1b:48:66:9a:32:87:f3:4f:3d:
         fe:57:93:dd:e8:a8:7b:b3:86:aa:69:14:7f:9a:1f:d9:a3:cb:
         8a:dc:a9:19:09:7e:dc:1f:4e:ff:b2:e5:53:27:21:a3:06:b5:
         3e:18:6a:fe:ed:51:dd:37:e7:e8:17:1b:32:40:d9:73:e5:69:
         df:53:a0:4f:2f:45:79:39:84:bb:ee:e6:0c:43:88:f2:cc:ea:
         1f:9c:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:52 2025 by rpki-client