Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File:                     Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier:          AcCEQjF2R7lyEB25cK2Kgu/J4q+94iEa72vhKfjm0S4=
Subject key identifier:   46:12:7E:76:42:D2:84:4E:1E:92:F9:FD:16:3B:1D:3C:E1:12:84:A8
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer:       /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial:       0198D404E7BD41C56A4C8F9104565542E6EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number:          1106
Signing time:             Fri 22 Aug 2025 23:02:27 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:27 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:27 +0000
Files and hashes:         1: 3Lwgv8G7H1M7aUpcEvNgmowlLx4.roa (hash: mpBdcgU7I+uQ5H1oVCfF7A1oXC3Ul6uCrit0pbGiORo=)
                          2: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: o1yHgiaVcp6Jmu6r2BGCsNUdpQ7EQ0BrbGY9zPzeeHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:e7:bd:41:c5:6a:4c:8f:91:04:56:55:42:e6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
        Validity
            Not Before: Aug 22 23:02:27 2025 GMT
            Not After : Aug 23 23:02:27 2025 GMT
        Subject: CN=46127e7642d2844e1e92f9fd163b1d3ce11284a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:9c:fc:52:07:c6:f8:9f:0c:71:43:42:7a:
                    7c:91:02:41:12:03:8e:93:08:22:ed:79:ba:7e:7e:
                    e7:26:ff:a7:bf:8f:c6:65:32:17:5a:3e:e2:95:e9:
                    e7:3b:35:bd:be:ef:3f:bd:ab:ea:98:4a:70:e0:e4:
                    5b:2b:3a:48:9c:af:6f:70:53:63:93:9b:9c:fb:2e:
                    e4:bb:14:e7:e0:9e:9c:23:24:4f:01:92:39:b8:7a:
                    4b:2f:48:8a:b3:bc:a4:1c:96:99:36:7b:b6:19:33:
                    37:29:2b:67:f6:eb:fb:a8:ef:bc:a5:d5:80:56:b8:
                    5b:69:63:20:b9:e2:61:89:36:10:01:22:92:05:c2:
                    f1:ca:39:6d:56:8e:11:d1:6b:62:2d:bb:dc:13:3d:
                    0e:43:9d:96:d8:4c:b8:d0:aa:d8:66:57:92:c9:7f:
                    bc:56:76:97:e4:f3:95:00:c1:4b:ba:74:c8:af:06:
                    eb:5c:25:83:a4:b7:bb:d2:b1:31:99:5b:ee:43:cc:
                    6d:49:aa:1e:b6:e0:f1:55:f7:75:2b:a0:2e:13:23:
                    1d:6b:58:b4:50:dc:08:65:0a:d6:20:cf:4e:fb:8c:
                    d2:18:1d:96:55:e8:c3:68:75:a0:82:8c:06:35:4f:
                    63:07:24:c4:c6:d1:63:34:86:2d:e7:3d:a3:94:3f:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:12:7E:76:42:D2:84:4E:1E:92:F9:FD:16:3B:1D:3C:E1:12:84:A8
            X509v3 Authority Key Identifier:
                keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b6:66:b1:3f:94:60:d2:5a:18:f6:e4:e7:2b:71:67:6e:23:
         09:7a:9b:2c:a5:e9:26:98:ab:20:fc:98:80:a3:2a:14:54:46:
         a5:ad:36:4a:a9:a0:6c:a0:99:0c:ec:2a:a5:b3:ae:59:b4:d7:
         d7:cb:0e:87:46:41:cf:ec:ee:2c:95:13:99:9e:ad:24:2a:2e:
         76:61:5d:09:d5:03:59:f1:b2:99:3e:17:75:34:6f:1e:7e:67:
         34:86:9d:cb:8c:b0:cb:c9:95:88:a5:f5:55:70:9b:46:d4:f2:
         b5:e9:e5:b5:06:4e:a7:1a:68:33:2b:a8:d2:db:36:11:a8:af:
         5f:ad:d9:1c:21:54:b0:99:26:58:01:e0:76:cf:ba:d6:1e:61:
         e7:81:9f:55:c9:b3:eb:3a:3a:4b:40:3d:f9:7e:06:5c:78:bc:
         bb:da:75:12:90:bb:d8:57:ad:af:22:e3:1e:d7:06:f6:e3:25:
         77:41:42:21:ad:9d:84:a4:a2:3d:6f:d1:b9:47:26:6d:b5:5d:
         e2:db:63:69:a7:a7:f5:45:37:2f:60:8f:65:3d:a7:64:9a:9c:
         8b:50:e8:d3:2e:09:b3:88:59:c1:aa:3b:51:96:92:0e:5b:80:
         80:f3:5f:83:4e:6e:87:9b:b7:82:d3:33:71:f7:61:e7:cb:f0:
         9e:3c:bc:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBOe9QcVqTI+RBFZVQubvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOWI5YmVkOGY4ZDNkNTc5YmIwNTUyZTRmYzRiODE5ODY4
NjFlNjQwHhcNMjUwODIyMjMwMjI3WhcNMjUwODIzMjMwMjI3WjAzMTEwLwYDVQQD
Eyg0NjEyN2U3NjQyZDI4NDRlMWU5MmY5ZmQxNjNiMWQzY2UxMTI4NGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jyc/FIHxvifDHFDQnp8kQJBEgOO
kwgi7Xm6fn7nJv+nv4/GZTIXWj7ilennOzW9vu8/vavqmEpw4ORbKzpInK9vcFNj
k5uc+y7kuxTn4J6cIyRPAZI5uHpLL0iKs7ykHJaZNnu2GTM3KStn9uv7qO+8pdWA
VrhbaWMgueJhiTYQASKSBcLxyjltVo4R0WtiLbvcEz0OQ52W2Ey40KrYZleSyX+8
VnaX5POVAMFLunTIrwbrXCWDpLe70rExmVvuQ8xtSaoetuDxVfd1K6AuEyMda1i0
UNwIZQrWIM9O+4zSGB2WVejDaHWggowGNU9jByTExtFjNIYt5z2jlD/WRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYSfnZC0oROHpL5/RY7HTzhEoSoMB8GA1UdIwQY
MBaAFF6bm+2PjT1Xm7BVLk/EuBmGhh5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQt
YTVhNWFkMDZlYjQzLzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC80NDhjODUtYTk2Ni00ZGYyLTk4ZTQtYTVhNWFkMDZlYjQz
LzEvWHB1YjdZLU5QVmVic0ZVdVQ4UzRHWWFHSG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7ZmsT+U
YNJaGPbk5ytxZ24jCXqbLKXpJpirIPyYgKMqFFRGpa02SqmgbKCZDOwqpbOuWbTX
18sOh0ZBz+zuLJUTmZ6tJCoudmFdCdUDWfGymT4XdTRvHn5nNIady4ywy8mViKX1
VXCbRtTytenltQZOpxpoMyuo0ts2EaivX63ZHCFUsJkmWAHgds+61h5h54GfVcmz
6zo6S0A9+X4GXHi8u9p1EpC72FetryLjHtcG9uMld0FCIa2dhKSiPW/RuUcmbbVd
4ttjaaen9UU3L2CPZT2nZJqci1Do0y4Js4hZwao7UZaSDluAgPNfg05uh5u3gtMz
cfdh58vwnjy8sQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:00 2025 by rpki-client