Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          0ikdni10M8CJuqB70x/YC1zF8ioyyEGuGRigV21Gvmc=
Subject key identifier:   E6:24:AF:40:23:15:00:8D:81:83:F5:2B:98:60:E4:5C:05:B9:61:BC
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       0198D54DF9B95F8C6041A8E933A3F5469A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          1667
Signing time:             Sat 23 Aug 2025 05:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:53 +0000
Files and hashes:         1: 3V6q1-UeO36fLmJlReM_Gz13sMA.roa (hash: PylpUbq0fhCG4XR5C05AhKT8758HGTKJAPQDgwx9IwI=)
                          2: AGkNk2ZYDTGltyEXWoEVhtwt9oY.roa (hash: dlqvyvQ8Rvf4T+DKyr3OY+YZh3rtTCxaYzwHy40bMgA=)
                          3: BG-IwhP94ukLbxm2X3VxR4W5Nbc.roa (hash: 8rlyAUIx0xWV/NVKgvLdoyGMltHPy6j1FAqFmhNaiKg=)
                          4: H0yf0Oo2kc1vuXQI2C2XHgJR1UA.roa (hash: +TduWsFWrzOECmrsJ1U+XZI1HDNWMV9mx9iurejnLIs=)
                          5: NGphx2qhBW9gE8CfDHfoJNe6mG0.roa (hash: ECnwkjX75lQ4kRJVM7O1TZuPUXkcSD/08JlEytcC2F8=)
                          6: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: 5KN+6Owgf5rG5MHLvlqhW/FcZyRZIqt+0tXswae8ku8=)
                          7: zvoNtmVyFGPqGLORGNfy_liCG3g.roa (hash: OrM2f4p6SPuoSJpjtWAlr90ha2Ax6eDIbJJgANcSLqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:f9:b9:5f:8c:60:41:a8:e9:33:a3:f5:46:9a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: Aug 23 05:01:53 2025 GMT
            Not After : Aug 24 05:01:53 2025 GMT
        Subject: CN=e624af402315008d8183f52b9860e45c05b961bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:68:c6:0b:8b:50:95:71:6c:21:5c:83:76:
                    37:f5:9e:d4:b4:6d:20:b7:05:26:7c:02:7c:58:5a:
                    85:29:d3:d6:80:19:eb:82:c1:74:fc:de:ac:47:25:
                    11:93:f9:c5:e2:a4:2d:4d:74:aa:38:e5:de:64:6d:
                    d6:0f:5a:5b:18:0b:1f:6d:48:a9:6d:00:41:fe:6c:
                    a6:87:0e:0b:17:4d:72:3b:54:0c:3e:00:2b:02:8b:
                    c5:73:d8:1a:e9:b9:f2:62:89:31:e5:0a:e9:ba:1f:
                    c3:92:f1:f2:98:2d:cd:ab:cb:be:60:24:cb:f4:6a:
                    3a:1e:da:19:87:0f:f5:d2:03:07:2f:66:4c:be:66:
                    54:b5:b8:c7:20:5d:ac:52:2a:56:81:7d:38:8d:08:
                    f1:47:3a:3e:7c:6e:2f:78:cf:34:ac:66:d6:7e:25:
                    84:c2:05:b6:6c:47:11:6e:62:fd:a8:4d:04:68:75:
                    2e:61:c1:47:60:fd:df:6f:f5:5b:a4:bc:0c:1a:1a:
                    34:03:c2:33:9d:dc:40:dc:49:89:8f:3c:39:60:17:
                    f4:3d:53:86:cc:e1:30:83:62:ce:f1:3a:9d:ae:c1:
                    f6:39:25:8b:ca:98:06:be:d2:5a:8a:b9:61:10:2f:
                    75:58:0f:95:85:1b:2c:26:89:18:6c:1c:24:ef:ee:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:24:AF:40:23:15:00:8D:81:83:F5:2B:98:60:E4:5C:05:B9:61:BC
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:80:35:6d:9a:4e:18:4f:0c:02:1b:ac:24:17:92:fe:5d:12:
         2d:ab:e7:8f:5d:2b:f5:74:61:24:76:64:fd:f3:89:79:62:23:
         22:c6:0b:0e:78:08:98:15:8d:5a:29:56:5d:4e:fb:06:9a:d8:
         bb:2d:07:c3:95:0b:2c:c8:1c:e2:e0:8d:2d:e7:70:a6:2e:ee:
         4c:82:98:ca:16:50:fa:00:98:92:06:b5:4f:12:b4:d4:b5:93:
         26:0d:db:37:8e:d1:fd:f0:9a:f7:6d:57:b7:c9:7c:82:73:11:
         56:b6:ab:d3:7a:c6:2e:70:65:5a:2f:a6:46:2b:37:cc:5e:42:
         ba:96:b4:a3:1b:2e:5a:57:71:98:0d:ea:a1:70:f1:b0:cd:d5:
         78:2f:c9:68:90:25:30:f6:36:a1:d3:40:8c:d7:1f:ea:c0:90:
         e7:9c:65:54:99:db:05:07:72:b9:a9:75:4a:6f:d0:dd:de:53:
         30:ec:f5:2a:ad:95:74:8a:f3:42:40:ed:60:75:c7:95:7e:70:
         88:4c:f8:52:79:49:ba:f0:4e:05:3c:f4:1b:74:86:4f:40:8a:
         35:0b:af:2e:c8:fc:34:75:9a:39:38:18:3a:62:48:3d:3c:fc:
         3e:ca:73:6d:98:b6:dc:67:14:98:10:42:36:ce:4b:a6:8e:9b:
         b8:4b:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:52 2025 by rpki-client