Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          GTv2fgYZtSBeX0f6jfZo3a1ZGaUswL1NRZBvaGREDHo=
Subject key identifier:   C2:86:DD:07:C8:E3:3E:15:EE:15:BD:B8:46:55:E2:7B:6F:A7:61:6D
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       0199FB7CA7A974C043FA1649ED9D8A40AA74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          07AB
Signing time:             Sun 19 Oct 2025 08:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:14 +0000
Files and hashes:         1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=)
                          2: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: +hFGH6CZ1tOuLp6Sa3r0PAbH7J+6v6i0tkx6ZzYOaVc=)
                          3: YxZAW7xYuuoItNSxZUB_Jyv54M8.roa (hash: ZHkpmuH04xDfiHb0nZigSHP0TijTWcHxuOKkj3BJQR4=)
                          4: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=)
                          5: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=)
                          6: yM87hDn48G9pC2uXeNqB6MxDyyY.roa (hash: m4eQad2ewLgQnWmXHQewt9Vc5wlc0Xqlxo4fhTztW/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:a7:a9:74:c0:43:fa:16:49:ed:9d:8a:40:aa:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: Oct 19 08:01:14 2025 GMT
            Not After : Oct 20 08:01:14 2025 GMT
        Subject: CN=c286dd07c8e33e15ee15bdb84655e27b6fa7616d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:5c:96:cd:74:aa:f3:e5:39:02:d6:c0:a1:
                    df:6e:72:89:e8:00:0e:e5:ec:e5:41:6b:ff:c2:2d:
                    11:88:ce:ce:c2:40:14:df:e8:d7:19:f3:c3:19:0f:
                    cf:3a:18:e3:ce:95:b6:82:a3:96:fe:74:4e:6f:5d:
                    84:7d:a9:36:b5:47:df:0c:5a:6e:0e:56:3c:a1:15:
                    24:22:bf:ea:ed:a1:d3:d9:18:cc:9a:a7:d3:1f:ed:
                    af:87:dd:53:2d:6e:20:bb:fc:ce:4c:c4:06:12:2f:
                    b5:c3:14:ae:5b:30:9c:2f:20:49:97:df:de:79:6d:
                    23:84:8a:96:39:10:49:60:ec:20:6a:d5:69:b6:0d:
                    60:00:5f:e4:27:56:2e:f0:2a:25:2f:75:42:be:e1:
                    b4:8c:1f:17:f1:30:ed:f5:c6:ff:b9:1b:06:1a:2e:
                    c0:0f:7c:d7:df:b0:f8:cd:2e:49:20:f3:46:1f:e8:
                    fb:a8:d4:b4:e5:f6:de:67:a9:66:40:40:dd:d7:83:
                    63:2d:dd:83:83:c7:6a:40:93:4a:ac:6e:25:a7:b6:
                    e1:a1:1f:bb:be:1c:0c:44:10:6c:ed:38:24:61:71:
                    6e:10:37:9e:19:ce:d9:ba:8d:d3:cc:12:81:4d:8b:
                    8b:f8:a1:86:a2:05:49:32:f3:a4:58:48:54:77:56:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:86:DD:07:C8:E3:3E:15:EE:15:BD:B8:46:55:E2:7B:6F:A7:61:6D
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e8:43:cd:0f:8f:d9:5f:a8:2d:a1:71:4d:20:8b:36:cd:66:
         c7:c7:3b:b2:f0:32:79:e1:a1:dc:73:2b:c1:8a:b0:a0:a0:9e:
         a9:1c:aa:b7:f8:df:4b:cf:ad:08:e9:73:47:3d:b6:cd:8f:4f:
         5c:68:c5:0c:db:66:2f:a7:31:aa:3e:9a:91:ae:e7:b1:97:ca:
         76:8f:13:0e:08:d0:10:9f:c8:0d:76:99:79:2d:a4:73:63:b6:
         0c:7e:54:3b:f6:8e:aa:d7:ec:74:3e:62:65:80:ba:c8:20:e1:
         7b:a1:c3:76:87:2e:91:fe:98:30:7a:26:03:bc:c3:45:03:38:
         21:4a:97:5d:6d:b3:b8:90:7f:d2:e4:46:82:e7:54:f2:1a:b5:
         9b:2b:e9:71:dd:36:e2:14:03:58:c2:49:2d:cc:15:27:38:ce:
         60:d9:16:8c:4b:42:ad:b4:50:2b:d4:8d:af:e0:4d:39:fc:6c:
         de:b3:a5:2a:df:23:7c:95:fb:e5:1a:21:03:d3:37:1d:77:8d:
         18:aa:dd:7b:32:60:dd:89:77:9e:30:f4:ef:ad:60:84:a7:68:
         89:35:5d:1b:87:24:00:e9:64:ea:ec:10:33:f3:71:6b:ab:c2:
         4e:21:67:95:c8:13:59:10:e1:de:0d:ea:fd:b9:74:56:ac:55:
         70:7c:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:48 2025 by rpki-client