Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          fizIYV+FsQXusrlMVMBSWWYTlQkpRJEjqfACzVAiU1k=
Subject key identifier:   EB:A7:8A:60:EF:FA:42:97:E6:EE:11:09:E7:CF:B4:53:28:A2:0F:21
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       0198D5F138888C245F6FC4DBA0E6FCE35861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          0713
Signing time:             Sat 23 Aug 2025 08:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:12 +0000
Files and hashes:         1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=)
                          2: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: Z8iJzZC3z11Fc099YxS4MRdXzPBDc7nvmDmOZvlm9LM=)
                          3: YxZAW7xYuuoItNSxZUB_Jyv54M8.roa (hash: ZHkpmuH04xDfiHb0nZigSHP0TijTWcHxuOKkj3BJQR4=)
                          4: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=)
                          5: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=)
                          6: yM87hDn48G9pC2uXeNqB6MxDyyY.roa (hash: m4eQad2ewLgQnWmXHQewt9Vc5wlc0Xqlxo4fhTztW/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:38:88:8c:24:5f:6f:c4:db:a0:e6:fc:e3:58:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: Aug 23 08:00:12 2025 GMT
            Not After : Aug 24 08:00:12 2025 GMT
        Subject: CN=eba78a60effa4297e6ee1109e7cfb45328a20f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:86:5b:a8:82:d7:fb:fb:97:0b:3b:52:21:
                    0e:82:7d:31:82:11:41:e9:ae:16:09:bd:70:06:b5:
                    9d:4c:e4:8f:86:94:e2:d2:fb:4a:42:dd:db:2e:4c:
                    14:78:71:f8:a5:5d:a9:58:19:31:8d:62:90:f7:e5:
                    91:7b:0c:8e:5a:df:ba:6e:fc:43:7f:3d:c3:32:e4:
                    cf:a5:e3:5f:54:31:03:b7:6d:ab:6a:a5:6a:3a:44:
                    a7:61:a4:6b:f3:03:b5:9f:ab:a9:06:31:4f:4c:2c:
                    5f:d2:3d:0d:27:dc:0c:f8:b5:13:d8:0e:eb:f7:a8:
                    c6:a3:20:02:4d:d0:12:f6:0e:5c:47:98:3a:43:ef:
                    aa:6e:00:92:2d:7c:ec:69:a4:38:18:7d:e6:7c:4b:
                    d0:ca:88:fc:a0:97:65:a6:6c:4f:e0:1e:1e:e0:21:
                    e3:09:f5:80:d0:9d:5b:a2:76:67:55:5b:fa:94:a0:
                    86:d4:4c:a9:ca:8d:61:a4:54:15:6f:ab:a1:83:86:
                    fe:a8:77:40:73:a3:ee:c3:9e:07:a3:c1:73:b4:62:
                    71:4f:e6:85:80:a7:73:db:8e:73:af:5d:a2:c9:9e:
                    45:cf:df:2b:81:17:26:b8:0a:3b:5e:ad:ba:aa:cd:
                    0b:d0:42:34:5c:4a:56:42:62:0d:f3:7a:46:c8:ae:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A7:8A:60:EF:FA:42:97:E6:EE:11:09:E7:CF:B4:53:28:A2:0F:21
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ac:48:01:fa:bc:06:11:05:f3:54:91:24:a3:32:1e:d6:0a:
         2f:96:52:2d:0a:9f:c3:d4:43:c3:d8:94:8c:a2:f7:d6:54:ce:
         64:e7:5c:39:53:77:48:6e:86:8c:e2:b6:33:f1:dd:95:bf:45:
         85:95:8d:a1:77:05:0d:dc:bb:e5:6c:bf:d4:85:ec:d4:bc:03:
         29:61:8b:2e:36:e5:6f:c4:dc:0c:21:34:d7:74:a8:54:f0:64:
         49:41:be:cd:4c:75:68:4c:99:b8:e0:ca:43:bd:bb:07:58:bb:
         53:d0:dc:4e:aa:18:fd:2e:ed:bc:de:0a:f2:b3:78:c5:2d:02:
         f7:1a:ac:80:95:a8:88:20:5f:da:45:d4:77:01:47:ea:40:da:
         90:4c:5a:a7:b6:27:40:ce:61:6f:91:18:35:e1:6b:8b:ee:cd:
         c4:e9:f4:c6:21:7a:56:6d:b6:8c:a6:74:bb:32:78:db:9e:4f:
         e8:c6:a2:6a:4d:35:74:ee:12:87:0a:d2:ba:67:0a:01:6a:88:
         a4:1a:fb:d4:52:08:3d:4c:09:68:2e:e4:ee:9c:53:20:1d:df:
         bf:76:f6:ea:eb:f9:e2:2f:fa:b4:fd:30:2d:68:eb:0d:8c:ae:
         7c:3f:d5:13:35:f7:23:e8:87:9b:d3:4b:fd:43:c4:0f:e6:80:
         47:e9:28:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:33 2025 by rpki-client