Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
File:                     XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json)
Hash identifier:          4I5QvnKO0bol23poSQ5+Ob8BSFe3Euyrc7AWsNh9JlQ=
Subject key identifier:   8D:26:60:3D:11:17:DF:D2:6D:1C:44:EE:A7:BE:F7:4A:A5:B3:FD:51
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Certificate issuer:       /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial:       0198D62989180B29E534319640EF9D93761A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
Manifest number:          0EC1
Signing time:             Sat 23 Aug 2025 09:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:42 +0000
Files and hashes:         1: LvwvNGAUbfT2Bt0tY-karZ_wWIo.roa (hash: kCYXazlMebMuzkkP9xGRP+Rl8qwP4Xflsdq3dLyq/Fw=)
                          2: LwM623k2kR7q91QrhiqdXUwBs7k.roa (hash: RKu1QnAXYUI9f91c+0fb1S3SkGsEsHeC3eprd1gKm7I=)
                          3: Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa (hash: oY8TR8QpN82rkBsByfJvFbSYDVr2vD7taUzMtyjJcBc=)
                          4: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: YUtYMbDDRsGvPhMHgq0o+RvUqmGONnOggMygwc/q/mA=)
                          5: tEgu1CSKDxjQmmWSWD6yXlDQ2m4.roa (hash: 7vrCydh5UH6MCekOIFdu3T2/WFzZdQB8gMeby/ttuZ0=)
                          6: zIPCunbKhz8cPIKe1giE3uIj7h8.roa (hash: 9WpdS/c5vPUs7vn29+uicrAavB5QqpuizqnOqwqgIr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:89:18:0b:29:e5:34:31:96:40:ef:9d:93:76:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
        Validity
            Not Before: Aug 23 09:01:42 2025 GMT
            Not After : Aug 24 09:01:42 2025 GMT
        Subject: CN=8d26603d1117dfd26d1c44eea7bef74aa5b3fd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:e4:a1:96:1f:c9:86:99:57:e0:11:6c:da:
                    86:a4:ee:4f:b1:21:c6:d8:b8:51:73:07:54:12:91:
                    db:c8:4b:a8:20:69:fe:9e:40:09:43:39:7e:3f:13:
                    3a:4c:c9:b5:9c:cd:7b:6f:a7:cb:95:83:8d:42:6f:
                    5a:a8:a7:12:da:b1:2b:5f:8b:72:60:dc:cb:5e:65:
                    be:27:fd:72:e3:0c:4f:42:e2:3e:ac:c8:d7:3d:b6:
                    6a:1d:bb:64:66:39:bc:91:45:2d:89:0a:e2:ff:ea:
                    aa:94:52:05:2f:95:7c:55:67:cc:12:fa:9e:e7:bd:
                    9b:24:e4:49:84:67:e6:2e:bb:b6:d7:83:5d:84:0e:
                    92:4c:9f:7a:8a:77:e4:e3:44:3e:65:bd:2b:21:5c:
                    e5:b4:98:8d:43:5a:04:cd:f4:b9:ca:b7:50:fa:2e:
                    59:95:4a:93:7a:50:d6:41:ee:23:7c:9f:b1:be:88:
                    b1:d3:4e:20:6f:32:fb:31:d0:fd:f4:1a:5c:c7:2b:
                    36:ad:c1:48:da:86:eb:88:3e:e5:69:3e:7a:93:3c:
                    4d:8f:c8:74:e8:9a:00:81:80:2d:91:f8:fe:03:95:
                    fc:c1:9b:77:86:3a:bc:ed:b0:97:7b:5e:aa:84:72:
                    df:5b:67:ec:4b:ae:ac:e9:8a:37:f0:cd:d9:40:77:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:26:60:3D:11:17:DF:D2:6D:1C:44:EE:A7:BE:F7:4A:A5:B3:FD:51
            X509v3 Authority Key Identifier:
                keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:91:42:a1:b5:a5:1c:26:35:43:22:c8:c6:ec:a8:6c:f0:36:
         d0:a2:42:9c:d0:f6:7b:0b:bf:20:6a:c4:8e:f9:60:8e:b2:8e:
         22:2f:ef:16:11:58:62:b4:01:c8:4b:99:13:27:7c:8d:4c:1b:
         7c:74:73:2b:06:43:5a:90:75:6b:71:9c:95:80:89:07:f2:c1:
         6f:09:de:d7:77:72:18:e9:12:6d:48:42:a2:26:4f:76:98:24:
         f0:f8:27:c7:da:09:d9:aa:91:42:08:9e:a6:09:7c:71:c4:52:
         1d:17:13:bf:ae:db:e7:6d:e4:a6:6d:52:12:73:ca:b8:5c:a4:
         49:18:56:83:46:d8:6a:5b:1c:be:d7:e8:bc:cb:99:d8:3d:4b:
         d0:5d:bf:eb:6d:ed:04:d0:99:c3:eb:3d:ed:c8:a2:bc:d0:2f:
         87:53:2e:a4:fd:29:e7:a6:c3:20:61:db:0e:31:42:2d:67:57:
         ae:de:67:b5:fc:9d:a3:cc:ad:d9:35:c8:89:9f:37:b9:f5:2c:
         ef:a1:44:b6:16:91:c0:ee:d9:19:e1:2f:28:f0:35:1f:d3:40:
         fe:7e:cf:44:74:24:1b:4a:83:ee:d5:89:77:db:92:23:49:48:
         17:57:38:a5:f9:3c:5a:cb:c0:81:e8:e6:f7:f3:e4:ad:77:13:
         4c:01:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:50 2025 by rpki-client