Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
File:                     xGn-PYgsk-OOi2ooajF33Bfpmsc.mft (raw, json)
Hash identifier:          JXRZ0IpWuWhxpVDjFM+nM6w//hx65yarbXzKQroxdq8=
Subject key identifier:   6A:2F:62:53:9A:CE:B6:3D:5E:C7:E0:0D:3D:5B:34:02:03:15:E0:1E
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Certificate issuer:       /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial:       0198D6CD885148FEE73363DFF30A317D4B4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 12:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:50 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:50 +0000
Files and hashes:         1: EOlGjDlmQ3zjWLU87OYTWDWcCEY.roa (hash: pUBA00I+CQC2RPjmIddeqkkbXGoBJUyoSnMxqvr2Gas=)
                          2: VWhDL_pbFyyRh5F_p1365369fw8.roa (hash: h0UGnV1yT7TAR4sgEMb7SSbuBaNRRDcOsgJUpZU75gM=)
                          3: eStVA852783cSRla3cS6Sa73nTo.roa (hash: hjwJSk0hM/n7mjZhOiCDKrp/IiuwE5tJF1ttaMrAUdQ=)
                          4: mz6tpSTyWG1tpsywf2xFprKsdgk.roa (hash: TcXisvKqSL089bUIJMzgiUZfK9JnlvU+0pDp8FZCWe4=)
                          5: xGn-PYgsk-OOi2ooajF33Bfpmsc.crl (hash: tncW4xXAr/fC6H4c8a4WHzw8eiOSrlXi36CZbLfNOC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:88:51:48:fe:e7:33:63:df:f3:0a:31:7d:4b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
        Validity
            Not Before: Aug 23 12:00:50 2025 GMT
            Not After : Aug 24 12:00:50 2025 GMT
        Subject: CN=6a2f62539aceb63d5ec7e00d3d5b34020315e01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:35:be:61:8e:27:c0:8c:d3:cb:fd:ba:3e:
                    8b:ea:7f:94:32:e2:2a:ab:65:8e:42:1a:04:fe:1b:
                    46:69:ee:b9:be:7e:2c:b2:7f:b7:d6:d1:5f:3d:17:
                    3b:a0:4d:63:d6:4a:c6:26:55:26:7c:38:9e:a1:c1:
                    81:89:86:64:7f:e7:40:b2:a5:5f:5e:0a:13:86:65:
                    37:84:df:01:81:93:43:fc:bc:d5:d4:25:c4:b6:f1:
                    96:ff:d8:c7:af:b7:1a:42:86:0b:21:be:a0:24:c5:
                    b4:a3:04:bc:63:3d:fd:b7:94:b3:9c:47:c9:d1:48:
                    28:0f:00:9b:3e:66:a8:59:ca:d4:71:df:bc:10:e9:
                    3c:bd:cc:7d:ac:ea:94:5c:31:c8:51:06:0f:eb:20:
                    b8:a7:4d:1d:10:c5:4d:89:fa:b7:c4:40:33:60:21:
                    e0:21:71:79:e6:7a:73:0d:91:86:da:95:0f:73:2c:
                    ce:80:e4:43:f7:8f:45:42:45:b3:f5:bb:e7:a9:99:
                    5e:d7:6f:14:3d:2d:b1:92:ce:8f:a1:40:7f:bf:95:
                    b3:68:18:dc:d0:05:44:4c:3a:fc:4c:f9:2e:73:8c:
                    36:8f:23:05:e1:08:c4:87:13:0d:2d:b0:7a:91:5a:
                    32:9f:5b:8a:b2:62:f2:7a:c3:22:15:8f:43:84:4a:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2F:62:53:9A:CE:B6:3D:5E:C7:E0:0D:3D:5B:34:02:03:15:E0:1E
            X509v3 Authority Key Identifier:
                keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ff:77:b3:65:53:aa:74:8a:52:65:75:9e:27:14:a0:4d:a1:
         d2:e0:b2:7e:01:9e:58:c5:a5:07:fe:e1:ec:f8:21:39:7a:3d:
         3f:f7:05:7f:4e:63:5b:f1:1c:5f:cf:a9:4c:e5:87:aa:3c:7d:
         15:0b:cc:38:a9:07:09:2d:54:da:36:64:97:60:07:9c:f2:1b:
         53:c8:a1:dd:d9:84:59:62:6b:ce:0d:1c:a5:da:97:a4:41:56:
         23:a5:34:29:30:89:de:6c:e2:3b:56:27:a9:6d:b5:76:55:76:
         52:c7:e5:9b:0d:78:dd:00:59:23:06:58:5d:7b:1b:32:0b:2b:
         93:3d:f1:d8:26:09:e5:ba:c6:1e:a5:b9:50:70:52:3b:0e:c5:
         d0:e1:a6:4f:a2:57:33:54:b9:2c:11:23:e0:6b:7f:0a:fe:ee:
         7c:c5:12:4d:8c:ba:6f:b8:d2:15:53:f4:ab:2b:ef:8a:22:65:
         d0:df:1c:e8:44:09:97:58:aa:8f:c1:e7:71:08:be:a5:48:26:
         21:d3:80:67:d0:31:d3:fb:13:0b:99:e9:ef:37:2e:c6:ac:ec:
         41:54:cc:3e:2c:de:11:28:cf:48:b4:7d:d4:76:2c:10:40:b3:
         9a:60:53:1a:56:10:1d:37:79:7f:6d:cd:75:48:d1:c9:1a:f7:
         3f:53:e6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:52 2025 by rpki-client