Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File:                     xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier:          d5ONLtLHApFLmKT3wMvAAYyXA8EhIVnscghXVXqifF4=
Subject key identifier:   B7:80:58:67:0D:70:AD:00:D9:70:CF:9C:BC:1C:F0:66:4D:F6:72:A6
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer:       /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial:       0198D54EC05413F6E789A3821EE1DDB7F45F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number:          0F76
Signing time:             Sat 23 Aug 2025 05:02:44 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:44 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:44 +0000
Files and hashes:         1: 2bRBlMS8mkEOsT7iLZp1HMc84Xo.roa (hash: CRan8iZGqQIXvLKVDuE31EVqd8lIF+Eg5+VWJIeFz/I=)
                          2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: nn1g84lmAsj+3FOFt6zku1mN5wQcRvBSx2lkGtiSWFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:c0:54:13:f6:e7:89:a3:82:1e:e1:dd:b7:f4:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
        Validity
            Not Before: Aug 23 05:02:44 2025 GMT
            Not After : Aug 24 05:02:44 2025 GMT
        Subject: CN=b78058670d70ad00d970cf9cbc1cf0664df672a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:60:dd:8f:cd:41:d4:3d:77:4d:7e:7b:83:13:
                    07:68:e8:f7:e2:40:fe:d3:3f:bb:86:08:13:b0:6e:
                    a5:e7:ca:c4:3d:1e:b1:21:5f:ba:00:51:50:ce:e8:
                    ac:ba:26:f6:73:20:70:bd:8e:63:e8:45:cc:50:7b:
                    d4:7e:98:2c:3e:c4:b2:64:b1:d2:27:45:f9:d8:65:
                    de:61:6c:4e:2a:77:88:87:63:e2:4d:c9:a6:e7:c0:
                    c8:4e:96:72:4a:56:5a:07:be:67:77:c5:06:86:35:
                    fc:8f:66:87:45:6c:14:34:ac:f1:cd:ba:9d:07:60:
                    b8:02:00:19:4e:3b:3e:d4:6f:73:53:c3:cd:f7:71:
                    62:db:d0:fd:47:07:44:ec:bf:0c:48:9c:d0:d3:82:
                    3c:4c:49:08:25:65:42:de:62:2b:59:2a:d3:44:1f:
                    1d:aa:9b:30:39:08:9b:42:aa:23:ac:c1:74:24:cb:
                    50:6e:4b:de:a9:ff:6a:6c:14:16:b7:62:2a:fe:4d:
                    dc:b7:68:bd:81:9b:c2:f0:1b:39:c8:cb:49:59:7b:
                    e7:bc:70:33:9b:ee:83:91:20:3d:59:b3:87:ce:8e:
                    0b:70:ec:fb:26:d1:c1:2d:0f:b8:b7:7e:76:a2:44:
                    62:b5:95:4d:21:72:0a:26:e9:45:6b:2c:5e:5b:79:
                    37:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:80:58:67:0D:70:AD:00:D9:70:CF:9C:BC:1C:F0:66:4D:F6:72:A6
            X509v3 Authority Key Identifier:
                keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:9d:a2:36:11:5c:9d:35:c3:c7:fa:27:77:2b:d7:de:44:
         12:8c:a3:4b:01:71:1e:eb:95:3f:b3:bb:8d:2c:7c:b3:18:b6:
         7b:d4:17:b5:a9:56:22:11:0e:1b:d7:56:17:cc:37:d4:a1:28:
         40:36:12:99:32:3d:c8:e3:53:d5:ce:13:c0:14:8e:f1:ed:07:
         fa:48:6a:78:8f:13:65:b2:8f:22:9b:a7:fa:74:8a:ed:8c:a3:
         02:f6:79:54:fa:a7:a0:e8:49:1b:74:11:ca:bc:db:43:da:78:
         92:60:40:9e:e6:a5:0e:c7:1b:45:48:3f:a1:38:c2:b6:3d:f0:
         4f:53:5d:bf:24:38:77:2c:34:9d:93:95:d6:4a:cc:48:12:a8:
         a3:0d:1e:00:b3:b4:c5:0a:d9:8b:11:b0:c2:75:6c:e5:25:e1:
         8a:75:82:74:3e:c4:0b:0e:66:55:75:cd:d2:79:14:99:d1:97:
         76:e3:73:06:1a:8d:72:4b:41:19:e0:d6:61:9d:69:79:a8:53:
         8a:88:c9:51:94:6d:5c:86:b2:09:76:15:43:cf:63:c2:72:33:
         ba:02:3f:ee:f2:79:1b:bd:95:9d:06:6c:54:04:4c:df:af:88:
         69:87:7a:dd:69:30:0c:e7:ea:56:a1:95:bb:bc:43:32:d6:fa:
         f4:4e:cf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:40 2025 by rpki-client