Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          e+v9t0HeNG13r0T/iwdfr8xIsigYpald3iHSlYSEkIc=
Subject key identifier:   1C:0B:45:94:CA:9C:95:0A:71:34:47:BA:B7:C4:56:63:F2:27:49:F3
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       0198D515925F13B9EA753EDE0E2E32C6FE95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          1954
Signing time:             Sat 23 Aug 2025 04:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:17 +0000
Files and hashes:         1: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=)
                          2: IpxghYpRjowqsS6b88ua7AzZ3zI.roa (hash: U+10ygsJWXzDuIN6SPI2c6Ew1Ag6AhoLc8IDWyxXp5Q=)
                          3: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: uajC76FvsF1fziXyJUj2sBVSrwvmFXf0rqVu1N23Y80=)
                          4: jPPJRlQHOW3Bdo3Xffl1cKS8yYI.roa (hash: +QHKisnDpujXyoJyM4AGTUHFPfJzBO245kYgUJWvE8Q=)
                          5: lrn8fTBm5Hwwv5lkzu-PF_WjeuM.roa (hash: AulLO5ISzv6y0p0lTRaR6/DExJCM06PRBRCrm0K+hRI=)
                          6: s6nYW-wwFY4e4FliH1slATjjkcI.roa (hash: IaJM9j4ERldNW3bqfwmZZck2Nh3sfZGgvyUZuPD1Rqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:92:5f:13:b9:ea:75:3e:de:0e:2e:32:c6:fe:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: Aug 23 04:00:17 2025 GMT
            Not After : Aug 24 04:00:17 2025 GMT
        Subject: CN=1c0b4594ca9c950a713447bab7c45663f22749f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:a2:b8:27:0b:64:6a:bc:54:9e:51:f8:81:
                    7d:46:00:5a:16:8e:30:c0:f3:a2:0d:b1:45:5e:60:
                    1c:13:12:a4:6a:8f:24:ef:27:a3:2a:7f:96:dd:8a:
                    53:27:f3:7e:a9:6e:1b:c3:8f:87:04:fd:d1:11:58:
                    7c:f1:af:e7:6e:5a:56:df:5d:bc:61:cc:77:45:c8:
                    51:b3:9a:a5:26:d1:a6:55:58:25:42:e9:55:bb:2b:
                    b8:cd:06:b2:f5:91:e8:93:c1:88:bc:a5:0c:8f:4d:
                    48:cd:73:aa:cd:4a:ff:53:54:b5:7b:e8:ee:85:dd:
                    00:c2:9b:77:78:0c:70:d8:85:70:94:25:23:b8:34:
                    3f:54:23:ac:43:e8:69:2c:2f:60:f6:52:d3:21:b6:
                    31:f9:da:48:ab:26:fd:01:a7:e1:91:d2:de:06:ae:
                    a0:80:a9:ad:34:a3:39:46:a5:b6:97:7c:3f:b9:8a:
                    fd:94:b1:08:d5:29:0a:23:36:d7:52:74:81:88:6f:
                    5f:bd:c6:86:05:ba:bc:5e:50:b1:19:22:9f:b3:a6:
                    63:cc:9d:90:3a:1c:d0:de:1a:c1:f3:6e:ea:2e:ca:
                    af:2b:a7:a6:13:b1:13:81:87:e9:72:95:ee:b3:91:
                    58:0e:cd:a5:ba:82:29:8a:81:5f:0d:74:94:a6:76:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0B:45:94:CA:9C:95:0A:71:34:47:BA:B7:C4:56:63:F2:27:49:F3
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e7:21:93:34:06:89:be:9d:5f:47:3e:d6:69:0b:ef:a3:da:
         f2:59:0e:7d:54:fc:b5:36:80:b3:51:95:62:85:be:bd:05:4b:
         f9:b1:bd:4c:8a:bf:33:37:73:ee:f2:c7:d7:50:4b:4f:60:32:
         9c:65:98:ad:9f:fc:4a:43:1a:27:d6:a9:63:fd:56:8b:8e:ef:
         28:bc:52:cd:d9:06:42:bd:56:0a:57:30:31:01:8c:34:4e:ee:
         25:6f:fb:33:cc:79:b4:68:bb:20:00:f5:73:ce:6e:2b:c4:41:
         86:db:15:74:db:8c:78:a9:64:ac:b0:b8:51:f6:cb:86:69:e1:
         c0:61:f0:ed:16:ba:b8:7f:ed:7c:e5:7f:6c:0d:26:33:bc:34:
         34:49:4b:b1:01:5c:96:cc:a4:04:53:59:0d:de:88:38:0b:29:
         bd:7b:46:2e:dd:2c:08:69:7a:4f:0c:ba:6f:5d:44:cb:67:19:
         03:a2:ab:e3:d7:c6:f5:ef:2b:fe:1e:c5:19:0c:2e:c2:ab:81:
         bf:c7:b1:b9:8d:41:f0:6c:e5:42:85:c1:62:ed:f9:f6:b4:4a:
         59:ab:11:73:03:69:f7:09:38:d4:4c:85:02:85:a9:b7:9e:d1:
         6b:a7:f1:4f:a1:6e:8d:b4:64:72:7b:9b:69:d5:bf:db:f0:f8:
         82:75:ad:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFZJfE7nqdT7eDi4yxv6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMWJmNmEzMTlkYTI0ODk4MTZhZWRiYTFiNGZkMGNjN2Rk
ZjNlMWUwHhcNMjUwODIzMDQwMDE3WhcNMjUwODI0MDQwMDE3WjAzMTEwLwYDVQQD
EygxYzBiNDU5NGNhOWM5NTBhNzEzNDQ3YmFiN2M0NTY2M2YyMjc0OWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq2iuCcLZGq8VJ5R+IF9RgBaFo4w
wPOiDbFFXmAcExKkao8k7yejKn+W3YpTJ/N+qW4bw4+HBP3REVh88a/nblpW3128
Ycx3RchRs5qlJtGmVVglQulVuyu4zQay9ZHok8GIvKUMj01IzXOqzUr/U1S1e+ju
hd0Awpt3eAxw2IVwlCUjuDQ/VCOsQ+hpLC9g9lLTIbYx+dpIqyb9AafhkdLeBq6g
gKmtNKM5RqW2l3w/uYr9lLEI1SkKIzbXUnSBiG9fvcaGBbq8XlCxGSKfs6ZjzJ2Q
OhzQ3hrB827qLsqvK6emE7ETgYfpcpXus5FYDs2luoIpioFfDXSUpnaRnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwLRZTKnJUKcTRHurfEVmPyJ0nzMB8GA1UdIwQY
MBaAFF4b9qMZ2iSJgWrtuhtP0Mx93z4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYt
YjU5MDk1N2Q5NDE1LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYtYjU5MDk1N2Q5NDE1
LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuchkzQG
ib6dX0c+1mkL76Pa8lkOfVT8tTaAs1GVYoW+vQVL+bG9TIq/Mzdz7vLH11BLT2Ay
nGWYrZ/8SkMaJ9apY/1Wi47vKLxSzdkGQr1WClcwMQGMNE7uJW/7M8x5tGi7IAD1
c85uK8RBhtsVdNuMeKlkrLC4UfbLhmnhwGHw7Ra6uH/tfOV/bA0mM7w0NElLsQFc
lsykBFNZDd6IOAspvXtGLt0sCGl6Twy6b11Ey2cZA6Kr49fG9e8r/h7FGQwuwquB
v8exuY1B8GzlQoXBYu359rRKWasRcwNp9wk41EyFAoWpt57Ra6fxT6FujbRkcnub
adW/2/D4gnWtRg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:17 2025 by rpki-client