Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File:                     Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier:          DzAufh2VGoQgHR9uNyxDG0nfQeG5zz8MBV6uGEVicHE=
Subject key identifier:   EC:22:88:F5:EC:6B:42:0A:D0:76:4F:2D:BF:44:26:5F:4A:B0:C2:B6
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer:       /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial:       019827477E5D5B48823DC07A7C3C6D63E8BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number:          1608
Signing time:             Sun 20 Jul 2025 10:00:53 +0000
Manifest this update:     Sun 20 Jul 2025 10:00:53 +0000
Manifest next update:     Mon 21 Jul 2025 10:00:53 +0000
Files and hashes:         1: 42NnB3jW5n3RbWWrHMDd_7NubAY.roa (hash: bZyySLXxgMQfpoBtEuXSmgHgMgLKQxBjV3IqMenXg0E=)
                          2: EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa (hash: GstL7gwAEgcyBOR5WEEQ3UJ45LkAklqubcGaSv86PEM=)
                          3: U3GEel-_AheBYgIYIVYL9mt_5dg.roa (hash: qjeuuOD21NigMG6GkIxT7OwP2vU0izG4cg6tV2NDSPY=)
                          4: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: n77xMO6BPmWmmbqbCF3E9Nr2iwYusWLuZDtWB6a5hOs=)
                          5: ZvRJrTWQfMOoVK-yV_Cqwkgeu5A.roa (hash: hHz6N7J+wTDqY/Lm+M/7LMn5tnMNWvw100eCFcrE1zM=)
                          6: hMxFbe2_woNux6m3JkElwux-E5g.roa (hash: nrSIsPwWOsAGq4mrEG8bp4vhnLrScT5iVl2b8ClElOk=)
                          7: olCZzHEOZSOjj4yqtahX2zJkhMQ.roa (hash: aXtBhSkmw714xAy5wT1PAT7ELEpsc4omuqROu4g4WE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:47:7e:5d:5b:48:82:3d:c0:7a:7c:3c:6d:63:e8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
        Validity
            Not Before: Jul 20 10:00:53 2025 GMT
            Not After : Jul 21 10:00:53 2025 GMT
        Subject: CN=ec2288f5ec6b420ad0764f2dbf44265f4ab0c2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:77:3d:e3:8d:8e:86:62:57:7e:6a:cb:a8:
                    2f:46:0e:03:bf:09:8e:1c:c6:08:7f:95:6e:51:05:
                    0d:0b:08:dd:20:ea:02:a3:05:d5:6d:da:1f:0b:0b:
                    83:a3:d0:8a:a6:19:a2:19:bb:4f:8c:3f:48:26:12:
                    cd:11:39:6b:18:25:c7:fb:b5:2d:54:6b:4e:43:fa:
                    e0:e2:c6:97:a0:28:45:62:5d:ca:e8:49:2d:74:35:
                    e0:f9:17:35:5f:16:68:57:4f:22:40:49:7f:bb:da:
                    1b:5d:76:30:9c:73:01:29:55:d0:a2:48:fa:0b:54:
                    8b:d7:b9:fc:59:f9:a5:61:1a:9d:79:3c:12:00:b4:
                    db:40:9a:c1:42:d3:fc:1d:ae:45:22:24:b1:c5:e2:
                    4d:c5:c7:f1:ad:e1:e3:c4:04:75:9e:be:76:4b:2f:
                    81:3c:19:47:b6:bf:9b:0a:04:b1:e9:4a:68:60:47:
                    c0:84:6a:34:0f:00:38:19:0a:ac:ac:34:55:50:de:
                    e6:17:31:05:7a:b9:d0:fa:7d:8f:6d:f9:2e:7b:41:
                    8e:47:04:6b:35:ae:21:88:99:51:1d:2a:1c:2c:49:
                    77:18:f7:bb:8b:89:ee:08:d4:42:f9:f0:84:2d:5e:
                    70:5c:c7:47:ad:ea:52:68:b8:67:32:d4:64:33:b0:
                    b1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:22:88:F5:EC:6B:42:0A:D0:76:4F:2D:BF:44:26:5F:4A:B0:C2:B6
            X509v3 Authority Key Identifier:
                keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:89:35:b7:59:00:83:bf:90:3a:1f:22:2e:ed:d4:5a:15:ba:
         2b:9f:a0:e1:77:79:c5:4f:76:8a:7c:c2:10:aa:e4:8b:c8:8b:
         ef:d0:cd:e9:6e:fe:ad:91:fc:43:fa:f3:ae:66:7e:7c:8f:67:
         5e:e2:44:b5:90:8a:78:6f:5e:b3:60:d0:a9:a6:79:55:9b:83:
         e7:47:57:4e:47:b7:47:a0:ba:fe:cd:11:e7:96:0e:1d:ac:fb:
         0f:1f:1c:a6:b7:60:a8:51:f7:88:4e:96:8a:55:84:3a:f6:4e:
         82:3a:84:7a:40:60:69:25:ff:1d:b3:77:9b:2b:75:fe:44:bf:
         e8:51:a5:2e:b9:be:a3:55:3f:d0:4b:cc:c8:1e:06:e8:09:41:
         ea:50:7b:bd:22:c1:a1:d5:7e:f8:26:f1:9d:43:18:ed:64:f7:
         45:fc:e0:fa:a0:51:01:cd:68:ca:28:c4:38:c2:b2:ff:d5:85:
         5f:88:f0:62:8a:7d:05:2a:a8:8d:09:ce:1a:24:d3:67:5d:bc:
         ab:76:58:0f:ab:d5:91:3f:ad:32:57:c4:0e:80:e7:46:36:36:
         de:35:e2:66:d9:e2:cf:52:d4:c7:8f:77:43:e0:fb:8f:a1:48:
         1b:d4:86:62:e9:fc:f8:a3:b9:3b:d2:2d:23:35:12:97:8e:b3:
         1b:c5:d8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:50 2025 by rpki-client