Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          9UFwX3hzXIIFQEHtMbwIhs8lNonMnWWR5kd3IqPoGdk=
Subject key identifier:   21:D7:7B:63:B7:19:14:4D:B7:B7:70:7A:60:38:A7:D7:39:F5:8F:20
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       01983795DA9EA748A01A4D7207CF7E674CE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          06C1
Signing time:             Wed 23 Jul 2025 14:00:24 +0000
Manifest this update:     Wed 23 Jul 2025 14:00:24 +0000
Manifest next update:     Thu 24 Jul 2025 14:00:24 +0000
Files and hashes:         1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=)
                          2: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: bJBdax/KYB1Ioh8AUc6/M4jwYQpYaxsgQwXKXfN4NP4=)
                          3: YxZAW7xYuuoItNSxZUB_Jyv54M8.roa (hash: ZHkpmuH04xDfiHb0nZigSHP0TijTWcHxuOKkj3BJQR4=)
                          4: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=)
                          5: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=)
                          6: yM87hDn48G9pC2uXeNqB6MxDyyY.roa (hash: m4eQad2ewLgQnWmXHQewt9Vc5wlc0Xqlxo4fhTztW/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:37:95:da:9e:a7:48:a0:1a:4d:72:07:cf:7e:67:4c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: Jul 23 14:00:24 2025 GMT
            Not After : Jul 24 14:00:24 2025 GMT
        Subject: CN=21d77b63b719144db7b7707a6038a7d739f58f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:75:fa:db:06:65:2e:b6:72:f7:7f:eb:c0:eb:
                    45:b5:f2:54:24:25:98:d3:6a:b8:ba:c1:9b:fb:cf:
                    8a:9c:26:61:d9:0f:e9:e8:3b:a8:4d:62:f5:0e:bd:
                    72:26:2e:72:a1:46:38:83:5b:e5:53:1d:a7:84:8d:
                    99:62:97:fe:ce:31:f3:3c:dd:9d:d3:7a:e0:04:51:
                    d1:9d:03:5f:63:b7:39:a3:ce:4a:d9:f5:22:8a:b4:
                    b9:42:34:6d:0c:5a:e9:47:58:7b:da:33:08:dc:65:
                    e3:fa:41:fd:47:53:fb:3f:96:c9:27:fc:a7:69:b0:
                    7d:67:c1:19:e2:b8:2d:ff:92:38:ba:6d:60:cc:6d:
                    86:e5:49:91:d1:99:cf:1a:c3:2f:aa:5f:2c:83:b2:
                    c6:10:a9:9c:a8:41:93:92:1e:55:2e:0b:b9:1c:0c:
                    80:82:2c:8d:41:8c:49:19:a5:47:de:53:1e:1c:d5:
                    36:98:7b:e3:e1:1f:8c:8d:d7:88:d5:b9:f6:e7:2c:
                    eb:d4:9d:91:e2:89:ae:34:33:95:34:d2:84:01:73:
                    94:98:7f:fc:54:85:94:98:5e:0e:7f:bb:6e:d7:fe:
                    ce:49:6d:09:8b:ed:27:f9:94:f7:c1:be:cd:61:6d:
                    ab:9e:5a:dc:17:e0:8f:ef:42:16:64:f9:8b:83:dc:
                    d3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D7:7B:63:B7:19:14:4D:B7:B7:70:7A:60:38:A7:D7:39:F5:8F:20
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:90:98:3a:c5:48:20:5c:0b:fc:1e:3b:c3:db:4d:93:06:68:
         5a:e4:0a:13:28:4a:0e:f7:d3:af:db:14:67:6c:a7:68:b6:c2:
         ca:3a:30:04:b7:98:37:1b:88:6a:35:d0:c8:3f:04:a8:78:a8:
         18:b7:a5:7a:3b:c1:4b:2a:0f:26:39:3f:f4:18:13:e5:05:b1:
         c0:72:f1:4f:2f:dd:59:88:6f:b8:f8:a7:30:ca:48:e9:80:21:
         6e:c5:21:7a:f7:fc:da:f4:92:e8:da:27:0e:86:71:83:6c:29:
         4e:6b:01:26:b9:5e:26:2c:83:b3:7f:0b:dd:76:ee:0c:1a:1f:
         9e:f9:81:47:be:98:39:e9:b5:d6:65:32:b4:7a:c9:68:94:dd:
         7d:5f:64:0e:11:e7:6e:c0:2b:fe:de:8a:8d:59:69:00:5e:97:
         2c:4f:04:6b:e9:b1:8d:fc:dd:02:d1:6a:11:1f:49:92:6d:56:
         69:ad:8b:de:98:42:54:9f:bb:ce:5b:24:ad:3e:ee:da:72:d8:
         e8:05:34:0d:0e:e6:22:4b:68:a9:68:4b:be:85:ea:a1:b0:08:
         8c:47:1c:c6:57:0b:fb:9b:98:93:81:3c:5e:3b:de:48:a1:62:
         a8:c1:34:8d:e9:22:e5:d8:51:fe:a0:f6:22:c5:88:bb:dd:f3:
         83:61:c1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:07 2025 by rpki-client