Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
File:                     XEXOsYsUpzcoK3WvC6Fs_9emq64.mft (raw, json)
Hash identifier:          zgeDL59W8N2JHbCI/+0gHYuX+77gG48ZKC1VL5R1lrA=
Subject key identifier:   92:82:66:F6:A6:D1:75:7C:2A:B6:3B:8A:E4:3E:45:CB:A0:F0:F1:BB
Authority key identifier: 5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
Certificate issuer:       /CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Certificate serial:       01984776E6D4FECB01924980E6433C9BDF49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
Manifest number:          0C97
Signing time:             Sat 26 Jul 2025 16:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:31 +0000
Files and hashes:         1: XEXOsYsUpzcoK3WvC6Fs_9emq64.crl (hash: jiydulFAy6SxpO5VmVuNMVyG6a15UcVIzQ73QDZZSAk=)
                          2: mRhBT-NlmD4-d7u0Kc5hjDz1S2g.roa (hash: eEF1vwGGqfylK4nRHvE5xtss/22xA/yBRdsBu2iNecU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:e6:d4:fe:cb:01:92:49:80:e6:43:3c:9b:df:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
        Validity
            Not Before: Jul 26 16:00:31 2025 GMT
            Not After : Jul 27 16:00:31 2025 GMT
        Subject: CN=928266f6a6d1757c2ab63b8ae43e45cba0f0f1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:ee:8b:8e:79:39:51:b6:d4:c1:5c:cc:80:
                    eb:3a:2f:34:0f:ae:bf:bc:98:32:65:6f:c2:9b:2d:
                    a9:b3:32:b1:60:25:74:d7:47:17:76:c8:f7:c0:f5:
                    52:53:07:5f:79:e3:88:d0:95:ae:d1:f0:38:81:09:
                    38:f3:2a:a7:16:25:2c:25:8f:e7:31:75:d5:83:6f:
                    ed:d6:8c:df:be:41:1f:61:1a:bb:ec:e9:0c:16:d7:
                    ac:ee:13:b8:40:02:0c:2d:c1:d3:04:cf:35:e5:08:
                    5e:81:08:89:64:b4:f7:b7:ae:77:a5:c6:46:bd:89:
                    8d:1a:b3:78:a0:b3:2f:ec:80:aa:74:45:cc:56:6a:
                    25:15:6e:54:61:b5:4e:4b:9e:9f:ed:bc:71:aa:1c:
                    af:6d:e5:e9:8e:e3:b5:43:ac:bb:5d:e1:e9:db:0f:
                    15:b2:e7:e1:61:1a:af:cc:3f:5a:6f:ed:0a:c0:30:
                    15:e3:0c:59:79:f2:48:d1:c4:80:c7:c3:e7:18:fd:
                    7c:02:12:29:f4:ed:99:4c:96:f1:6b:fd:eb:a8:fe:
                    f5:d7:9f:3b:b2:68:ef:d3:d0:ce:3a:94:81:ea:3c:
                    1f:8f:f5:6a:61:ec:e9:af:5d:a9:af:20:ed:fd:93:
                    db:aa:14:22:0a:5f:db:2f:f5:04:c8:b7:a7:c0:8d:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:82:66:F6:A6:D1:75:7C:2A:B6:3B:8A:E4:3E:45:CB:A0:F0:F1:BB
            X509v3 Authority Key Identifier:
                keyid:5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1d:ce:6b:a3:40:23:b5:e4:89:39:2e:bb:c7:ae:8e:df:4e:
         99:df:21:51:b1:3d:9e:b6:e7:34:68:f7:3e:8c:29:45:7b:bb:
         d0:53:00:25:d6:9b:21:34:e8:71:bf:f5:17:3d:24:05:fb:b9:
         39:d8:81:46:20:37:32:52:f3:3a:ad:df:f8:5e:f4:52:0a:1c:
         14:ec:8e:1e:8d:91:88:49:b7:54:5c:61:85:d2:2c:b8:26:99:
         29:81:97:d1:7c:24:1d:a1:59:50:5f:b3:7e:94:85:1a:2f:d3:
         4d:d7:3f:e9:bd:b4:ab:21:ac:f0:98:7c:e5:3d:21:b5:12:43:
         c9:5f:52:6d:2f:d1:e2:eb:b0:da:63:d2:09:bd:f3:c8:7f:fb:
         71:ad:a7:7b:20:3e:f5:ad:3c:60:82:8e:7b:eb:ca:11:a7:fc:
         13:ca:60:12:45:9c:30:c2:13:12:df:ae:6d:7c:80:15:70:21:
         a6:e7:91:71:0e:d8:80:93:7a:bf:81:57:d3:d1:db:cd:7d:d4:
         b7:2d:b8:ff:c3:ce:a1:a4:a4:34:fb:8f:69:a9:3f:76:9c:2b:
         1b:1d:78:c5:65:3b:46:56:ef:9e:85:e7:6a:86:bc:54:e4:91:
         b6:f2:1e:ca:6d:e4:a1:e8:c1:b9:cc:44:f5:4b:d5:80:ce:e9:
         cf:b8:d7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:30:13 2025 by rpki-client