Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File:                     x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier:          d13jdBtfoJJIYRsJsO9YaaGSYXtOjxRRu3JGkOGoz+k=
Subject key identifier:   37:B6:9B:CB:28:7B:8F:4E:6D:1C:F5:F8:A4:0A:D1:DF:01:35:DF:23
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer:       /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial:       019849664F45430B8B51F4B400D524F9F888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 01:01:38 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:38 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:38 +0000
Files and hashes:         1: U9d60iaXFQDxSrHcLdT4ojLheZE.roa (hash: Gjhqz3LOzFes4JptTfh+vWteSpqEom7uInck02Q9Ins=)
                          2: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: pQagR84+KghEH778h9Z2KR/mHyg2UZRXbQG1l6HLY3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:4f:45:43:0b:8b:51:f4:b4:00:d5:24:f9:f8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
        Validity
            Not Before: Jul 27 01:01:38 2025 GMT
            Not After : Jul 28 01:01:38 2025 GMT
        Subject: CN=37b69bcb287b8f4e6d1cf5f8a40ad1df0135df23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:75:fb:04:ab:38:0d:d8:e6:e2:6a:6f:ed:
                    82:84:81:a9:e8:a3:99:d4:32:00:98:87:31:2b:c8:
                    5c:67:df:11:11:bf:31:ce:ed:7d:fd:2b:74:9b:ef:
                    51:ea:9b:30:6f:53:27:3d:d0:81:1f:99:65:d7:62:
                    d8:42:e5:a3:49:98:0b:55:e7:92:13:ad:d4:57:9e:
                    f3:93:78:92:7c:69:78:50:2c:4f:f1:bc:86:47:14:
                    a1:f8:a0:fb:ab:d4:24:9d:40:8e:0c:7d:cb:d5:d9:
                    9c:d6:f1:c4:41:86:28:16:6e:ff:06:34:2e:49:1a:
                    99:53:59:2f:1e:e8:f5:3d:a2:1f:f3:9b:33:d5:50:
                    90:14:f0:2a:3b:74:0c:ff:9f:da:99:10:a7:8d:fd:
                    89:43:3d:7c:82:0b:a1:f2:b8:f7:55:a6:5a:de:f1:
                    06:76:3b:e0:70:86:5e:d5:44:83:a6:5d:29:4d:c1:
                    b9:4c:bc:0a:93:b0:2c:07:1b:49:de:0b:23:d6:cb:
                    53:a9:f7:85:ad:b0:c7:da:65:b3:c9:06:c7:83:70:
                    72:29:40:6b:7b:39:f0:df:a0:33:9a:cc:2a:60:d0:
                    06:25:0d:e3:f9:c4:42:73:f8:99:e5:7d:54:15:e8:
                    d7:45:0b:b2:a3:b4:d1:ef:02:0d:5c:d5:d2:6c:4e:
                    6c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:9B:CB:28:7B:8F:4E:6D:1C:F5:F8:A4:0A:D1:DF:01:35:DF:23
            X509v3 Authority Key Identifier:
                keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:12:b7:1d:ce:6b:bc:2d:a4:d4:82:47:ab:f9:07:99:42:
         51:e0:88:36:77:f8:f8:b1:64:2c:ca:cc:78:36:21:dd:50:c8:
         ad:ee:82:ba:37:a3:6a:1b:61:4f:7f:ec:e0:75:e0:9f:fd:76:
         6d:83:ef:1b:10:30:32:fa:6f:0c:18:bb:6e:a3:89:30:7d:f2:
         6a:cf:15:47:5b:2d:0c:32:80:cf:b1:09:8e:da:bf:84:96:83:
         a8:a6:7f:83:4a:39:e3:7a:32:8c:da:ed:85:85:bd:2e:78:6a:
         a8:6f:8e:1a:af:19:c9:60:fe:c5:bb:a8:d2:5c:6b:13:3a:11:
         2a:54:b9:8b:92:f0:29:39:25:8f:da:32:ea:8a:d9:24:ae:b6:
         e6:61:22:62:e6:e8:d1:c7:09:12:28:2b:31:c8:90:01:6b:ab:
         64:62:2b:98:9b:ed:3d:31:6f:90:28:6a:10:f0:77:26:55:d0:
         82:ce:63:e7:c4:bb:33:b8:a2:8d:27:d5:bd:17:e5:71:10:2e:
         f6:4c:47:79:54:20:09:8c:a1:49:26:8d:da:80:36:f1:9e:db:
         2e:fd:b2:f1:26:d1:b8:97:c1:14:75:68:b3:80:86:8a:b4:90:
         f8:52:ad:b3:1a:4d:78:b6:0d:5c:0d:42:8a:ac:0d:ff:4f:fb:
         da:36:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:50 2025 by rpki-client