Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
File:                     Xw_ZDZhyl8td1OB76EDSgNHizEo.mft (raw, json)
Hash identifier:          6xxG9U4qTZIhoT7G3x6vizmgaoTkIcrtdOjpn7MU4Kk=
Subject key identifier:   81:71:0D:A6:18:52:6F:11:54:2B:E1:CD:F5:AC:7B:92:9C:47:5F:5F
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Certificate issuer:       /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial:       019848C0BBB4863D2735B2670FF288CB2278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
Manifest number:          095A
Signing time:             Sat 26 Jul 2025 22:00:47 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:47 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:47 +0000
Files and hashes:         1: 05UqSuwLBRqPCroKa-NSlHo3suk.roa (hash: rVUvpxf5/0qhzBCE7eXYV4m07Wn+wX0M/lyBozQz/Xs=)
                          2: 5Jf5ASTD8jlbm2kLARHgQd2Uhpg.roa (hash: E3lbfmXYIuXSBdLAP3yH+RdxLJCz+3LRF0JUsGgut1Q=)
                          3: ATvSFhFd_CAncUPhZRgYI8HQ5vo.roa (hash: LjPhXG/jk9vLP7Tlf0sh6p1Ib2Ym30X7fvGZjIomxZg=)
                          4: PXKLJWRK5JT5xqHPiU1wVHkKhag.roa (hash: f7UVVCkNNrYtkhi2nz2OzhGEpHRkcJKbi1gQjPZ3lQk=)
                          5: Xw_ZDZhyl8td1OB76EDSgNHizEo.crl (hash: pDcGtCqsEvF/VSCl9fyF3nLAyrCLprC4jOVKG4hos3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:bb:b4:86:3d:27:35:b2:67:0f:f2:88:cb:22:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
        Validity
            Not Before: Jul 26 22:00:47 2025 GMT
            Not After : Jul 27 22:00:47 2025 GMT
        Subject: CN=81710da618526f11542be1cdf5ac7b929c475f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:40:4b:38:80:04:b5:0a:88:f3:ba:79:18:ec:
                    1a:f8:0c:56:e9:3e:c5:ad:65:32:64:a9:7c:70:85:
                    1a:0e:86:ba:7e:55:bf:27:9a:d4:23:17:e3:62:ff:
                    73:72:10:78:85:8d:62:52:58:5f:1e:26:08:5f:69:
                    a9:03:b0:c1:5a:00:75:ec:b5:cc:c0:1c:03:2b:c0:
                    10:f7:ca:f3:1e:18:82:37:32:af:7a:a9:97:ad:75:
                    72:ee:c5:c0:57:68:25:84:cf:9b:17:07:13:07:34:
                    aa:71:7b:4d:22:40:a6:84:8c:14:f8:17:37:bf:bb:
                    c9:70:c9:ef:23:2a:cd:4d:4b:de:24:de:6b:4f:47:
                    d7:f3:d1:e7:1b:50:d0:50:27:9c:05:72:38:80:eb:
                    62:cd:6b:04:5f:4f:3a:e7:00:4d:5a:ff:7b:72:a3:
                    35:4e:cd:10:97:98:9a:8f:ad:9d:40:28:5d:8a:89:
                    8b:3f:d5:f6:7f:19:d2:63:0e:28:32:88:f9:37:6a:
                    b3:34:f3:f4:d4:72:63:b3:75:ab:b9:bf:4d:9f:98:
                    0b:ad:73:14:bf:44:b4:e4:98:a8:69:2e:f7:db:8d:
                    c9:4b:7f:92:8d:bb:28:73:a3:a7:12:5e:d8:b7:75:
                    5b:c7:1d:af:79:45:7d:fe:d8:80:57:6e:19:76:ac:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:71:0D:A6:18:52:6F:11:54:2B:E1:CD:F5:AC:7B:92:9C:47:5F:5F
            X509v3 Authority Key Identifier:
                keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:de:c2:44:10:6d:91:f8:af:a1:66:03:2e:f0:3d:d4:61:a9:
         18:28:ea:f3:a7:24:33:98:01:a2:e7:89:97:b7:99:5b:c2:92:
         a2:9c:55:14:89:80:e9:2c:d8:9c:98:79:31:d3:37:ff:24:5c:
         fa:ac:fd:1d:95:df:be:46:25:7b:53:fe:99:d7:e1:3b:0a:26:
         5e:ce:84:97:ce:58:90:0c:5e:3d:ee:c6:a4:64:cc:23:95:47:
         35:c9:5b:8a:2c:39:20:cc:d0:4c:aa:69:f6:61:84:74:b6:a5:
         a3:c3:1b:8e:12:08:d4:5a:0e:9b:05:dc:72:25:77:fe:e9:ef:
         27:58:74:8a:e9:31:c6:7f:08:a1:95:d8:4d:c1:eb:77:d6:f9:
         d7:b8:d5:1c:50:24:9d:0c:ae:65:e1:e2:c6:52:c6:2e:35:66:
         8c:9b:ff:f3:31:68:6a:d5:ab:9b:b1:56:8f:74:e2:af:1b:63:
         3b:05:1c:ec:6c:d7:6e:f1:b8:89:e7:44:dc:40:2e:02:a6:79:
         a7:80:5d:b7:cd:44:2c:15:31:fb:9c:19:cd:c4:df:7b:2f:3b:
         0b:6a:93:28:5a:28:30:84:c5:15:12:aa:b5:94:7f:b2:15:6f:
         62:13:10:88:e3:6f:c1:47:2a:75:d2:25:c7:76:dd:38:47:74:
         8e:fc:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:42:54 2025 by rpki-client