Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
File:                     XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json)
Hash identifier:          o4ZAHYBD+Rc+2GVgi+3KuQWGY/9R5FrVmHERwICc+Qk=
Subject key identifier:   9C:D0:58:1B:87:25:E9:EA:9F:1D:CA:6B:88:7A:2D:82:A8:0D:82:BC
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Certificate issuer:       /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial:       0198492E234F777A9DC6FD4A1439862BE760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
Manifest number:          0E78
Signing time:             Sun 27 Jul 2025 00:00:17 +0000
Manifest this update:     Sun 27 Jul 2025 00:00:17 +0000
Manifest next update:     Mon 28 Jul 2025 00:00:17 +0000
Files and hashes:         1: LvwvNGAUbfT2Bt0tY-karZ_wWIo.roa (hash: kCYXazlMebMuzkkP9xGRP+Rl8qwP4Xflsdq3dLyq/Fw=)
                          2: LwM623k2kR7q91QrhiqdXUwBs7k.roa (hash: RKu1QnAXYUI9f91c+0fb1S3SkGsEsHeC3eprd1gKm7I=)
                          3: Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa (hash: oY8TR8QpN82rkBsByfJvFbSYDVr2vD7taUzMtyjJcBc=)
                          4: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: uZA2P8EcUN/f7MI1YzV9EtxtFP5QDNjraKGI9CkDqNs=)
                          5: tEgu1CSKDxjQmmWSWD6yXlDQ2m4.roa (hash: 7vrCydh5UH6MCekOIFdu3T2/WFzZdQB8gMeby/ttuZ0=)
                          6: zIPCunbKhz8cPIKe1giE3uIj7h8.roa (hash: 9WpdS/c5vPUs7vn29+uicrAavB5QqpuizqnOqwqgIr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:2e:23:4f:77:7a:9d:c6:fd:4a:14:39:86:2b:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
        Validity
            Not Before: Jul 27 00:00:17 2025 GMT
            Not After : Jul 28 00:00:17 2025 GMT
        Subject: CN=9cd0581b8725e9ea9f1dca6b887a2d82a80d82bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d0:a3:94:49:43:26:88:1a:af:48:ac:93:a0:
                    40:9d:07:4a:b0:7f:33:e7:94:56:66:07:a1:1a:8e:
                    9b:57:d2:57:17:e5:76:a5:a0:54:e8:42:da:8e:6d:
                    28:78:86:96:94:a8:49:95:6e:e7:f0:a4:cd:7d:57:
                    09:64:8e:e7:38:e9:fb:97:73:83:8b:34:4a:c8:b6:
                    6d:c5:f2:96:32:67:20:a8:04:cd:5f:07:f1:af:f7:
                    9b:4a:6d:12:c9:5f:b0:1c:16:60:db:96:ea:13:71:
                    a1:75:00:08:02:7f:49:cd:d9:31:5b:94:18:5f:ff:
                    68:dc:38:2d:8c:ef:5b:a4:8a:e0:a1:b1:a3:7f:59:
                    f5:11:08:9f:76:aa:ba:5e:f5:79:78:3d:5d:8c:91:
                    3d:92:87:94:ea:f8:66:4b:bb:70:1b:d4:1b:0a:50:
                    9e:86:b6:45:e1:2e:2f:e8:75:12:b6:c0:3f:c3:88:
                    e2:d8:42:d3:01:8b:4d:7c:ad:b6:ee:eb:89:12:5f:
                    3b:96:35:b0:8b:b1:bf:18:13:0b:47:f1:ff:87:e8:
                    28:e4:74:3e:f8:b3:00:ab:ff:f1:9e:e6:af:73:a2:
                    75:6e:e6:c6:b3:95:4c:6c:65:0b:71:b0:d4:f7:bc:
                    98:be:da:b4:24:a3:b3:67:89:c4:7b:b7:3f:21:c0:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D0:58:1B:87:25:E9:EA:9F:1D:CA:6B:88:7A:2D:82:A8:0D:82:BC
            X509v3 Authority Key Identifier:
                keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:b7:ad:d2:b0:77:5c:b5:b9:38:5a:42:3e:fc:86:b2:c1:
         bf:e4:d6:b3:4f:12:1d:8d:61:05:85:59:d2:17:8f:b9:ad:b7:
         1f:99:cc:c8:b9:ed:d2:70:a4:e8:b2:14:71:d8:32:71:6a:03:
         c9:17:85:e6:d8:e3:1b:29:13:51:51:e9:a1:8f:f1:2d:08:8a:
         14:7e:65:78:83:c5:22:ad:7b:d7:3b:0f:a4:7d:7d:16:e4:bd:
         3f:ea:d3:c1:98:81:11:3b:e7:bc:62:1f:6a:fc:6a:e9:7d:18:
         dc:46:43:fe:72:27:df:9b:89:15:b4:36:f9:b9:b9:5c:7a:81:
         32:f7:48:88:7c:e5:7e:d4:bc:ee:9d:99:38:3c:35:2c:4f:96:
         99:3f:93:e2:d2:bf:d1:a9:95:c4:63:a6:82:e5:59:cd:4e:83:
         1e:a5:99:e1:7c:3b:10:06:8f:53:35:c7:d6:e6:7d:dc:f7:31:
         16:ed:e4:41:fb:8f:6d:22:75:f9:04:52:15:9c:37:57:25:8b:
         12:d7:75:ec:5b:ca:d7:48:de:c2:14:26:ae:20:82:a6:a7:15:
         63:4a:31:e2:33:15:e8:62:ae:38:6a:7c:78:e9:e7:80:da:dd:
         5b:29:19:bf:2b:1a:64:1c:2d:f8:b4:5b:63:fd:c9:23:47:3b:
         d5:29:e9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:53 2025 by rpki-client