Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File:                     XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier:          L2L64PAirK5ykJTHlW60NPR9n6zSirRCI+MKQ9m7AWs=
Subject key identifier:   4F:CF:09:D1:B1:0D:76:47:7F:87:7B:F9:AC:47:52:5E:9A:B5:39:DE
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer:       /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial:       0198394D27F941260A7DC73C012E2A6CEA54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number:          150C
Signing time:             Wed 23 Jul 2025 22:00:14 +0000
Manifest this update:     Wed 23 Jul 2025 22:00:14 +0000
Manifest next update:     Thu 24 Jul 2025 22:00:14 +0000
Files and hashes:         1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
                          2: NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa (hash: Xv44Y+Ginwz/PKxo+To+TC8XkCzR/fuz2BqxnW0vSNw=)
                          3: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
                          4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: aWt51TqoYDeNswVw93HV02ji73IDuUI+8Yww88FcISc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 22:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:4d:27:f9:41:26:0a:7d:c7:3c:01:2e:2a:6c:ea:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
        Validity
            Not Before: Jul 23 22:00:14 2025 GMT
            Not After : Jul 24 22:00:14 2025 GMT
        Subject: CN=4fcf09d1b10d76477f877bf9ac47525e9ab539de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:6d:55:5b:af:be:fd:60:83:54:6e:d8:84:
                    3c:4c:a5:a4:e3:45:c2:e4:ee:b3:bf:15:cb:05:1c:
                    fd:3b:1f:6d:af:54:fd:d5:05:1c:e1:66:22:5f:3c:
                    fc:c4:cc:75:55:2a:ad:9f:e9:1b:e0:b1:52:ca:75:
                    68:4b:9a:80:90:7c:55:17:eb:d1:8d:a3:eb:28:60:
                    80:48:d6:ed:24:4d:d1:cb:ba:1e:de:6b:07:de:5c:
                    70:a4:23:4a:17:e4:be:c7:62:84:6e:b5:a3:7f:3f:
                    4e:06:68:f6:11:57:a7:4a:4a:3d:33:23:8d:63:8b:
                    03:be:99:4b:b4:e6:30:0b:3f:4c:8f:83:4a:3b:9f:
                    4d:c2:77:d8:c6:00:85:b1:15:d2:fa:94:fb:db:ef:
                    32:cc:be:07:1e:94:97:9d:d3:12:ff:35:8a:80:41:
                    b1:dc:89:c2:53:6c:68:4d:f3:3a:a5:2b:6e:c5:36:
                    f4:04:46:17:21:1a:8c:67:8a:e3:29:06:c6:d4:80:
                    62:15:74:02:7b:c9:43:8f:61:6e:58:2d:18:3c:73:
                    c8:34:05:14:90:79:2a:f8:5f:7a:76:b4:5e:e5:a1:
                    a2:fe:4a:2a:fc:c2:57:d7:85:e7:1f:71:2e:c7:2d:
                    0e:c6:8a:b9:de:8c:3c:70:50:aa:81:5e:76:5b:4b:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CF:09:D1:B1:0D:76:47:7F:87:7B:F9:AC:47:52:5E:9A:B5:39:DE
            X509v3 Authority Key Identifier:
                keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e7:77:66:df:5d:9d:b3:ad:65:09:f1:f4:2e:66:63:2f:7a:
         9d:24:5a:ef:62:4e:7c:ab:44:60:e2:f8:1f:6c:39:30:8d:c3:
         90:d3:54:07:1c:29:60:82:19:21:45:04:a4:ee:f6:65:a5:82:
         30:34:22:9a:68:18:df:0b:7b:35:10:bd:31:09:bd:7d:09:c7:
         6b:fa:28:97:14:b1:71:48:38:42:1b:f3:2a:01:3a:79:0f:3e:
         58:51:19:fb:4b:54:f0:32:10:07:af:74:39:23:f4:75:8a:e9:
         27:17:6d:7a:8f:1a:98:a4:a1:1b:c0:be:39:b2:95:a9:30:51:
         63:9c:e3:b5:40:ca:4d:ff:f4:59:7d:7e:4b:ea:d2:df:e3:54:
         45:02:0f:54:19:5c:5c:f1:c5:ed:59:26:5f:51:90:d5:08:33:
         a7:3d:de:f6:f3:56:61:4b:de:cf:c5:c7:13:4b:d0:7e:80:9a:
         af:f9:21:19:5b:5b:56:a8:f2:fc:d0:6a:03:46:7d:32:bb:36:
         a7:01:df:cb:86:46:e6:f9:cf:8c:03:b5:7f:a7:8f:56:f8:ea:
         7d:bc:86:11:a5:61:9e:48:52:65:fe:c5:bf:dc:8e:67:a8:e4:
         4f:19:9e:84:d0:b0:5c:75:51:8f:cb:41:21:04:b2:63:2e:c1:
         13:96:b4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:13:27 2025 by rpki-client