Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File:                     XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier:          4OD7cgPAI9Dr61r1JnHbg3i4MWoY+DXdPc7lQr2ep9Q=
Subject key identifier:   E1:4C:AA:5A:0C:F1:59:76:B8:8A:FD:09:BD:2E:FF:F9:E7:0A:2F:EA
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer:       /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial:       019848C0284A75F5A431282C20854E20A372
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number:          0F78
Signing time:             Sat 26 Jul 2025 22:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:09 +0000
Files and hashes:         1: 8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa (hash: p4gaip18bX+lGbj9ZddfSE6WP6jiV9uHndZOy2SGtcc=)
                          2: AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa (hash: DT207lrgFqp9k/8o8ytERsNd+6+ux/7h7W27NxLgDyI=)
                          3: PDXR81HWxc4LmZz0o4rlzuBkq-k.roa (hash: pGbVknYLItFYYXOLGoW5IyrgdhcVtFImvBhB0wZtkqs=)
                          4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: dUe+xj8Cj0ctUGErdMjHPw9wo/oug42tKnpVDnafI6k=)
                          5: zWVlVmkEB7rMguHla-ob06L-eJg.roa (hash: cPGHTFy9v1aoyHFUZz9UKBWfLnLNl1qFFA0xx+LRhc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:28:4a:75:f5:a4:31:28:2c:20:85:4e:20:a3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
        Validity
            Not Before: Jul 26 22:00:09 2025 GMT
            Not After : Jul 27 22:00:09 2025 GMT
        Subject: CN=e14caa5a0cf15976b88afd09bd2efff9e70a2fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:24:9b:34:3d:f1:89:36:12:65:d6:8c:de:
                    4f:b6:fc:5a:9c:5c:33:61:55:b0:75:24:23:d6:f4:
                    50:8d:a6:76:1a:a0:0f:8a:ea:59:71:c8:5a:31:83:
                    2a:d7:6b:69:32:b3:c3:5c:85:c7:7c:b8:b5:ea:62:
                    86:c8:f9:a0:04:c9:7a:10:92:fa:55:ea:44:33:af:
                    2b:ce:02:3d:4d:0f:40:b1:78:7c:65:7c:62:f5:d7:
                    e1:8c:93:16:73:ab:48:2f:9f:79:56:ab:6c:66:ab:
                    47:cc:71:83:f9:33:b3:8d:d7:51:63:c7:fd:0e:66:
                    be:41:e8:c1:52:7b:fc:0a:12:21:4a:cd:66:9b:d5:
                    c8:03:4a:57:c1:01:d2:55:63:08:e1:37:40:fc:54:
                    bb:6f:5f:fb:3f:89:0e:9b:a9:e4:53:5d:39:59:18:
                    2c:84:31:0c:52:34:7d:70:4d:d0:89:eb:df:0e:a0:
                    ba:b4:55:44:2a:3b:25:e0:37:19:a7:11:c3:cc:3d:
                    d6:31:2e:b6:71:e5:b1:eb:09:fb:b5:43:5b:8f:24:
                    79:76:4f:a3:48:8c:f8:01:cb:72:f3:2d:cb:d7:10:
                    22:22:fa:f2:b7:b7:ea:fc:2a:90:22:7f:bb:21:49:
                    da:75:18:64:95:ed:85:82:bb:a0:3a:3f:9d:27:29:
                    67:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4C:AA:5A:0C:F1:59:76:B8:8A:FD:09:BD:2E:FF:F9:E7:0A:2F:EA
            X509v3 Authority Key Identifier:
                keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:bd:c8:fa:b1:9e:51:0b:b5:2b:e3:ea:e2:0e:d0:a7:8e:25:
         b0:64:ad:fd:60:57:0b:34:df:d7:42:88:6f:73:1e:4a:2f:df:
         ad:45:90:74:d3:eb:cb:4b:ff:47:bc:84:a9:36:91:ba:73:be:
         1c:91:9a:6b:d3:a3:30:45:3c:f9:74:4e:20:23:39:0d:14:15:
         7e:9a:e5:18:25:6c:25:ad:08:6d:c6:ec:ab:ed:12:70:9f:b7:
         87:6c:67:0b:1a:a9:a8:10:7f:01:71:b4:2e:8f:dc:86:0b:cf:
         bb:a6:8b:fb:fa:d5:b5:0d:cd:f9:de:4e:03:a0:fd:ca:11:3c:
         fe:ce:74:fe:ef:f2:8c:1d:17:48:1a:59:42:39:26:77:00:38:
         e1:9e:22:44:8d:c7:f5:d6:10:2b:bb:ef:1c:61:27:2f:b9:eb:
         f3:f3:73:cd:75:f8:24:4e:44:49:24:22:dd:90:0b:3e:53:a0:
         40:1d:9c:77:ac:ad:76:31:b2:5a:e5:fa:a8:2b:ca:bc:3f:d4:
         ed:bf:ef:78:bd:71:89:1d:af:63:47:70:8f:0f:b8:b4:01:3a:
         98:8a:8a:5b:be:38:14:e1:42:cd:49:d1:a5:55:39:38:93:b4:
         ce:2e:38:b3:2d:2e:d3:66:b5:c5:b2:33:e7:af:f4:41:cc:74:
         0d:0e:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:56:42 2025 by rpki-client