Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
File:                     xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft (raw, json)
Hash identifier:          iqPLwI4+YTIFYPjm8nSxSE2Nbe7BjuV8ON5xRObJHlU=
Subject key identifier:   80:EA:3B:1C:2A:CB:3E:23:05:75:85:5E:65:1C:48:EE:51:40:3A:37
Authority key identifier: C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53
Certificate issuer:       /CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
Certificate serial:       019849D3808A7252D6929F145EA899688900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 03:00:54 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:54 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:54 +0000
Files and hashes:         1: Hmr7dkr0W7JFrepttGlqLP6NKbM.roa (hash: yDBwYp9xrxrLaEiVdQGFDv7xOzCGwLdfuFI8YUzQtLo=)
                          2: xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl (hash: atO92uWrpjxZpZE5Owqzv8VYxKaWcPO8Uiwm/KDkWIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:80:8a:72:52:d6:92:9f:14:5e:a8:99:68:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
        Validity
            Not Before: Jul 27 03:00:54 2025 GMT
            Not After : Jul 28 03:00:54 2025 GMT
        Subject: CN=80ea3b1c2acb3e230575855e651c48ee51403a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:d2:14:7e:8b:55:18:8f:ab:c3:bb:77:7d:
                    5d:1d:2a:c8:dd:9a:f0:bc:94:ca:b0:77:40:13:53:
                    9b:e9:04:36:4e:0c:56:43:5a:40:8f:30:62:3d:26:
                    1c:9b:c2:4b:ea:39:c7:f2:f9:53:a4:a3:6e:31:0f:
                    ce:19:76:8d:57:18:a9:55:d1:72:4a:27:83:32:8c:
                    0c:1a:b8:b2:17:3d:3c:b3:ba:d5:2a:9d:45:ed:c8:
                    75:d2:c8:04:37:4e:43:59:f9:d7:b4:4a:d9:06:bc:
                    a6:7c:3f:7d:30:a5:2f:62:ad:69:76:80:74:12:56:
                    54:74:86:9c:3b:d2:56:6a:f0:11:f1:9f:3b:14:fa:
                    eb:f6:6d:50:fc:e4:1e:07:0c:e2:93:24:7b:42:4f:
                    36:f0:fb:5c:47:33:c9:ba:11:7d:42:b1:6c:ae:5a:
                    47:71:e8:eb:7b:5b:5e:07:5d:fc:f7:66:58:21:c9:
                    76:f8:c2:f8:44:9c:f5:62:cc:49:ad:b7:45:20:63:
                    08:5e:5e:07:49:8a:c0:91:26:2b:69:49:3b:12:e2:
                    23:dd:48:37:3a:a3:10:89:77:ed:e3:7e:85:e4:fc:
                    0b:8a:24:82:8f:e3:eb:1a:71:52:06:38:b0:88:a0:
                    0b:84:99:4e:85:5d:d6:75:ff:b3:6b:ad:03:bd:7a:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EA:3B:1C:2A:CB:3E:23:05:75:85:5E:65:1C:48:EE:51:40:3A:37
            X509v3 Authority Key Identifier:
                keyid:C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:23:55:72:e8:9c:0c:4a:78:e6:06:18:56:08:fe:34:e6:
         80:ec:46:84:f2:cf:f9:f1:be:0e:be:8a:20:69:4c:75:3f:63:
         d3:b8:54:36:cb:c8:a3:79:d2:c4:65:ba:dc:9a:c1:90:1d:df:
         67:83:c6:cc:ae:2e:b4:9a:cb:b2:0d:78:9e:37:b8:d5:10:7a:
         c4:7b:e7:ca:35:40:ba:52:35:9a:02:df:c2:fc:ad:8f:ba:57:
         bc:06:5a:78:04:e5:05:15:d6:d8:59:c3:8f:ff:97:fa:61:df:
         86:50:e9:49:60:52:f5:61:c2:8c:f4:e7:7a:85:ac:0e:d8:95:
         d5:10:c1:a0:9b:de:e2:e9:0b:ff:c9:a5:bb:1d:83:34:7d:b4:
         d5:b3:00:61:fd:64:3e:b3:3f:6a:98:d7:be:80:dd:78:e4:eb:
         e7:20:21:16:61:c2:ae:cb:9a:fc:1a:44:15:5d:5d:14:cd:4f:
         18:70:d5:85:c0:1f:ff:8a:f3:2c:a5:0f:f2:ed:33:f1:32:56:
         0b:ec:62:37:38:1b:ee:db:40:2d:f3:4c:de:c3:e0:de:d5:17:
         77:44:f6:36:ab:f4:5c:fa:21:a1:51:08:b6:1a:b8:13:49:fc:
         2e:e2:a5:2c:30:ea:6c:89:e9:a1:87:c2:a8:8a:e0:a4:26:fd:
         14:b2:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:14:14 2025 by rpki-client