Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File:                     xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier:          1dgO5245rEjy8/guup+IUt1/kAWjuJAzkDATdAiD1gQ=
Subject key identifier:   1B:24:FF:B6:32:3D:71:AD:07:A1:8A:AB:02:5C:E9:9A:74:C5:7A:2B
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer:       /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial:       019851FA3D358F4311CA3D3C82B39DA70B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number:          1604
Signing time:             Mon 28 Jul 2025 17:00:10 +0000
Manifest this update:     Mon 28 Jul 2025 17:00:10 +0000
Manifest next update:     Tue 29 Jul 2025 17:00:10 +0000
Files and hashes:         1: pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (hash: 3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=)
                          2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: unLLHGsn9+pliQHqH0/MaNTJwFnSygefYlNcnCmumKc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:fa:3d:35:8f:43:11:ca:3d:3c:82:b3:9d:a7:0b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
        Validity
            Not Before: Jul 28 17:00:10 2025 GMT
            Not After : Jul 29 17:00:10 2025 GMT
        Subject: CN=1b24ffb6323d71ad07a18aab025ce99a74c57a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:f1:e9:a5:c2:56:eb:da:7f:cb:89:52:e0:
                    4f:0d:ac:12:86:ff:a1:d2:14:7c:d4:f3:fb:40:9a:
                    d4:47:b8:cc:8d:d8:05:33:b8:65:a1:91:99:b5:49:
                    57:43:1f:61:f0:84:f3:69:6b:d3:3d:c7:04:20:04:
                    30:ba:90:f1:50:86:85:62:67:1f:05:44:9c:53:45:
                    f8:d4:56:ea:d6:d2:d2:80:39:1d:5e:16:49:ae:af:
                    8e:6f:f3:48:1c:0f:10:8f:00:f8:8a:7e:3f:11:29:
                    d4:e1:bd:10:a8:10:61:e9:53:ab:93:8f:7f:e7:86:
                    55:44:43:ab:7d:2e:6c:f8:25:d4:6f:1d:4a:15:42:
                    58:4b:e5:12:e6:18:f4:ae:f9:52:d0:c7:f1:2f:60:
                    f3:cb:8a:03:18:61:bc:a1:d4:23:9f:a1:70:bf:22:
                    f9:5e:c7:03:71:b8:47:d7:61:39:8c:a2:10:24:5d:
                    83:18:32:f5:fd:1e:7a:5f:1a:21:de:d6:ee:9b:6d:
                    ef:c5:87:4a:d7:0c:05:e3:d0:a2:b3:bd:25:bd:57:
                    ff:59:c5:e6:cd:45:f0:a9:5c:07:b6:fa:9d:d8:65:
                    77:61:3c:7e:a3:1b:a2:09:d5:30:1c:66:bf:bb:3c:
                    61:a9:56:65:82:10:ec:2b:91:e8:4a:81:a0:2e:a9:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:24:FF:B6:32:3D:71:AD:07:A1:8A:AB:02:5C:E9:9A:74:C5:7A:2B
            X509v3 Authority Key Identifier:
                keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:32:2d:af:fb:9b:ff:66:56:49:2b:59:bd:97:49:77:13:da:
         54:03:bd:df:29:66:1c:78:8d:05:a7:c7:e2:06:7e:31:f4:c5:
         80:b3:4f:51:72:05:ae:1b:56:79:fd:97:6a:e5:3b:ff:88:9f:
         d0:a1:7a:07:1e:67:7a:bf:51:d0:3d:88:5a:fc:e4:74:ef:a2:
         4b:96:b6:d6:de:f6:7a:ba:df:ac:3c:e2:8f:01:c1:7f:cc:55:
         eb:16:9b:ba:b9:df:3c:37:5a:fd:a7:14:cf:0a:c9:0b:d6:7a:
         2c:1a:08:1f:ce:93:df:12:79:7b:22:02:fd:3f:a0:3d:d0:6a:
         7b:14:09:ff:04:27:7c:d6:48:31:a1:c6:7a:c3:8b:1a:20:bd:
         98:10:07:07:8b:73:7b:a1:4d:64:fc:f2:07:61:c8:2d:32:88:
         fb:80:41:1a:3d:ac:da:c6:f9:66:7e:4e:2f:f4:6a:22:c0:93:
         12:25:fd:d5:64:44:8f:e7:72:df:54:3b:ac:26:28:0b:ba:3b:
         97:f4:78:d4:ea:a8:81:69:36:95:f5:c7:69:e5:6a:42:68:57:
         6c:2e:5b:c1:43:42:2c:15:5f:e1:88:60:a4:5e:ea:de:46:c4:
         22:d2:23:c8:63:b0:bc:f7:95:46:fe:af:2d:f3:6a:7b:85:7a:
         00:75:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:07:10 2025 by rpki-client