Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File:                     xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier:          V3LeOclUynQKz8ECuOp//mr3/2nNka6eMwsEg0sirS4=
Subject key identifier:   6C:30:B7:1B:DB:D8:6A:8C:6D:B5:92:4F:B8:C5:FA:41:15:70:56:0D
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer:       /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial:       019847E47C88601CF477A59A950BDF2CE765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number:          1602
Signing time:             Sat 26 Jul 2025 18:00:13 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:13 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:13 +0000
Files and hashes:         1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=)
                          2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: KZ8wPJ15b2VlUwsNCq84QsmtgfgrWbEfvstOiNE+ZGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:7c:88:60:1c:f4:77:a5:9a:95:0b:df:2c:e7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
        Validity
            Not Before: Jul 26 18:00:13 2025 GMT
            Not After : Jul 27 18:00:13 2025 GMT
        Subject: CN=6c30b71bdbd86a8c6db5924fb8c5fa411570560d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:85:49:8e:68:35:8e:a5:71:ae:3f:64:bf:
                    7e:34:a2:c0:b7:25:0d:3e:76:f3:56:0e:b8:d2:44:
                    11:87:2a:de:a1:21:5f:f8:90:45:c1:ab:09:76:35:
                    84:bd:29:03:3e:39:7e:4e:4e:84:d5:15:bc:21:66:
                    76:fc:9d:d7:5d:fd:ba:2a:19:1b:8b:8e:7f:6c:4b:
                    e1:47:ef:2b:bd:62:87:83:b7:06:b6:ad:34:ce:a9:
                    e8:c2:a4:6e:21:f3:c3:c6:88:3b:41:03:cb:14:61:
                    b0:7c:65:4b:c4:33:c9:ae:e6:83:b3:37:3c:61:a1:
                    da:df:ed:51:d2:90:8b:54:02:4e:0f:7b:d6:80:fa:
                    19:1f:c6:09:bb:ca:2d:a9:99:b4:64:17:89:c0:dc:
                    1b:19:a4:d2:3b:35:3f:b8:52:38:d0:f8:36:51:d0:
                    f8:f6:82:2c:26:08:1a:d5:ce:92:09:fc:29:bf:47:
                    41:a5:3e:d3:81:8f:8a:fb:5d:b9:b5:8d:e9:a0:e8:
                    a4:a2:7c:cc:14:f8:ba:50:5b:19:01:77:f8:d1:df:
                    af:0c:9f:6f:86:9a:2c:b4:be:6e:cd:1b:b9:5d:8c:
                    05:a5:7f:4c:07:ac:2a:14:73:46:ec:1f:5f:1b:47:
                    2b:66:c3:1a:4a:73:6b:47:8d:e9:5b:a5:4a:5b:9d:
                    a9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:30:B7:1B:DB:D8:6A:8C:6D:B5:92:4F:B8:C5:FA:41:15:70:56:0D
            X509v3 Authority Key Identifier:
                keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b9:30:87:4b:c5:05:8a:24:02:53:46:1c:7f:41:64:63:01:
         d5:2c:a6:3f:a0:e1:a7:5e:20:59:f9:c9:45:b5:7f:0d:46:c0:
         b4:79:b6:e3:7c:c9:76:1b:70:5e:85:f3:61:b7:95:9e:5b:40:
         ac:28:7c:cd:5e:a8:7a:10:98:73:87:ba:c8:7e:87:44:cb:5e:
         5b:f2:ed:74:b5:b9:50:d7:ee:1b:c6:9b:62:ff:63:cf:33:7d:
         a3:ea:9e:10:37:df:4c:34:49:0c:11:a6:5a:e5:62:85:a5:9d:
         65:0a:a9:63:b4:13:04:96:92:ca:9b:0a:72:c7:2f:0b:d7:00:
         d8:7e:1c:d3:d2:d0:81:c1:1d:91:8b:e2:6b:44:4b:47:ae:46:
         fb:15:9f:26:d8:ad:81:b1:ea:50:35:89:59:68:1d:9f:c7:91:
         b5:5d:f0:38:c5:06:07:4e:70:b9:9a:52:f1:d5:98:11:b1:39:
         76:ca:9a:58:a2:b6:73:d3:5d:4b:66:ae:80:71:3c:ce:d5:b1:
         e4:44:0d:21:64:1c:1d:4a:42:e6:83:56:01:7d:6d:36:5e:c1:
         00:b9:6f:13:aa:fa:19:fe:61:fe:eb:78:76:c5:7f:14:af:fc:
         b5:fe:25:98:a2:f7:5b:d2:eb:dc:c7:d8:f1:04:84:48:a2:48:
         df:22:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:36:28 2025 by rpki-client