Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File:                     X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier:          iSEz6ilaUKSoux8YJUNsg1xv0K7QhqVRrtIOKsXEis4=
Subject key identifier:   40:22:38:95:32:BB:4D:B4:86:3E:18:BF:7F:B9:EC:58:B5:9E:47:15
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer:       /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial:       0199240D90E4FCF6992B683882C29F76F2E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number:          1083
Signing time:             Sun 07 Sep 2025 12:01:32 +0000
Manifest this update:     Sun 07 Sep 2025 12:01:32 +0000
Manifest next update:     Mon 08 Sep 2025 12:01:32 +0000
Files and hashes:         1: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: QkE+hcFOVhvZUE4NKo7F3nw1BBv30zXnbfIC9IHz6rY=)
                          2: jokJ4cI7eIPzST9EcLtOSM-xX_8.roa (hash: TCebbhEEB8T5cCXDYMCJ8S4mvXhrW2F1v0Z6DU/4YuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0d:90:e4:fc:f6:99:2b:68:38:82:c2:9f:76:f2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
        Validity
            Not Before: Sep  7 12:01:32 2025 GMT
            Not After : Sep  8 12:01:32 2025 GMT
        Subject: CN=4022389532bb4db4863e18bf7fb9ec58b59e4715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:93:16:2b:2f:0b:c7:a0:7a:48:a6:a7:d8:
                    90:45:32:64:d9:6f:37:3f:02:98:99:06:c6:66:77:
                    a0:02:57:13:a3:47:72:9b:26:b9:e9:78:71:fe:9c:
                    13:5c:05:11:46:6d:63:6e:ec:16:18:70:4b:6c:76:
                    14:ba:0a:91:dc:98:9d:b1:9d:06:64:f1:d5:0f:40:
                    ac:fc:42:cf:75:70:99:02:c5:8c:e5:05:7c:62:f1:
                    0e:be:d4:e9:7d:73:3e:ec:f8:6b:4f:f5:dc:84:53:
                    0e:11:42:2c:18:f8:7d:a5:9f:b5:66:97:23:91:a1:
                    09:7e:9d:9e:14:96:6f:a4:19:c3:89:02:9c:59:23:
                    63:55:f4:9e:18:0e:5e:b0:71:31:2a:1a:a8:fa:86:
                    c2:fd:cc:0e:b4:c5:8c:a2:9e:97:b4:e8:5f:8f:c3:
                    3a:1b:d3:00:39:1c:1e:b8:7d:82:e3:af:54:43:e6:
                    85:45:7c:dd:f6:8a:11:7e:8c:18:fd:2f:04:1f:f2:
                    0f:8f:7e:be:aa:3d:d6:18:a7:b1:f8:5a:80:97:71:
                    10:70:ec:26:c5:fd:9a:dc:00:41:72:7b:df:17:69:
                    e9:88:23:fd:43:66:03:76:24:b4:7b:bb:62:f2:85:
                    10:e0:77:68:6b:ec:0a:40:14:d7:e0:65:34:fd:f7:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:22:38:95:32:BB:4D:B4:86:3E:18:BF:7F:B9:EC:58:B5:9E:47:15
            X509v3 Authority Key Identifier:
                keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:38:b0:41:70:a8:8f:33:e8:41:11:d1:ee:20:26:7f:0a:a2:
         b7:e5:9f:45:ae:c4:52:6e:b5:4a:0e:38:01:46:7b:4a:10:47:
         c9:09:e5:f3:6a:3d:45:cd:7a:86:af:39:45:ae:82:2b:70:aa:
         ba:d2:3d:57:ee:c2:c7:cf:d9:63:f5:8f:10:cf:98:24:da:a9:
         7c:f1:db:73:f9:5e:07:89:a3:97:bc:47:c0:fc:cc:63:81:a6:
         5b:de:21:2c:0b:ce:45:a9:22:d1:a1:8a:72:00:be:03:ff:03:
         75:17:bb:1b:47:b9:9b:f0:83:b1:fb:3d:d6:22:ae:cb:c7:1c:
         0c:7c:0d:65:95:f0:ce:5c:38:07:4f:61:a1:6e:bb:f5:2e:19:
         93:1b:c6:9e:40:a8:74:cf:9e:43:5f:ef:21:b6:0c:4c:f9:4b:
         3d:9c:da:13:99:51:d0:94:8b:fe:39:5b:f0:af:6b:41:5d:34:
         1d:45:48:90:d5:c0:95:48:45:b7:b2:81:a9:73:74:e0:f9:67:
         c3:97:ee:fa:25:d8:2f:b4:66:fa:3f:8d:d6:e1:41:e8:b4:75:
         81:4f:1f:46:8c:f8:0f:1c:3b:a9:4d:30:23:fa:64:77:cc:f7:
         e8:ae:36:03:27:45:f2:a2:ad:d6:39:aa:4d:30:92:2d:3b:60:
         42:4e:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:14 2025 by rpki-client