Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          I0Q8Aqcj1GCYNIpF7r3MF4KJ2yJ55PwvWNSwglL8wbE=
Subject key identifier:   18:C6:36:86:59:53:01:AE:39:B5:EE:61:E5:52:55:10:92:A2:CA:DC
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       01992CD95CD91D9C69E6FD0D12A136D0A234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          0740
Signing time:             Tue 09 Sep 2025 05:01:06 +0000
Manifest this update:     Tue 09 Sep 2025 05:01:06 +0000
Manifest next update:     Wed 10 Sep 2025 05:01:06 +0000
Files and hashes:         1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=)
                          2: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: Qbx+3BN969wI4YcqD7jpwzu21w6HeyGAx1Oypb4mpbU=)
                          3: YxZAW7xYuuoItNSxZUB_Jyv54M8.roa (hash: ZHkpmuH04xDfiHb0nZigSHP0TijTWcHxuOKkj3BJQR4=)
                          4: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=)
                          5: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=)
                          6: yM87hDn48G9pC2uXeNqB6MxDyyY.roa (hash: m4eQad2ewLgQnWmXHQewt9Vc5wlc0Xqlxo4fhTztW/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:d9:5c:d9:1d:9c:69:e6:fd:0d:12:a1:36:d0:a2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: Sep  9 05:01:06 2025 GMT
            Not After : Sep 10 05:01:06 2025 GMT
        Subject: CN=18c63686595301ae39b5ee61e552551092a2cadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c3:67:61:f5:c4:3a:d2:16:1a:0d:d7:43:a2:
                    0b:a2:7a:30:f4:d7:5f:d6:2a:35:0c:a8:10:cf:79:
                    39:b8:13:53:ba:0a:fe:21:77:d1:ef:cf:be:bd:b1:
                    48:86:ce:8d:82:39:7a:ed:52:a0:47:29:69:ae:ab:
                    81:2b:d0:19:f8:8c:f4:87:14:dd:12:63:ae:d3:03:
                    30:76:4e:e2:2f:98:8c:ad:51:46:26:38:ae:50:48:
                    5b:f7:56:18:af:35:fe:32:d3:4d:be:fd:ba:0f:47:
                    1c:56:fa:f3:48:1f:f1:e7:cb:dd:47:c1:77:d1:bf:
                    6e:c3:f8:6f:77:67:df:20:3a:00:80:86:1b:23:29:
                    1d:f3:a6:66:48:47:15:f2:8b:84:a6:a1:05:13:d4:
                    33:c3:2d:56:35:70:96:25:26:ae:9e:4a:87:62:1d:
                    0d:fe:73:eb:77:d0:95:f3:98:ef:80:94:21:55:13:
                    03:31:3c:3e:a8:38:de:86:70:e7:1c:26:52:3b:d9:
                    21:cb:c3:cb:d5:a4:f7:0a:26:41:2e:9f:eb:df:d0:
                    84:c3:9b:0b:ca:66:f3:c0:b0:a3:6f:4f:67:ad:36:
                    f4:62:aa:13:89:e6:ab:25:62:88:22:21:e1:b3:7f:
                    e5:c3:cd:0f:0c:3f:ac:c2:b4:c8:57:0f:dd:0c:8d:
                    b1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C6:36:86:59:53:01:AE:39:B5:EE:61:E5:52:55:10:92:A2:CA:DC
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:0e:5e:be:59:9e:3a:a1:7f:da:50:b8:5f:f2:96:9e:66:
         f0:00:02:d3:10:04:e1:12:ab:9e:65:44:78:50:29:6e:75:2e:
         0b:b0:53:bd:4d:74:d6:6e:8c:46:e5:64:8c:5e:1a:9d:ea:bd:
         8d:b7:a4:d5:38:db:9b:02:62:f2:03:e7:72:e5:5b:9d:4e:6b:
         91:3f:40:da:05:47:50:be:e4:cb:8c:3e:bf:c0:b3:53:f2:fc:
         72:a4:6b:d1:52:b1:ec:64:d0:af:e8:65:ea:fd:b1:28:b4:4e:
         10:f9:f8:20:01:76:0b:24:bd:a1:ed:08:b6:2c:28:58:76:48:
         66:de:5a:3d:07:7a:80:5e:91:73:63:2c:56:4c:fd:97:c5:ec:
         a2:30:0c:42:dd:72:f8:f5:6a:5c:da:8f:1d:63:37:f9:09:f3:
         e1:d4:93:ab:42:fe:de:b7:30:c8:7e:67:06:78:4f:a4:2a:00:
         b7:64:ef:47:56:89:68:ad:20:d0:35:6b:01:62:cc:9d:f3:22:
         2e:84:69:d1:68:a1:de:2e:59:27:e1:8f:4b:db:f9:23:ea:b6:
         4b:a5:57:1a:64:80:d5:8d:ca:84:23:3c:d2:db:03:91:35:81:
         b7:04:9e:11:87:d2:e2:11:d0:ea:52:32:ea:18:42:ee:ca:2c:
         fa:1e:e5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:16:41 2025 by rpki-client