Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
File:                     XGsMABqZq2KW4kIXO_fn_c8DwBk.mft (raw, json)
Hash identifier:          VcFvvwuEYFV6wEiM5CFYMvaJB1GFVRLjzuYeybYgdeM=
Subject key identifier:   15:51:44:E7:DB:52:D2:29:B5:16:C0:E4:0D:DF:2C:6D:14:AA:92:99
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Certificate issuer:       /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial:       019934C925B732C5E2335504ED83D890BC98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
Manifest number:          0EF2
Signing time:             Wed 10 Sep 2025 18:00:21 +0000
Manifest this update:     Wed 10 Sep 2025 18:00:21 +0000
Manifest next update:     Thu 11 Sep 2025 18:00:21 +0000
Files and hashes:         1: LvwvNGAUbfT2Bt0tY-karZ_wWIo.roa (hash: kCYXazlMebMuzkkP9xGRP+Rl8qwP4Xflsdq3dLyq/Fw=)
                          2: LwM623k2kR7q91QrhiqdXUwBs7k.roa (hash: RKu1QnAXYUI9f91c+0fb1S3SkGsEsHeC3eprd1gKm7I=)
                          3: Qd9wy5ftMyh8sTeaWrLO_wpaFTE.roa (hash: oY8TR8QpN82rkBsByfJvFbSYDVr2vD7taUzMtyjJcBc=)
                          4: XGsMABqZq2KW4kIXO_fn_c8DwBk.crl (hash: LlmAKSKO0JajN/YKaArTHOnN0iaXrUNi5bQ65Tn6xKA=)
                          5: tEgu1CSKDxjQmmWSWD6yXlDQ2m4.roa (hash: 7vrCydh5UH6MCekOIFdu3T2/WFzZdQB8gMeby/ttuZ0=)
                          6: zIPCunbKhz8cPIKe1giE3uIj7h8.roa (hash: 9WpdS/c5vPUs7vn29+uicrAavB5QqpuizqnOqwqgIr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:c9:25:b7:32:c5:e2:33:55:04:ed:83:d8:90:bc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
        Validity
            Not Before: Sep 10 18:00:21 2025 GMT
            Not After : Sep 11 18:00:21 2025 GMT
        Subject: CN=155144e7db52d229b516c0e40ddf2c6d14aa9299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:ee:da:55:d6:f7:07:39:4e:a5:75:5c:70:
                    e8:84:c0:0c:4b:fb:94:96:ac:b9:bb:76:3f:a2:3f:
                    48:96:f2:45:2d:b9:83:c3:1f:8b:0b:87:d0:9f:f5:
                    d9:94:cf:01:0f:d9:91:9b:bb:8d:94:78:a3:25:f7:
                    69:f4:59:a2:d6:71:91:55:09:d3:5f:60:a3:2e:a0:
                    5c:d4:53:e3:03:04:b5:9c:a1:d3:1a:79:2d:ac:b5:
                    b3:10:2e:b5:18:d7:1b:cf:c8:58:ee:3a:c0:13:14:
                    31:84:b6:5b:0a:d6:06:6b:ff:34:d3:7b:63:73:92:
                    98:0e:d7:a1:7a:7d:6c:e7:d3:ca:e9:8c:00:d9:20:
                    1c:97:92:45:31:3a:70:7e:f1:56:59:ca:72:40:31:
                    1b:82:ae:89:16:1b:b8:e5:2c:5b:6f:72:17:1f:f4:
                    bb:c3:74:d7:60:10:aa:e6:11:45:ec:64:9d:e1:fc:
                    dd:82:45:14:23:ff:44:67:8b:b7:98:29:27:21:75:
                    cf:e8:8f:a7:52:18:cc:5a:1f:5d:f8:83:95:72:b9:
                    e7:2e:5c:c1:fc:4a:5c:c9:ab:a6:b4:a0:74:de:f9:
                    85:86:e0:f4:48:6f:e7:fd:80:05:71:09:c6:8c:76:
                    0a:b4:6e:d2:d1:cd:a0:54:35:a0:4c:6a:8b:d3:c9:
                    ce:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:51:44:E7:DB:52:D2:29:B5:16:C0:E4:0D:DF:2C:6D:14:AA:92:99
            X509v3 Authority Key Identifier:
                keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b9:2b:12:bb:55:5e:00:62:50:60:2f:9d:9c:b9:22:78:a0:
         0c:f7:d2:50:c5:77:c6:93:dc:99:56:1c:37:1c:df:29:ac:ac:
         a5:e2:a8:81:5c:18:5a:57:c2:0d:63:d2:c4:26:ef:e2:09:9c:
         74:d5:88:8c:f1:2f:d8:bb:87:af:15:4d:c2:0d:83:31:5a:ab:
         72:21:12:04:23:48:a2:07:0e:b0:c9:a1:2a:c2:8b:79:d4:7b:
         4f:86:58:5e:75:db:22:ac:e3:fb:d5:0b:2a:b4:87:ea:cf:ae:
         ee:39:53:49:98:25:c6:84:eb:d9:f8:6e:66:20:91:e6:02:42:
         b8:80:46:32:55:fc:01:7c:a0:b3:c1:5d:4c:7a:cb:c7:c8:a4:
         f6:f0:fd:84:c1:da:c1:1b:4e:3d:48:d5:1a:6f:8d:7c:5a:21:
         6b:83:8b:83:5d:20:96:77:60:eb:4c:07:dd:2d:2b:3b:59:e6:
         ef:96:8b:99:9b:dc:97:b4:a9:c1:db:51:12:46:41:59:3e:48:
         38:b1:ad:9c:64:10:5b:79:c7:0d:27:95:ad:4f:58:0d:fc:50:
         e5:f9:15:4c:71:15:01:b9:e3:dd:d9:61:05:3f:dc:6f:0d:d4:
         61:55:b9:c6:8b:54:82:4c:45:82:14:ca:14:c6:8f:84:80:de:
         d5:59:2e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:49:08 2025 by rpki-client