Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File:                     XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier:          MYITG9eHKtoo9mwy460VANInq8hAVdeWPCjcCUUkDRQ=
Subject key identifier:   04:43:8D:E7:CA:A5:77:13:26:2D:9B:AD:DF:AF:6E:F9:67:0A:BC:10
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer:       /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial:       019922551C269F9D360297651FE266C54B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number:          0130
Signing time:             Sun 07 Sep 2025 04:00:26 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:26 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:26 +0000
Files and hashes:         1: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: ieKWqboxP2LJAoYaJfYo56k7xADaBD4rZTiNxA9XEwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:1c:26:9f:9d:36:02:97:65:1f:e2:66:c5:4b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
        Validity
            Not Before: Sep  7 04:00:26 2025 GMT
            Not After : Sep  8 04:00:26 2025 GMT
        Subject: CN=04438de7caa57713262d9baddfaf6ef9670abc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:41:dc:79:8c:94:66:1e:e5:51:16:79:d7:3d:
                    6b:38:ac:89:33:d5:4d:8b:30:95:ac:c8:34:01:7b:
                    dd:4b:8b:97:8f:89:9c:e5:3d:7d:49:81:fb:67:5f:
                    aa:25:df:5b:14:dc:d7:06:ed:30:47:a5:b4:86:86:
                    a3:43:92:c7:8c:35:89:60:df:d7:a6:0b:4e:a4:f4:
                    7a:62:dc:a7:26:e9:c7:4e:8c:99:5b:b9:0a:58:31:
                    6a:6d:34:48:97:cc:19:ff:c9:78:8f:fa:90:64:77:
                    78:b6:ca:48:99:d0:d1:63:cb:e8:27:28:24:b1:43:
                    83:b0:9f:60:ac:dc:9f:e6:2c:7e:99:7e:91:c8:1b:
                    d5:22:8a:26:bb:3c:b7:76:9a:cb:a4:b7:16:f2:45:
                    f8:44:2a:59:fc:e5:64:18:bb:52:e3:16:15:49:ab:
                    17:73:b4:6f:7f:6e:fa:a4:fa:df:45:ac:21:d9:ed:
                    e6:ac:b8:9b:01:02:fd:09:61:35:7e:30:6e:1f:7f:
                    49:1a:ac:5b:24:96:e6:83:43:8d:1d:13:01:8e:77:
                    5f:94:b3:b5:21:12:5a:8d:f6:97:b8:59:ab:61:3d:
                    70:88:de:dd:4a:31:48:2e:76:55:b6:b6:99:9d:83:
                    9d:90:40:c1:5b:96:6a:40:13:b6:db:bf:bc:ff:99:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:43:8D:E7:CA:A5:77:13:26:2D:9B:AD:DF:AF:6E:F9:67:0A:BC:10
            X509v3 Authority Key Identifier:
                keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:67:8b:02:a3:e4:74:8c:a1:63:46:38:21:89:7b:f0:ae:f0:
         e6:d7:20:12:0c:28:fe:fa:29:4f:65:1a:4b:6e:54:a7:e7:8f:
         1a:7f:f2:ad:62:f2:e3:59:11:65:e0:09:00:57:0d:28:81:46:
         12:ab:ea:ba:f8:cd:e2:67:b4:60:83:5f:c7:6a:38:e4:a5:5b:
         84:03:c4:ac:ca:e3:9c:b8:45:c2:d3:75:0d:8f:9b:55:12:e1:
         05:1f:0e:26:a7:24:e5:6a:c9:9f:3c:84:15:38:2f:13:87:8d:
         c6:10:b6:f0:2e:5a:5d:d4:0d:07:6c:0a:be:01:dc:e7:29:e4:
         fa:89:43:66:e1:a9:26:83:91:74:33:9b:f3:6f:6b:c9:6e:3f:
         0c:47:40:81:aa:03:cc:62:f5:b7:d2:7e:13:8b:55:5f:a5:92:
         a9:b1:cd:a2:b9:b6:b8:f9:03:71:e6:38:91:ab:52:a2:e7:c6:
         d3:68:7e:ae:27:23:8d:ae:08:b8:1c:4c:fa:3b:20:8e:2d:e8:
         1b:6d:f6:e8:38:f2:76:3f:62:9b:29:5b:a5:b0:82:20:50:7d:
         fc:a8:d0:2e:d1:41:79:0e:fc:9c:a4:cb:04:9f:8d:30:6b:e9:
         0b:12:8d:d3:35:13:98:20:99:72:1f:38:84:cb:5a:3d:59:f4:
         6d:91:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:45 2025 by rpki-client