Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          5TIYDYS18byALb2IRyqtelGfmNXK1Nct1hxNHnS4/nY=
Subject key identifier:   EE:FF:B8:FE:39:AD:59:E9:26:56:1C:01:82:C8:C7:44:44:13:D8:33
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       019A1A2AE9B506C62B79B7F1EC6AFC1200D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          1728
Signing time:             Sat 25 Oct 2025 07:00:11 +0000
Manifest this update:     Sat 25 Oct 2025 07:00:11 +0000
Manifest next update:     Sun 26 Oct 2025 07:00:11 +0000
Files and hashes:         1: 0U3Gso3ODnWaRUyku2KbHXOd2nE.roa (hash: OjHUqZ7uYTApLthTiQNLejjbsCRnlAUYsAqNFNIG54g=)
                          2: 54ZmeVEdiSRDGRRG_DI6wWiUd7g.roa (hash: JFZc+GyxBOryjMHw3/n1I31IV2py6fuY1AjRNQU0bIg=)
                          3: Ku1m6fE7F4WFYNZ7f8RKK2-hH04.roa (hash: viKr0tF45sV0M1CowW9VfsNobYhpaxYTBfvzpT02dN0=)
                          4: wVptusVHIdbO2Rty9inFJlCpXfo.roa (hash: VLpPb0bMQpDYHBCAVfuSVFIISUNTNn9pYkADsImtNL0=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: P0lmHOF0zNWjyuLI7jpc31v5nYn6vFlkulv3C/IzDXw=)
                          6: zQ-KSJ7-TjaiG9uymKq9s3FHrzQ.roa (hash: FbTMvTLuTW6XcX7GqJJNJmaL2pjOC6IOrZv/ZrzS0Uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:2a:e9:b5:06:c6:2b:79:b7:f1:ec:6a:fc:12:00:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Oct 25 07:00:11 2025 GMT
            Not After : Oct 26 07:00:11 2025 GMT
        Subject: CN=eeffb8fe39ad59e926561c0182c8c7444413d833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:d4:d9:57:00:8b:6e:40:a8:9f:48:b3:03:
                    88:a7:74:c5:d7:38:48:1f:16:0b:a6:4c:cb:25:ec:
                    da:f1:ad:03:5f:8b:65:44:60:da:10:f3:f6:04:5e:
                    87:8a:66:21:1d:c6:e0:96:97:14:07:9d:45:67:c1:
                    0b:1e:61:89:62:bb:05:89:79:81:b5:3c:a1:ca:dc:
                    2a:70:03:1f:21:7f:62:50:5b:2c:f4:21:02:58:8a:
                    22:e7:22:5f:33:e7:78:0d:93:ab:99:91:b3:ee:2d:
                    cf:23:8a:e2:51:41:a8:5b:e7:dc:7d:c6:80:b3:2b:
                    74:f8:37:9b:ba:54:ef:f9:f9:ce:c5:42:b9:9a:eb:
                    7e:06:3e:80:fd:70:80:ef:43:36:7b:40:a7:71:3e:
                    5c:5b:ed:04:13:a4:f4:fe:16:00:6a:c9:98:cb:6c:
                    90:77:dc:cc:d9:a6:f1:a7:27:0b:27:83:7b:23:dd:
                    df:ae:6a:44:c4:11:59:23:64:61:77:e7:64:a3:c6:
                    a7:c8:71:82:3a:24:d2:a2:76:c1:e8:33:ad:58:da:
                    6d:7b:8b:e5:c5:dc:9d:d4:7d:15:18:80:3a:79:9d:
                    05:26:eb:12:41:45:8c:05:a7:67:1f:d4:0c:ce:e2:
                    5f:6f:11:73:39:66:c2:a6:90:8f:87:e4:b6:8a:b3:
                    96:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FF:B8:FE:39:AD:59:E9:26:56:1C:01:82:C8:C7:44:44:13:D8:33
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c0:89:cd:02:ab:6f:f5:0c:d0:2d:48:ed:2a:4e:10:46:6c:
         c4:a9:71:f2:92:ac:4e:45:1a:ec:cf:77:1b:24:c9:37:9f:74:
         c2:6b:92:12:d5:24:d6:b5:b5:ee:fe:8a:ba:1a:5c:d9:39:7d:
         6a:29:c2:e7:b8:64:43:3f:b0:b6:8c:57:a2:33:02:35:4d:c4:
         70:3d:ed:83:65:1d:25:31:b8:50:7a:1c:17:24:74:d6:36:27:
         74:7a:3a:95:0a:7e:2f:c6:11:f9:87:4e:04:7e:95:c0:f9:da:
         c3:54:25:18:a7:59:54:f6:83:f7:fa:5f:34:7c:60:80:86:ec:
         42:cb:11:0c:b0:7e:2b:23:cf:e9:27:d1:11:b6:f8:08:30:8b:
         73:03:3d:08:d6:1f:b0:7d:27:62:dc:d5:37:e3:70:33:a8:98:
         df:4b:28:a5:19:9d:bf:e9:fc:d6:b9:9b:cf:ee:21:31:38:a1:
         64:2d:15:c7:69:64:7e:06:ef:2b:e5:e7:12:1e:9d:1f:5c:da:
         3e:bb:61:ef:90:07:98:c5:a3:62:73:49:a8:c4:6f:a4:a1:4d:
         74:eb:3b:2b:e4:01:b6:5b:0d:3e:a0:ea:2f:b5:08:23:2d:8f:
         b5:f2:3c:ae:6c:75:3b:db:97:c0:15:99:66:9a:dc:f5:8b:6c:
         49:af:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 09:27:22 2025 by rpki-client