Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
File:                     XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft (raw, json)
Hash identifier:          inHZyqtsWh7RXi8fLM9Wiua0hJoTRW5u6NtRfxszySE=
Subject key identifier:   DD:56:2E:81:BD:29:B3:F0:CF:45:C7:C1:CC:BC:A5:D3:6D:7A:F9:79
Authority key identifier: 5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
Certificate issuer:       /CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Certificate serial:       0198729864D340A7D3326B7362A1BCF68328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
Manifest number:          E9
Signing time:             Mon 04 Aug 2025 01:00:46 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:46 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:46 +0000
Files and hashes:         1: 3uPLM02UL2awUH-Kuoh6brdmF8Q.roa (hash: 7YTaX8xKCH2MetKx49NBdkYFZn8uvSI3o4szPzVZP/w=)
                          2: XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl (hash: bjbPtT4Ktu2Ce8MsNb/P1udFxH6LdlGbdhUxJFfT8Vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:64:d3:40:a7:d3:32:6b:73:62:a1:bc:f6:83:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
        Validity
            Not Before: Aug  4 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=dd562e81bd29b3f0cf45c7c1ccbca5d36d7af979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d7:b7:b8:26:02:b8:4d:e5:56:7d:b7:5d:33:
                    8b:12:0b:07:23:fb:f8:f7:c3:df:61:a9:2d:10:1f:
                    5b:c2:bc:3c:8b:6e:04:20:6e:77:d7:db:ab:75:81:
                    a8:98:41:2a:b6:0d:91:51:9a:96:61:c1:ad:61:7c:
                    8c:04:47:7a:8b:80:53:41:5e:01:63:f0:34:07:b2:
                    a5:94:d7:ba:f8:d5:2e:ef:c8:56:ef:65:c1:1a:8f:
                    26:e8:a9:cf:99:9d:96:bd:35:97:28:71:e2:69:f5:
                    a3:ab:b1:74:66:2a:f6:06:b7:fe:a0:c6:e8:e5:11:
                    48:c5:05:82:57:be:ce:58:26:0d:27:db:39:7b:bc:
                    d1:8d:05:9b:f0:51:c4:e2:11:71:f6:e0:28:cb:ef:
                    1b:fa:b1:ff:2f:0b:9d:c0:9d:bf:08:9f:2a:d1:ff:
                    b3:f8:91:43:51:4a:2d:56:42:6b:29:d6:ab:a3:20:
                    e3:4c:d0:23:99:33:93:d3:63:85:93:13:22:41:71:
                    fc:63:04:46:17:b0:72:ca:22:71:4b:60:e5:56:0c:
                    5c:05:97:55:93:22:5c:4e:8f:51:57:7f:a3:d2:7b:
                    99:59:cc:da:ba:0e:f3:ca:d2:10:00:a1:de:61:08:
                    c9:56:7f:e4:7c:05:53:99:6a:49:68:15:cb:0f:fb:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:56:2E:81:BD:29:B3:F0:CF:45:C7:C1:CC:BC:A5:D3:6D:7A:F9:79
            X509v3 Authority Key Identifier:
                keyid:5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:d2:26:1e:a8:a0:24:78:59:d4:33:61:c8:11:37:59:52:
         55:1f:42:1d:b1:d4:fd:0d:ca:6b:6b:6b:65:8a:df:02:dc:82:
         35:23:d7:ff:af:6c:8b:de:a7:81:f3:93:26:19:9a:6b:3a:7e:
         f5:6c:b9:e7:ab:75:90:fc:61:6b:a6:b7:d7:c5:9b:ee:49:72:
         93:e5:a5:9f:1a:05:44:ee:ca:be:b7:0f:88:bf:94:07:05:0f:
         01:f3:2a:81:7e:52:9a:13:a4:ec:aa:e7:a4:ae:d9:54:25:f2:
         a4:64:d0:f2:f8:3c:ef:38:2a:e6:48:8b:1f:68:0b:22:ef:af:
         c8:a4:a1:b3:c0:58:aa:83:3d:27:46:78:a5:f1:99:e1:e8:7f:
         98:1e:9e:9e:82:24:0e:e9:b2:89:40:f6:c2:ff:d4:91:89:b5:
         9d:4f:ae:ce:fc:b6:fe:62:30:66:60:18:2a:59:f7:3c:3e:03:
         bd:84:7f:a2:33:b6:38:f8:f6:7d:e2:e6:2a:41:70:1f:35:71:
         57:e9:1d:eb:bb:3e:cb:6a:f4:a8:f9:7f:2b:f8:de:c7:04:6f:
         03:75:38:61:7c:4f:b4:ce:f9:2d:fe:99:37:c2:8b:bd:ea:b6:
         62:4e:98:52:a1:b2:76:3e:5d:8a:43:75:fe:84:46:36:91:a0:
         49:d9:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:07 2025 by rpki-client