Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File:                     XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier:          NqR6p7+i1cuf8ofM2QST6DTqaYwKW5JRrfF1tdYZfQA=
Subject key identifier:   DE:7F:5C:0A:7A:9A:89:3C:31:A5:96:25:80:A6:F6:74:43:7D:9D:4B
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer:       /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial:       019872D003470585992DECB364242F4B48B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number:          0BC8
Signing time:             Mon 04 Aug 2025 02:01:31 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:31 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:31 +0000
Files and hashes:         1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: cnY7B9r2flYj2pH82mlegRF4vwmL2cxzmtt9Rdzdev8=)
                          2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:d0:03:47:05:85:99:2d:ec:b3:64:24:2f:4b:48:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
        Validity
            Not Before: Aug  4 02:01:31 2025 GMT
            Not After : Aug  5 02:01:31 2025 GMT
        Subject: CN=de7f5c0a7a9a893c31a5962580a6f674437d9d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:be:b0:64:6b:db:b1:07:72:88:6e:03:ab:
                    23:ad:02:14:4a:44:39:65:93:e7:bd:5b:37:aa:95:
                    72:43:35:a9:d7:05:b5:55:19:cf:c3:d2:7c:72:91:
                    e4:fd:3e:44:9c:86:c6:3d:d2:33:54:d5:a8:61:64:
                    5c:fa:81:a9:22:ab:f2:eb:dd:29:52:c4:6b:7c:a8:
                    a6:f8:de:d9:78:a8:9d:ab:83:08:a8:34:c4:01:74:
                    b6:5c:eb:dd:8b:ac:09:5a:a4:22:85:83:10:eb:3b:
                    61:61:00:9f:56:58:1a:7c:c4:a8:02:64:7c:45:69:
                    11:55:2c:e8:91:94:aa:51:79:87:15:24:07:f0:91:
                    ba:5c:e6:e2:00:85:d1:c3:58:7b:1f:b8:31:5b:bc:
                    ef:19:73:8e:08:5a:89:17:84:eb:31:73:1e:fe:c5:
                    b1:ce:18:21:0d:1b:c4:56:d8:71:a0:b3:ff:1d:33:
                    77:2e:1c:61:a6:27:af:52:32:dc:b0:e0:00:09:e1:
                    8c:8a:0f:c9:ee:32:5e:6b:61:18:25:f0:37:d5:91:
                    aa:f4:64:90:dc:72:9c:a9:56:4d:a3:8e:b0:a1:bf:
                    81:4a:1f:fb:1d:90:72:2f:5f:d0:73:30:62:7e:96:
                    df:b7:11:7b:9f:3a:43:98:05:6a:c4:69:23:c0:e8:
                    fb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7F:5C:0A:7A:9A:89:3C:31:A5:96:25:80:A6:F6:74:43:7D:9D:4B
            X509v3 Authority Key Identifier:
                keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:39:bc:cc:b5:5d:9a:5c:aa:1e:df:da:fc:26:fa:11:93:a9:
         c2:e2:66:2e:ad:45:59:df:27:41:c0:25:d8:6f:32:ec:a6:d0:
         7e:b8:8f:42:11:52:b2:58:27:ce:6c:e4:6d:0f:de:f4:aa:71:
         3e:52:7e:b1:04:33:df:e8:4e:ac:cd:bb:e6:b6:9f:ca:b6:1a:
         9e:18:7e:f7:8c:ff:18:b4:46:39:76:4a:2a:3a:19:e9:2d:d0:
         8b:03:12:3c:8b:f1:79:79:ab:8e:6a:30:43:f9:c1:51:45:f3:
         fd:86:26:af:21:e1:7e:af:20:08:2e:af:c2:83:f9:e5:71:4f:
         e2:92:66:9d:b7:1a:0c:1b:a6:1a:88:69:97:cf:22:59:5f:52:
         e3:39:04:de:15:fd:d8:3a:f6:49:0b:31:46:4d:89:ab:4e:b3:
         b5:4a:a3:16:a1:fe:a6:fa:ef:d3:7b:be:db:38:87:58:75:a9:
         07:d7:d5:9b:fe:d5:ea:9b:fa:6a:bd:c4:0f:f0:77:19:0f:a9:
         0b:f9:03:80:76:35:8b:c0:13:99:f9:b2:db:ca:29:f3:27:d8:
         11:a6:f9:33:62:fc:31:8c:58:79:a5:2a:d2:6c:13:37:4b:71:
         ef:81:69:5a:35:0d:ad:84:3d:b0:a8:7d:34:df:e0:5b:72:fe:
         c1:91:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:52 2025 by rpki-client