Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File:                     xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier:          aU2o0WSyhrXRecf4GBTY6anDMx7YoLp4/FQlsm0FvYY=
Subject key identifier:   ED:BE:1A:25:43:12:06:D3:A5:DF:1D:38:52:1E:01:2B:86:0A:39:45
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer:       /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial:       01987FE66D141A5E1E11AE9F0F065FE05243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number:          1622
Signing time:             Wed 06 Aug 2025 15:01:04 +0000
Manifest this update:     Wed 06 Aug 2025 15:01:04 +0000
Manifest next update:     Thu 07 Aug 2025 15:01:04 +0000
Files and hashes:         1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=)
                          2: HR55_v7tU_nk_jRUWYmfJtQR9WA.roa (hash: /dID2iZYF2CUzIicZ7+Z023I6NUW7EvfBXCTVjJ/V0M=)
                          3: TCBCoiqsdjtnt0QWg_pGGqcuefY.roa (hash: 2VffKASaJzsixiO8CsFevC9I7clRJaUqZ1jWVGGpfFc=)
                          4: WP71_y34vxzD5x7BOioebxCCHyo.roa (hash: E5yzZO4QIaYJL7VozBk+Y+K8Kjs53pwyA0H4+gidJRs=)
                          5: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: lrZbgx2rtXFwI1Qvtp7lcGBXN/zENO8y0/rCrJJYmWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:6d:14:1a:5e:1e:11:ae:9f:0f:06:5f:e0:52:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
        Validity
            Not Before: Aug  6 15:01:04 2025 GMT
            Not After : Aug  7 15:01:04 2025 GMT
        Subject: CN=edbe1a25431206d3a5df1d38521e012b860a3945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:f7:49:5a:5a:c5:ae:b5:8d:d5:e0:6b:5b:
                    e5:de:93:e6:93:64:e3:73:62:be:3b:b4:3d:50:5f:
                    46:83:bb:97:6b:02:b8:8f:0a:88:3f:3e:b9:13:7d:
                    25:58:0f:2b:c2:59:8f:14:f6:92:1c:a9:38:c3:cc:
                    95:30:99:c3:bb:57:a1:c8:71:f0:54:4e:c9:81:0c:
                    5b:48:d5:b5:69:0a:ee:0b:53:51:ad:fb:2f:97:de:
                    71:64:fb:e9:8d:75:97:57:21:ad:6f:7e:9a:d0:6b:
                    e9:02:89:fa:3d:03:a0:28:d3:35:39:33:47:52:f9:
                    b6:cf:e6:c1:b9:43:71:9e:13:8c:db:84:8d:79:0e:
                    cf:8b:c6:92:d8:8d:4d:eb:84:f3:1d:b4:34:b0:03:
                    be:ba:65:ef:12:50:36:65:21:da:27:ad:22:9f:71:
                    5e:55:32:11:02:71:e7:41:7a:bc:96:c1:cd:95:a7:
                    6e:5b:8b:89:1d:77:5e:6b:f4:b9:6d:d4:0f:8f:ee:
                    f7:5c:1a:07:a9:77:dd:55:89:e3:ef:20:9d:63:b0:
                    ac:25:83:ef:a3:69:96:62:a7:1f:bb:bb:49:0a:f7:
                    96:68:8b:a8:df:f9:e7:a5:90:70:bc:d9:b5:e2:f9:
                    03:5e:fe:0c:ea:e7:47:04:ad:93:81:57:75:95:dd:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BE:1A:25:43:12:06:D3:A5:DF:1D:38:52:1E:01:2B:86:0A:39:45
            X509v3 Authority Key Identifier:
                keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9a:8d:8d:7d:c0:50:a8:b8:1c:32:1e:84:8e:87:59:28:ce:
         c8:41:38:eb:2c:1f:33:b6:c0:61:bd:f6:67:f1:d3:fe:52:a2:
         b0:7a:33:aa:cb:9a:bd:ef:0b:c9:90:1f:cd:b9:6b:9a:30:f7:
         22:c9:ae:64:bf:9d:40:9f:1b:ed:da:55:f2:d8:63:b9:f1:e6:
         3e:a8:b5:03:6b:ac:8f:fb:02:d7:d8:2e:b7:e2:75:b7:b4:81:
         d9:03:69:bd:06:5f:0c:d6:01:34:0b:a7:5d:8b:14:56:0b:05:
         35:0a:c1:81:ef:89:1f:c0:3b:9c:8d:0c:d3:4b:ef:10:cd:15:
         71:cc:02:ae:3d:2c:70:7f:82:6a:26:ef:80:9c:c5:f7:f0:01:
         f6:33:5e:00:33:2a:9f:d1:12:d2:86:1c:5f:db:65:d6:2c:2e:
         37:57:c2:21:26:48:11:b6:ab:32:01:2d:c9:34:aa:4e:c4:b3:
         45:ce:15:be:38:32:7e:4a:e8:73:42:d6:7a:cc:21:4b:b5:d5:
         ea:d1:56:47:46:82:36:de:27:bd:96:36:2e:8a:64:cf:46:10:
         ac:5e:f1:73:c4:7d:18:11:67:01:af:51:08:d1:19:fa:6b:00:
         b0:72:48:e4:7c:9e:92:22:2e:46:33:c3:b7:91:f4:79:23:c3:
         a2:8a:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:19:46 2025 by rpki-client