Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File:                     X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier:          OxDupMsTYqz/Fw3H4jgFZe5SarxIHVaCkLoTPz/DxT8=
Subject key identifier:   03:82:66:1B:B6:40:A5:99:35:A6:C9:C7:B7:94:5F:7E:4B:93:42:AE
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer:       /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial:       01988BEA90AE91821C41A4959A0C75F71ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number:          1625
Signing time:             Fri 08 Aug 2025 23:01:02 +0000
Manifest this update:     Fri 08 Aug 2025 23:01:02 +0000
Manifest next update:     Sat 09 Aug 2025 23:01:02 +0000
Files and hashes:         1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
                          2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: FHsHc4dj2qXM/iZLCKRIsi4Tf7sh86XGYD6ycn0Jhu0=)
                          3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:90:ae:91:82:1c:41:a4:95:9a:0c:75:f7:1a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
        Validity
            Not Before: Aug  8 23:01:02 2025 GMT
            Not After : Aug  9 23:01:02 2025 GMT
        Subject: CN=0382661bb640a59935a6c9c7b7945f7e4b9342ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:e8:65:e3:96:8d:7d:33:a1:4b:76:a9:e0:
                    9a:59:32:1e:ea:7a:71:c4:1d:08:a3:6e:75:55:7b:
                    c9:63:e7:69:8f:3b:14:02:f9:d0:fb:2f:36:48:67:
                    5a:02:93:af:f7:47:c1:28:1c:60:9b:66:fc:78:dd:
                    ee:f6:5a:af:9c:89:c3:59:5c:c5:a8:73:a3:db:4d:
                    19:ee:27:69:78:3e:ae:32:0f:a4:a3:b1:4c:c3:d9:
                    a9:64:b7:99:0d:3a:7c:cc:e3:20:89:86:37:80:d2:
                    99:aa:76:d2:63:aa:e1:43:71:35:44:51:6a:35:42:
                    b5:91:1a:52:2d:fb:3a:53:35:f4:dc:83:7c:09:77:
                    3b:71:6c:81:33:7d:59:62:a5:a4:a5:4a:ec:db:f0:
                    58:90:27:71:41:25:4d:42:b2:27:96:09:7a:5d:6c:
                    e2:88:27:37:be:83:df:4b:29:35:c9:b9:23:e2:d5:
                    49:03:a5:9e:ff:8b:b5:a5:95:e3:e3:de:e3:50:27:
                    ad:a5:58:76:a3:30:fc:f0:2e:78:0f:e2:0e:ad:e0:
                    68:90:7f:7a:e2:61:24:d8:a9:03:3c:23:2a:04:35:
                    e1:2e:e4:5b:f3:91:f9:6a:87:30:2a:ee:ff:3f:fb:
                    9a:3b:a7:b8:1c:53:c0:c3:96:f1:c4:9d:cc:b5:70:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:82:66:1B:B6:40:A5:99:35:A6:C9:C7:B7:94:5F:7E:4B:93:42:AE
            X509v3 Authority Key Identifier:
                keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:72:ac:ea:99:26:4e:ba:57:f3:5c:d6:75:f6:d7:1f:ed:83:
         27:bd:fc:04:c7:53:c3:73:fc:8a:e4:bf:6e:90:7f:ee:51:cb:
         57:9b:34:69:5f:39:5e:e9:16:01:b3:1c:f7:fa:4c:88:43:8d:
         28:ed:75:03:d8:3b:69:8d:6b:93:c2:c2:33:bb:75:80:47:98:
         30:5c:45:05:8a:e7:3b:51:6e:ac:5d:dd:9d:77:ca:8c:7d:82:
         6a:4b:97:8b:c4:67:fd:75:36:0e:60:e6:c4:6b:32:e8:6a:51:
         93:d9:85:f5:80:24:c7:6d:27:be:fb:36:66:be:2c:3f:38:8f:
         03:73:73:61:17:26:52:94:9a:3a:3b:48:76:52:e1:8c:24:b2:
         66:0a:eb:4f:2d:88:5b:d2:21:b5:17:80:74:08:64:24:24:ff:
         9d:a6:d4:e8:f3:4b:d4:b1:34:85:7f:37:fa:4a:52:12:15:57:
         ed:b5:1b:d3:30:fa:21:ee:bc:01:9f:ac:73:10:cb:77:7e:77:
         eb:f8:42:b9:d3:2a:1c:56:48:5e:35:f1:46:a9:17:a1:11:61:
         54:11:77:57:85:4d:d4:60:da:ff:c5:3c:0d:42:33:0c:61:31:
         1d:8e:7d:3f:df:fc:43:29:c1:60:7f:b7:dd:37:42:77:69:40:
         fa:04:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:20:38 2025 by rpki-client