Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
File:                     XWwVypA9fSVFPq619ySgTjqmWQg.mft (raw, json)
Hash identifier:          hZ9U3G4kBdLIhzz6e+Q4gvGqy1qWq6qOh5RtYywlrW0=
Subject key identifier:   9B:04:1A:8F:DF:F5:7C:74:23:3A:40:B4:E1:D3:1D:E9:2B:12:9B:CE
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Certificate issuer:       /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial:       01987B2DDB4CF002B6891FAE6C1C897356C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
Manifest number:          1624
Signing time:             Tue 05 Aug 2025 17:00:59 +0000
Manifest this update:     Tue 05 Aug 2025 17:00:59 +0000
Manifest next update:     Wed 06 Aug 2025 17:00:59 +0000
Files and hashes:         1: KGLhnOtOH4dX4vgy-roccfFwMa0.roa (hash: Q+cux+R5PAR0o25xtkFz855zy5Yln4wHE6v90utYbJQ=)
                          2: XIOxEKfk0L1hsSImSOzEtdwAjH0.roa (hash: EAwm98c0fkS4uhfe34Ly+0Co1dsy6rvufc8PCiKQWUM=)
                          3: XWwVypA9fSVFPq619ySgTjqmWQg.crl (hash: UO84YpK+SuggWX+YvWa+dKkyAqxmU3SzkSnjs9x2PsU=)
                          4: pjuwfv3bsHCpq2bUzmpShMFHNQw.roa (hash: Hy8/ILbDAQXBmLpCF9rnEz7CfpQmiaJg4wOv9IAGHBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:2d:db:4c:f0:02:b6:89:1f:ae:6c:1c:89:73:56:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
        Validity
            Not Before: Aug  5 17:00:59 2025 GMT
            Not After : Aug  6 17:00:59 2025 GMT
        Subject: CN=9b041a8fdff57c74233a40b4e1d31de92b129bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:0f:65:00:54:c6:78:be:9b:14:4f:c6:98:
                    2c:22:49:ee:0c:6d:84:fa:d7:0d:01:c2:cb:2c:44:
                    1e:94:1e:95:f1:2f:83:b5:67:36:ed:55:5e:47:a4:
                    b7:c0:50:3f:8b:91:36:b6:20:4c:a2:01:25:15:bb:
                    3c:18:1d:df:d9:00:fd:ed:ff:65:1d:a5:9d:16:49:
                    bb:59:60:09:b1:91:f5:b2:26:6e:18:20:03:5e:6d:
                    d8:fa:91:88:b2:2e:10:fb:71:5b:4a:b7:87:1e:c2:
                    5f:67:80:a4:14:d0:26:83:76:41:7f:44:e5:ea:04:
                    bf:3c:bf:d4:8c:b1:2a:96:11:4d:a4:02:1e:bd:97:
                    7a:49:f6:0b:ad:47:a6:2f:78:68:01:33:4e:59:ce:
                    bd:c4:2a:a5:06:8e:90:44:75:f2:9f:6a:f7:3b:93:
                    c3:5e:6c:74:95:15:e0:3b:4d:92:0c:db:11:06:2b:
                    e2:95:3c:f4:a5:4a:a7:d7:fb:a9:e7:df:bf:99:27:
                    ba:2e:0e:de:62:05:1c:d4:7b:fc:44:af:f0:cd:e8:
                    9f:85:2f:09:ff:69:53:4d:82:4e:6b:fe:fc:2e:98:
                    8c:aa:b0:13:31:11:77:c4:3d:ee:11:d6:c6:fe:71:
                    c4:74:2e:d9:72:f7:7b:77:41:07:00:56:f8:3e:e7:
                    63:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:04:1A:8F:DF:F5:7C:74:23:3A:40:B4:E1:D3:1D:E9:2B:12:9B:CE
            X509v3 Authority Key Identifier:
                keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fc:a3:07:3f:d9:4a:6d:f2:18:a2:8f:a0:e5:1e:be:15:d2:
         0c:0b:f4:e1:96:0a:45:b3:78:a6:45:67:55:70:86:97:65:e8:
         1a:be:f7:0f:b7:f6:15:b6:60:a7:df:fc:13:9b:3c:19:0e:d7:
         2a:1c:d2:b4:e1:07:9e:72:1c:e3:19:e7:57:da:72:9c:dd:17:
         27:a7:ea:84:9e:61:a2:af:10:a2:5c:89:7a:a5:a1:d8:15:25:
         90:32:c9:cf:ec:30:50:d8:b4:1c:77:3f:77:58:0c:d4:fa:d2:
         2b:63:d9:4c:0c:99:86:c0:f7:10:db:d0:e3:79:d7:3e:23:90:
         3e:0c:c9:1d:e4:4b:62:3f:6f:43:68:dc:83:be:9a:1b:c8:fc:
         20:9b:45:a1:88:8a:ae:b4:ce:c1:7f:b3:8d:69:7d:e9:81:fd:
         1a:99:e0:d6:26:2e:b6:1a:bb:c2:45:2e:36:40:cf:16:de:18:
         38:53:27:59:05:72:7f:86:0e:bc:63:19:fe:4d:8f:e7:29:9f:
         c7:aa:f5:a8:72:be:19:96:f8:0f:34:ae:b9:70:41:11:5b:ca:
         46:27:c0:59:af:2a:a4:c5:bc:99:0a:1f:bb:b3:a5:37:c2:88:
         f0:9d:92:38:a0:af:4f:e9:21:b2:77:a2:de:bb:29:84:27:48:
         4e:a8:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:03:54 2025 by rpki-client