Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          ywaG5KNrEFSMajQUxzYqX5kuCsmMhYcXZms1cTgQ0Hk=
Subject key identifier:   51:67:BC:4A:1C:1C:B3:07:D0:F8:40:B7:93:FD:3B:3B:E1:47:E0:37
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       01987373FCE7032217101F74D869696855B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          06E0
Signing time:             Mon 04 Aug 2025 05:00:37 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:37 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:37 +0000
Files and hashes:         1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=)
                          2: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: X56aF3J4esyIj/NOoQCY2YQUbVou0afPIGcX8bmlu+Y=)
                          3: YxZAW7xYuuoItNSxZUB_Jyv54M8.roa (hash: ZHkpmuH04xDfiHb0nZigSHP0TijTWcHxuOKkj3BJQR4=)
                          4: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=)
                          5: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=)
                          6: yM87hDn48G9pC2uXeNqB6MxDyyY.roa (hash: m4eQad2ewLgQnWmXHQewt9Vc5wlc0Xqlxo4fhTztW/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:73:fc:e7:03:22:17:10:1f:74:d8:69:69:68:55:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: Aug  4 05:00:37 2025 GMT
            Not After : Aug  5 05:00:37 2025 GMT
        Subject: CN=5167bc4a1c1cb307d0f840b793fd3b3be147e037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:e6:b7:62:3a:28:54:9c:98:68:de:e6:a9:
                    5b:91:4b:9b:7b:d3:b3:e6:f7:c5:5a:73:9d:be:e7:
                    3a:e2:41:7d:c3:03:17:de:4e:00:03:6f:b5:25:07:
                    fe:84:7f:20:38:cd:fb:d6:5e:46:f0:45:8a:b8:21:
                    38:3f:f7:da:37:f4:18:8d:a8:f8:6a:e7:0f:53:ec:
                    90:24:68:f2:de:37:3a:de:e4:81:6d:34:ba:e8:fe:
                    91:39:22:b6:d4:e2:83:80:33:c0:16:ec:c4:9e:f8:
                    f5:d2:d1:61:6a:a2:3c:cd:5b:81:5f:d9:33:da:36:
                    c7:fe:23:a0:5b:1e:81:a7:a4:38:7c:40:83:92:2f:
                    85:3a:4e:84:5c:31:84:7e:0d:5a:cf:04:90:a3:72:
                    e2:4d:33:c5:af:79:29:87:5e:84:4c:1b:26:54:2f:
                    03:2c:81:52:44:cb:11:e9:51:7f:65:c7:9a:9b:76:
                    60:fa:9c:34:36:e8:ca:09:a4:05:91:41:e3:68:7c:
                    e6:49:63:57:f9:09:05:67:5c:0a:b9:30:77:bb:c7:
                    65:1e:5c:ce:8a:f2:ea:56:d1:e8:49:90:f3:b5:7a:
                    66:fe:dc:04:60:91:8a:b6:67:78:90:4a:d3:84:42:
                    17:39:68:97:56:e6:47:e1:60:f7:5e:ad:c5:b3:8d:
                    77:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:67:BC:4A:1C:1C:B3:07:D0:F8:40:B7:93:FD:3B:3B:E1:47:E0:37
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:da:50:95:c0:62:82:5a:ef:98:ff:0a:52:88:8f:57:05:c0:
         2e:00:31:3a:37:cc:f6:ca:6a:3c:a6:f8:e1:85:bf:e0:92:f7:
         3d:e1:3d:11:3e:61:82:02:7c:23:09:10:4b:8b:04:1b:c2:2c:
         e3:5a:87:f6:88:c4:55:93:7a:ce:76:75:fd:56:05:5a:91:e0:
         06:50:57:2b:e3:e0:c4:78:ba:7f:89:b1:4a:9c:4a:2f:ee:e1:
         07:37:17:28:0b:46:a2:e7:23:44:e2:e7:e6:80:97:c7:47:2c:
         b8:b3:51:85:45:78:25:50:76:ff:30:2c:1f:57:f0:30:3b:a4:
         0b:f5:ef:d2:35:7b:c8:7e:32:8f:1b:e1:bc:61:c3:c7:eb:9b:
         3c:d0:fa:3c:46:76:da:d5:7e:2f:e2:59:67:6e:14:07:db:75:
         34:eb:24:54:96:bf:21:36:57:90:4d:4e:74:cb:31:47:1e:90:
         9f:8a:ca:ba:59:13:70:04:ac:a0:96:1d:69:c7:bb:07:a3:76:
         71:3c:75:a8:bb:c9:4a:66:9b:52:e3:50:40:fb:6a:3a:d4:ed:
         3e:ab:aa:ba:8e:e8:d1:ec:fc:55:dc:37:6a:bd:af:3e:66:04:
         9b:1f:46:59:48:d5:e8:31:ab:07:b6:6f:f0:da:a7:6f:9a:21:
         18:f6:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:11 2025 by rpki-client