Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
File:                     x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json)
Hash identifier:          oZhTMpydoHxYWGn3T6lx3Qx9mfAh3gkR7vAQK4N4MvQ=
Subject key identifier:   4C:86:D6:08:DD:AC:FA:35:7F:33:FF:91:B2:F5:63:FE:A7:D5:9F:D6
Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B
Certificate issuer:       /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
Certificate serial:       019874194AF59CAC7CE547A99F0B746083A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 08:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:11 +0000
Files and hashes:         1: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: GDmprVqq6v+qrJQRPg6YXPck1+STEIS/jxlXZiVU2Ms=)
                          2: yrgIBtaF_Rl3-KfRiLgUYar-yd0.roa (hash: T90C90e5Of8IaOpnooa9JcWxTvLM03hzqcILUaCvjno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:4a:f5:9c:ac:7c:e5:47:a9:9f:0b:74:60:83:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b
        Validity
            Not Before: Aug  4 08:01:11 2025 GMT
            Not After : Aug  5 08:01:11 2025 GMT
        Subject: CN=4c86d608ddacfa357f33ff91b2f563fea7d59fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e0:f6:09:6f:8b:ee:68:0f:67:a8:a8:fb:47:
                    96:16:98:39:ff:bc:d9:af:fb:d0:3b:f9:0d:44:82:
                    3f:ba:c4:88:93:8f:a0:d1:22:4f:fa:60:e8:79:fb:
                    76:f1:ed:45:6c:0b:63:4f:2c:d3:8e:12:cf:39:3b:
                    f3:06:38:5d:29:5c:11:03:78:08:27:36:f4:21:82:
                    08:31:39:95:7c:b8:d3:1a:62:51:bf:b9:b2:98:f6:
                    f1:a0:1a:96:d5:2e:24:d7:5e:7c:ab:ad:4e:fd:0b:
                    0d:3d:55:61:7e:45:2f:7a:e2:79:68:57:1c:cb:1e:
                    9e:d6:0c:02:7c:70:d6:37:5c:46:86:53:23:f5:25:
                    45:24:9d:4f:87:c4:8f:25:d6:2f:c7:51:68:b6:7e:
                    47:ba:ef:2e:63:b1:c0:fe:ae:ec:d8:6d:27:4b:c8:
                    e4:3b:d1:37:e5:db:c4:07:f8:38:43:19:19:6f:ec:
                    58:d9:71:a7:1e:ad:aa:06:cf:77:6a:6a:e7:8f:e1:
                    6e:a4:7b:0f:8a:2a:05:7a:55:a0:47:a1:c5:71:cc:
                    57:59:2a:c8:7e:45:c5:92:b4:cc:02:64:ee:54:77:
                    cf:20:3b:bd:19:ef:0a:c4:f1:b1:8b:ae:6d:77:34:
                    20:b5:a9:45:af:4e:a9:f8:21:a6:3a:ff:7b:f2:fd:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:86:D6:08:DD:AC:FA:35:7F:33:FF:91:B2:F5:63:FE:A7:D5:9F:D6
            X509v3 Authority Key Identifier:
                keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:02:6f:d5:5d:f3:a8:87:4e:56:8e:76:78:35:92:03:d3:16:
         84:2e:28:bd:d5:ac:bf:26:bc:5e:36:1f:4d:e7:f1:d0:f5:d0:
         ca:85:05:b7:a2:4b:d5:ca:81:40:1f:ef:77:40:17:51:29:f8:
         b1:82:2f:e8:ae:f4:a5:6a:6d:ca:21:82:a9:63:cd:67:ed:3e:
         46:bd:ff:42:88:b0:70:8f:4a:12:2d:14:c5:7c:ea:ae:99:2c:
         7e:e7:2b:b6:c3:4f:e5:31:22:83:e4:0f:9c:6a:19:58:b5:58:
         a3:91:6e:64:5a:40:ea:90:3c:e9:47:e5:ad:9c:4d:6e:dd:25:
         04:e6:e2:7f:3b:bb:8f:b0:a1:fd:59:15:bd:42:91:e4:43:81:
         86:2a:c8:b2:69:7e:a7:b2:77:41:aa:09:85:8c:b6:57:2f:1f:
         ef:e1:e8:2d:61:ee:4d:0b:fc:73:df:9a:36:c4:c8:9c:25:69:
         d1:cb:a2:3e:62:46:89:19:3f:69:d4:72:9f:82:8a:0c:da:81:
         a9:e1:00:4d:42:1c:41:d2:97:2e:2c:30:0c:94:49:a0:24:ea:
         f4:4b:3a:1d:09:ff:86:aa:f5:cd:50:77:2b:4e:7c:38:c4:96:
         b9:82:36:6c:7f:64:d8:32:12:bf:f4:6b:7a:21:01:f8:88:61:
         e6:cc:e1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:59 2025 by rpki-client