Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
File:                     P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json)
Hash identifier:          UBOjmhnA46SV0BTeDnVs4E6LMZpOwvlo9v/PP/eRT/A=
Subject key identifier:   86:59:72:8C:BF:69:43:47:E7:B6:F6:F4:02:94:55:AA:EE:03:8A:9B
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Certificate issuer:       /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial:       01988B0E5692D23C2F5E178727E2529A60BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
Manifest number:          1622
Signing time:             Fri 08 Aug 2025 19:00:29 +0000
Manifest this update:     Fri 08 Aug 2025 19:00:29 +0000
Manifest next update:     Sat 09 Aug 2025 19:00:29 +0000
Files and hashes:         1: I8Hl2QUOJ6pW-HzuzhburaAUCcs.roa (hash: TO7xgPDDMwBnfoyPmeOZq+S6vszklMWr0Jg0Yq+3Oiw=)
                          2: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: v85SLtQDL02KPuXQ27Swg8feLAQ2jKtsa2HYi4col70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:56:92:d2:3c:2f:5e:17:87:27:e2:52:9a:60:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
        Validity
            Not Before: Aug  8 19:00:29 2025 GMT
            Not After : Aug  9 19:00:29 2025 GMT
        Subject: CN=8659728cbf694347e7b6f6f4029455aaee038a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:31:6d:3b:0f:f4:5f:ab:59:34:1d:7c:d0:
                    33:7e:08:31:ac:cb:7c:1e:f0:0f:7a:94:2e:ce:1a:
                    32:23:94:68:0f:99:64:4d:44:9d:ce:8a:26:10:6e:
                    57:c5:c6:44:4b:7f:7c:3e:75:ef:7b:00:62:67:5d:
                    3e:fb:de:74:65:39:2b:80:a6:15:b0:a0:ba:3f:91:
                    fe:a5:6d:dc:cf:6f:11:5f:8a:13:74:c1:8f:61:dc:
                    75:b4:a9:93:37:a0:8b:f0:71:c6:3c:47:22:6f:59:
                    a1:70:13:4e:0f:17:9e:1d:0c:5d:b3:45:d7:0e:91:
                    ca:12:fb:f5:d8:98:ec:82:92:c1:85:ca:93:ad:82:
                    27:12:24:c7:92:6e:c9:85:19:d0:cb:ec:08:da:7d:
                    9c:20:a5:38:8d:65:1c:74:05:d8:3b:58:ea:5c:c9:
                    c2:63:2c:8f:2e:fa:7d:2d:e1:a5:e1:07:49:ca:d8:
                    f9:ff:af:e0:d1:f9:41:7d:c9:ed:10:26:b7:a6:31:
                    da:40:1c:2c:44:34:04:fe:db:73:b9:8f:4a:59:5d:
                    96:d2:3a:1f:13:c6:02:17:f8:a3:e0:c0:f8:d1:80:
                    83:2e:44:c6:d3:95:92:50:76:22:08:11:a1:8d:c0:
                    02:e5:76:f4:cd:fb:6d:88:d9:13:b0:c8:d9:56:12:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:59:72:8C:BF:69:43:47:E7:B6:F6:F4:02:94:55:AA:EE:03:8A:9B
            X509v3 Authority Key Identifier:
                keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:45:03:2e:a5:b1:68:59:b3:bc:c8:f4:c4:63:e1:d6:71:0e:
         20:cc:e4:f5:28:98:07:2d:1e:74:26:d1:33:0b:3b:8d:16:a0:
         e1:26:57:37:f2:6a:8a:b3:49:0e:6f:0a:4c:49:f0:d6:3e:d3:
         28:36:46:ab:8e:e4:9a:3e:49:ea:74:14:00:f6:fa:be:37:e8:
         18:3f:47:c3:55:52:6f:e9:22:a8:69:b0:30:c8:89:9b:bd:f3:
         83:8a:67:d3:05:65:b4:9e:5b:fe:ea:2c:8a:b5:e9:c1:13:8c:
         bc:d5:53:3d:90:3b:78:d2:f8:33:c1:a5:75:21:af:4b:02:45:
         3f:fe:e0:ed:1e:4a:0e:6f:12:33:78:3e:bd:3b:67:5e:18:93:
         84:7f:be:c2:bb:00:39:7a:4c:3b:ff:27:88:29:20:45:d1:3d:
         71:8d:53:70:d7:d1:7e:41:b8:db:bc:b5:33:f6:c9:9b:f1:1a:
         b7:fc:e5:e6:c6:4d:1f:91:7d:3b:c0:59:38:d2:b3:9d:db:a0:
         36:dc:a2:72:f1:1f:fd:f2:c8:40:a0:47:b7:1d:03:0b:5f:6d:
         e7:09:92:5f:91:96:b6:34:3e:d2:9c:45:a3:07:70:15:dc:3e:
         a2:0b:07:e9:b8:73:d6:c5:c7:ae:4b:e5:4f:29:56:e1:89:36:
         df:18:52:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:37 2025 by rpki-client