Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
File:                     XaewUFU8jungWrTDf9l9KCEha0E.mft (raw, json)
Hash identifier:          T1AxuwtQHtAsLyduzL6F65LcSHhIVbGJzWf4uK8X5ow=
Subject key identifier:   28:1D:0E:63:67:F3:35:A6:6D:2A:1B:B4:C1:7A:0B:80:16:BB:7F:60
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Certificate issuer:       /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial:       01987CE53AAE28DAF683139DB7717D362174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 01:00:54 +0000
Manifest this update:     Wed 06 Aug 2025 01:00:54 +0000
Manifest next update:     Thu 07 Aug 2025 01:00:54 +0000
Files and hashes:         1: 1FlLRIIYGSU2lD9s6BElZ_82OMk.roa (hash: Q5lYF3Ib2nrKiWVSyeewvimy0dKCeaCp7d/phtTC4tU=)
                          2: XaewUFU8jungWrTDf9l9KCEha0E.crl (hash: wK/bkQ5+GGDvOBz9pIKgxwFBmHHdHFyYwTX32dIKRtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:3a:ae:28:da:f6:83:13:9d:b7:71:7d:36:21:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
        Validity
            Not Before: Aug  6 01:00:54 2025 GMT
            Not After : Aug  7 01:00:54 2025 GMT
        Subject: CN=281d0e6367f335a66d2a1bb4c17a0b8016bb7f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:1b:2a:3b:ef:4c:13:f5:51:97:88:fe:1a:
                    47:c7:d6:90:37:46:6e:fe:7c:59:bf:51:c7:40:90:
                    fa:97:63:af:37:f9:17:1b:2a:11:41:db:92:da:f8:
                    51:25:5c:88:ce:07:63:77:be:3e:ac:83:7e:4f:7e:
                    00:0a:e6:2b:94:ad:2d:71:e5:de:83:1b:2e:83:3f:
                    04:e4:12:4e:a8:68:29:4d:93:7b:c2:d8:5a:3e:1b:
                    a3:30:27:f9:db:d0:ae:57:b7:8e:d1:e1:2f:15:fe:
                    be:d5:fe:9b:a9:6c:fc:e2:31:b2:d2:b6:41:31:b5:
                    b9:38:cb:b1:33:f6:70:fe:06:2d:03:7c:ca:07:23:
                    14:d5:07:f4:5a:68:63:8c:38:43:9f:63:db:3f:69:
                    f7:42:22:48:4f:9c:4e:7d:63:85:1e:a5:5e:e1:cf:
                    54:f7:28:64:fa:20:35:1e:a6:84:50:ea:9c:9b:b4:
                    f0:43:3d:bb:52:d3:26:29:25:76:7d:00:f1:95:de:
                    b6:6f:e7:cd:70:41:3c:6a:66:32:66:a4:12:3e:5f:
                    15:91:62:20:af:48:ad:ad:3e:7c:6b:03:7e:5a:85:
                    bc:41:79:d8:8a:f7:94:ea:4e:50:9f:0f:4e:5e:bb:
                    0d:a8:af:f9:00:68:97:0a:d4:fc:85:46:9c:94:01:
                    c5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1D:0E:63:67:F3:35:A6:6D:2A:1B:B4:C1:7A:0B:80:16:BB:7F:60
            X509v3 Authority Key Identifier:
                keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8b:10:25:ae:9d:d1:2d:fc:99:7b:e8:48:81:9e:a4:d3:fe:
         82:54:17:20:15:e1:50:ec:7e:7b:32:9d:2e:7a:cc:30:33:b3:
         e6:fe:b9:32:11:a0:10:fa:90:e8:2b:53:59:3c:49:72:fa:72:
         f0:55:d4:d6:44:0a:63:40:89:ff:10:9b:36:3c:1d:86:ee:d4:
         ed:27:39:e7:b0:12:54:6e:77:43:22:2e:3b:d6:59:f0:b0:64:
         a1:6b:65:ae:1d:af:c9:1d:15:f5:1a:2d:3d:40:c4:7d:4d:78:
         fa:30:91:e6:cf:64:ab:55:4a:00:f1:6f:6a:f0:36:19:04:c3:
         3b:c6:fa:49:07:20:74:ef:bf:3b:ad:36:eb:29:97:eb:b3:0c:
         ac:67:88:8d:45:c5:0b:2a:12:6f:66:72:88:f7:29:a9:f9:f4:
         09:c2:63:ef:09:6e:8e:5e:fc:a7:0c:d7:6b:ac:54:2b:8b:b1:
         f9:c4:90:1b:d5:c3:8d:9d:50:d8:9a:a4:91:1b:b3:d9:8c:1d:
         53:d3:ba:db:fd:10:76:76:67:d9:89:3e:b3:db:6b:be:c9:ea:
         a0:3d:4a:16:e9:58:6e:50:29:db:ba:81:7c:92:69:d9:ec:a1:
         4f:c7:25:14:31:fe:39:9d:f1:51:d0:c9:14:1d:c9:51:be:d2:
         a0:18:80:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85TquKNr2gxOdt3F9NiF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTdiMDUwNTUzYzhlZTllMDVhYjRjMzdmZDk3ZDI4MjEy
MTZiNDEwHhcNMjUwODA2MDEwMDU0WhcNMjUwODA3MDEwMDU0WjAzMTEwLwYDVQQD
EygyODFkMGU2MzY3ZjMzNWE2NmQyYTFiYjRjMTdhMGI4MDE2YmI3ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluIbKjvvTBP1UZeI/hpHx9aQN0Zu
/nxZv1HHQJD6l2OvN/kXGyoRQduS2vhRJVyIzgdjd74+rIN+T34ACuYrlK0tceXe
gxsugz8E5BJOqGgpTZN7wthaPhujMCf529CuV7eO0eEvFf6+1f6bqWz84jGy0rZB
MbW5OMuxM/Zw/gYtA3zKByMU1Qf0WmhjjDhDn2PbP2n3QiJIT5xOfWOFHqVe4c9U
9yhk+iA1HqaEUOqcm7TwQz27UtMmKSV2fQDxld62b+fNcEE8amYyZqQSPl8VkWIg
r0itrT58awN+WoW8QXnYiveU6k5Qnw9OXrsNqK/5AGiXCtT8hUaclAHFXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgdDmNn8zWmbSobtMF6C4AWu39gMB8GA1UdIwQY
MBaAFF2nsFBVPI7p4Fq0w3/ZfSghIWtBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDct
ZjJjNmFjOTY4YzgwLzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9kYzlkZGItYjE4Yy00MDlkLTk3MDctZjJjNmFjOTY4Yzgw
LzEvWGFld1VGVThqdW5nV3JURGY5bDlLQ0VoYTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYsQJa6d
0S38mXvoSIGepNP+glQXIBXhUOx+ezKdLnrMMDOz5v65MhGgEPqQ6CtTWTxJcvpy
8FXU1kQKY0CJ/xCbNjwdhu7U7Sc557ASVG53QyIuO9ZZ8LBkoWtlrh2vyR0V9Rot
PUDEfU14+jCR5s9kq1VKAPFvavA2GQTDO8b6SQcgdO+/O6026ymX67MMrGeIjUXF
CyoSb2ZyiPcpqfn0CcJj7wlujl78pwzXa6xUK4ux+cSQG9XDjZ1Q2JqkkRuz2Ywd
U9O62/0QdnZn2Yk+s9trvsnqoD1KFulYblAp27qBfJJp2eyhT8clFDH+OZ3xUdDJ
FB3JUb7SoBiAIQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:56 2025 by rpki-client