Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File:                     xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier:          HJbnduJyIXPoWrWZQuXdeBZjJTZG/WLxIAyvuJ1bn8Q=
Subject key identifier:   DE:AB:F3:95:E3:A2:98:BD:53:98:70:61:AE:96:C6:27:54:2F:70:44
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer:       /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial:       019874BDAAFDDFD22B68D814E2A73601801F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number:          14A9
Signing time:             Mon 04 Aug 2025 11:00:43 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:43 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:43 +0000
Files and hashes:         1: 5NSYUOXj5LO5RBveLimm0dMK87A.roa (hash: 26b/pGHQTwXlbmbG5ThZm5FqoNcPxzjE+DZsdMKKur0=)
                          2: Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa (hash: TH+u6IT5dpk2hfISpLuBXSAh8Mxg3KDgcPA02NCgPeo=)
                          3: QAdvSCydHA9eyuAMO4zxWjMLaKA.roa (hash: SOXceRa6NpWT+hoKHihDdCbZSJgN5vfd5bbC+z6R+m0=)
                          4: bYoeFtClejfhTteW6s57MGrpz0M.roa (hash: XiaQPTwLHMkFqSpV5ersN02BOkHiCJtKzXc+PvuUKsk=)
                          5: mSN_1NgR8_RP_NHRmSVU0520UIo.roa (hash: BRRNK9jtVQ7Ev3axtUha/P9CxSMaCHG6Zn8SMsI5IhM=)
                          6: vBgsgkwekmg8ZVE8b4TJhK80LrM.roa (hash: c0jtWq7YzOBVoEF72n6cPgI2PZIibyOgb+LV/XfWszE=)
                          7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: S687LgT5g+gZ5jDxC1Du9NhKFPwz4dKOFBUjPRfoVGM=)
                          8: ymgEz60H5B-ezog8RgufDqIOe4s.roa (hash: M39Qnt8qmV0Mg6aCTITlSwk87VUrTu0U+CVvUs7j6K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:aa:fd:df:d2:2b:68:d8:14:e2:a7:36:01:80:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
        Validity
            Not Before: Aug  4 11:00:43 2025 GMT
            Not After : Aug  5 11:00:43 2025 GMT
        Subject: CN=deabf395e3a298bd53987061ae96c627542f7044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:60:ab:d4:90:fb:be:a3:c7:24:d6:75:85:
                    28:09:1e:a8:47:a1:f3:bf:39:68:b1:5f:f7:db:bd:
                    91:9c:bb:46:07:5a:ed:3b:ee:61:b8:60:b7:b3:ed:
                    31:e3:d0:eb:f6:ec:92:e3:fb:6c:de:18:91:bc:e2:
                    f0:fb:17:d6:20:a4:e7:56:33:f2:a1:08:cb:84:22:
                    96:e5:a2:1c:ff:9c:9f:f0:76:4c:fa:6c:7e:88:bc:
                    66:ae:2c:27:81:dc:e6:ec:21:3c:26:5b:d2:65:8e:
                    f2:e5:04:c2:d8:67:88:af:73:2b:4c:90:fa:05:de:
                    e7:7b:95:99:c4:ac:14:31:b2:bb:d9:7c:e3:76:4c:
                    0f:98:12:fa:4c:f5:6a:de:6c:d8:d4:d0:98:c4:e7:
                    bb:8c:40:91:6e:e9:05:c4:93:14:6b:d7:a9:55:71:
                    8b:c5:bc:39:1b:21:7c:04:0c:aa:df:9f:c4:ab:1d:
                    cb:17:64:52:fc:51:13:54:ae:46:11:7e:4d:17:6b:
                    60:6a:71:6d:d7:f7:51:7a:ab:a5:ac:6b:cd:3d:f5:
                    fb:81:a8:d1:43:a0:87:96:f5:d7:1c:f7:bc:7c:c1:
                    79:ef:13:e1:16:9e:f6:06:4f:54:bf:6d:16:7f:b6:
                    42:a2:f1:ce:56:a0:85:a3:de:d1:63:cf:bc:96:df:
                    4e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AB:F3:95:E3:A2:98:BD:53:98:70:61:AE:96:C6:27:54:2F:70:44
            X509v3 Authority Key Identifier:
                keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:68:ad:8a:72:51:9e:83:1f:15:c7:53:e7:45:bd:18:b9:4a:
         b4:95:50:f2:25:46:33:c8:6c:b1:14:82:38:fd:3d:c9:69:1a:
         3e:e3:f8:09:28:68:ca:9f:8c:5b:71:44:5f:da:6d:a5:cd:6d:
         1e:d9:a1:57:95:eb:0c:e9:15:2f:58:ec:4f:a5:30:09:38:ef:
         e5:64:fd:52:b0:43:21:91:e5:74:9f:bd:44:60:4f:c8:2e:ee:
         60:4e:d7:05:6c:6b:78:5c:ad:fe:35:d1:7f:49:c0:b9:94:bc:
         07:05:ff:59:7d:ed:d2:38:37:ce:45:46:5d:cb:0a:c0:96:10:
         f8:51:fa:4d:ef:c8:8c:9d:4f:e3:f7:54:e2:8e:00:bc:5b:bf:
         7b:87:21:76:34:15:54:51:da:31:46:42:0d:f4:67:79:8a:79:
         47:11:88:c4:f6:2d:d7:f9:c4:92:76:6f:cf:6b:81:e3:35:e0:
         d9:35:ba:59:08:10:b6:01:aa:7c:cd:49:b1:1b:16:5b:f5:6e:
         8a:cf:25:a6:dc:86:b1:b8:e2:e2:5c:db:ff:71:ab:6b:66:a4:
         f6:d5:92:35:7d:f2:54:58:64:da:05:36:d3:c3:5e:3f:e2:94:
         b1:28:ee:69:33:4c:6f:7a:c6:2d:ec:21:d2:7e:55:d0:ce:b6:
         00:22:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:23 2025 by rpki-client