Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
File:                     xTtM8KdHHwAPilagSbFjlnzDvZk.mft (raw, json)
Hash identifier:          PDhKdNR86e74+W7rf/QuTEv1XpI5trNeog4l4SmZDOE=
Subject key identifier:   6B:F8:E7:FA:31:68:5E:F8:74:D1:3D:30:86:05:32:14:5F:8A:F8:EA
Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99
Certificate issuer:       /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
Certificate serial:       01987F0A383C3574E01126F767EBA3743240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
Manifest number:          153B
Signing time:             Wed 06 Aug 2025 11:00:32 +0000
Manifest this update:     Wed 06 Aug 2025 11:00:32 +0000
Manifest next update:     Thu 07 Aug 2025 11:00:32 +0000
Files and hashes:         1: 602Z4NiRUVoUbtoD2a1_hKZKM5w.roa (hash: 3NgwOwVM6/UTanDsySZE3RJFx37z0Ri4EFGUt0jIqTA=)
                          2: xTtM8KdHHwAPilagSbFjlnzDvZk.crl (hash: yL90589YuED+Ro8em7K2pwU7iKgH4V1TposKTjpnVyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:0a:38:3c:35:74:e0:11:26:f7:67:eb:a3:74:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99
        Validity
            Not Before: Aug  6 11:00:32 2025 GMT
            Not After : Aug  7 11:00:32 2025 GMT
        Subject: CN=6bf8e7fa31685ef874d13d30860532145f8af8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:d7:d3:6d:88:2b:34:12:38:80:e3:ce:5d:
                    6f:97:7a:39:30:fd:96:0c:c8:d0:83:1e:35:61:e5:
                    85:88:9c:e3:b9:fb:b6:5b:fb:2e:58:d4:01:78:1f:
                    e9:79:45:f1:ce:8f:7a:d8:01:f7:c9:2c:a8:77:18:
                    31:02:50:e5:7f:29:f8:9b:58:c0:4c:52:e6:e8:1e:
                    12:e7:c1:e6:6f:22:50:78:87:a3:0e:7a:c8:fe:d8:
                    ab:87:ff:25:f6:92:4a:5e:49:92:a5:9c:08:63:ae:
                    e0:d3:3d:25:b3:3b:97:5b:6d:74:b3:9f:9c:b4:78:
                    1d:0d:bb:d3:5e:1d:9d:6d:d3:22:61:8d:60:45:ca:
                    9a:a3:b5:3e:6d:b5:3f:8c:6f:19:96:8f:10:95:da:
                    4f:65:75:9c:be:3d:da:bc:38:9b:ba:b4:f9:f7:fc:
                    72:96:45:52:6f:e0:ff:1e:1f:cb:ee:86:ca:22:d1:
                    14:ee:db:2c:a4:03:af:58:85:98:1d:45:4b:b5:97:
                    cc:66:55:53:9c:43:72:6b:5d:ab:eb:71:aa:67:ef:
                    83:5d:d7:74:66:24:53:a1:4a:bf:18:2c:42:2d:c4:
                    8a:63:35:91:1e:1a:9a:92:29:6e:e8:1b:f0:fc:18:
                    13:b5:0a:94:c9:30:5e:48:13:0d:d5:60:bc:70:3a:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F8:E7:FA:31:68:5E:F8:74:D1:3D:30:86:05:32:14:5F:8A:F8:EA
            X509v3 Authority Key Identifier:
                keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e6:cf:59:25:d6:a9:3b:42:e6:2d:1b:dd:38:7c:7c:c2:b6:
         32:2d:24:59:79:39:d5:da:24:70:a8:a9:a3:d6:38:4f:8e:0c:
         9a:58:2c:63:34:a2:88:64:45:fa:5b:31:dd:97:06:dc:bd:a4:
         b1:fb:db:a9:15:cd:18:e9:00:d2:72:97:18:50:6c:8b:d1:6b:
         a0:89:e5:0e:78:4e:8d:2e:ae:20:41:4c:3d:33:5d:08:3d:ec:
         07:1f:0b:11:6c:00:6c:dc:e6:8b:b3:2b:10:8e:4c:6c:d4:b2:
         b5:bc:98:77:ea:b6:70:49:6f:ee:99:db:9f:fc:0a:99:da:cc:
         77:44:7b:2d:2b:0b:8b:82:e4:a4:7f:18:79:da:56:f7:c3:43:
         e7:f4:01:b1:06:bb:ff:8a:79:4a:00:7d:e0:5c:7d:3a:92:9d:
         76:c5:38:72:06:5b:1c:1e:99:f7:16:c4:ae:c9:3a:ba:64:e5:
         ba:4d:6a:dc:01:a2:8e:04:a5:a5:4f:b0:e9:ce:e6:cc:31:d5:
         2e:d0:a5:17:c4:e7:18:9c:eb:c5:6f:eb:47:eb:3d:e1:19:94:
         f3:e7:41:c6:ed:89:26:20:fc:7c:c6:53:58:0d:45:d0:9b:62:
         8d:99:be:e4:25:46:be:17:97:e1:c7:b1:98:6c:b6:ea:ff:aa:
         94:b3:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:43:15 2025 by rpki-client