Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
File:                     XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json)
Hash identifier:          XlXy6v5cPcEa8viB/Z4LNiK44PaGGIB+9YiDjdI1rdo=
Subject key identifier:   E2:A5:31:F5:3E:2F:2C:E6:B4:AA:49:34:F0:91:E6:44:DB:D9:F2:90
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Certificate issuer:       /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial:       01987A88B00FB6C395AD816E6212BABC81F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
Manifest number:          0620
Signing time:             Tue 05 Aug 2025 14:00:34 +0000
Manifest this update:     Tue 05 Aug 2025 14:00:34 +0000
Manifest next update:     Wed 06 Aug 2025 14:00:34 +0000
Files and hashes:         1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: mN+H8+aquhfn+6VUs69rUthzzxu0WGij2qSfHj5NY6A=)
                          2: zeSSBsoxeiaEub6sPGDgBihsYlQ.roa (hash: ZJtLDNZbI5epQGziT22ZjYkOk6GcLflWv5h+Gm6/V1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:88:b0:0f:b6:c3:95:ad:81:6e:62:12:ba:bc:81:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
        Validity
            Not Before: Aug  5 14:00:34 2025 GMT
            Not After : Aug  6 14:00:34 2025 GMT
        Subject: CN=e2a531f53e2f2ce6b4aa4934f091e644dbd9f290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:58:30:af:b4:f0:e5:88:5b:7f:e7:88:fb:
                    ce:81:3e:4c:9a:c3:47:10:4f:85:e5:0c:cf:d8:6b:
                    22:5f:fb:23:10:f9:d1:be:8f:08:a6:e0:5d:2a:1c:
                    54:c1:03:e8:31:a1:b0:2b:a5:24:b5:aa:57:89:9d:
                    2a:e4:1c:8d:1e:03:8f:ed:97:bc:23:68:62:2e:45:
                    ec:b2:e3:6f:2a:c2:20:6b:3c:bd:57:4f:29:28:c0:
                    5f:17:30:bc:a5:01:45:09:f4:77:cb:e2:f5:8c:6e:
                    3b:f1:cb:9d:8c:c5:8f:8d:7b:0d:88:3f:a9:24:18:
                    ef:1f:c5:42:03:70:c3:21:9f:c6:9d:de:a1:ba:35:
                    67:ba:79:bc:93:ae:a9:c5:9e:cd:ea:23:7d:d7:96:
                    8b:8e:ea:8f:9f:15:d7:e7:fe:32:99:07:71:1c:8a:
                    00:fe:71:8b:14:56:b0:42:4c:76:ea:22:3e:0b:4d:
                    cd:cb:53:a7:c5:43:a1:ef:43:5e:c7:17:6e:fa:e6:
                    35:fc:97:34:0e:ec:33:df:7e:b1:8f:72:73:3c:aa:
                    5c:f8:fc:e5:7d:47:77:0f:e3:b0:61:f9:88:02:e6:
                    31:c1:46:75:28:a8:73:eb:44:c7:6a:c9:24:9a:09:
                    ac:3b:92:01:c7:dd:cc:4a:09:64:e6:ce:3e:ac:2f:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A5:31:F5:3E:2F:2C:E6:B4:AA:49:34:F0:91:E6:44:DB:D9:F2:90
            X509v3 Authority Key Identifier:
                keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:01:e7:39:12:b6:33:7b:26:c4:a1:79:d7:e3:5d:b9:f1:
         2f:30:60:c0:f5:ec:8b:d9:72:9a:1e:46:8a:d3:2d:3e:2d:99:
         2f:93:ee:b8:e0:41:8c:57:37:6d:cb:11:ed:9d:04:45:50:1a:
         3a:ff:a9:55:8b:fb:dc:3c:de:ff:c4:62:da:4f:8d:91:88:78:
         11:0d:df:43:59:6e:fd:3e:8d:0a:ff:bb:8d:5e:c8:82:7c:d7:
         16:47:bf:c4:6a:f4:4a:38:1d:30:42:63:74:79:3f:eb:b5:82:
         ac:66:4c:8f:c3:e2:52:57:c4:81:ba:45:de:01:ff:6d:f9:24:
         95:f7:9b:67:1d:5d:26:56:8c:6b:e7:a0:6b:3f:27:a2:db:18:
         64:7a:d4:ff:c7:e0:ae:dd:78:68:16:05:48:2c:3e:59:76:f4:
         b4:00:da:05:4a:53:62:40:3b:81:3d:d1:f5:16:aa:aa:4d:ec:
         ec:1e:8e:24:7e:9b:07:b0:9b:04:40:36:5e:56:bb:69:b8:79:
         b1:8a:39:dd:cf:ff:54:7e:f7:98:4b:96:7e:3c:7c:fd:ca:bf:
         49:5b:7a:55:98:e6:f5:f6:a8:d5:1b:df:60:6f:c6:da:76:b8:
         57:5b:69:66:27:1e:e5:52:37:d6:9c:59:9c:c5:aa:4c:01:21:
         ce:ce:d7:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iLAPtsOVrYFuYhK6vIH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzU3MDA3YWViZjAwMDk4YTgwMDIyOGRiMWY1OTMwZWU2
NmU2NzUwHhcNMjUwODA1MTQwMDM0WhcNMjUwODA2MTQwMDM0WjAzMTEwLwYDVQQD
EyhlMmE1MzFmNTNlMmYyY2U2YjRhYTQ5MzRmMDkxZTY0NGRiZDlmMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/RYMK+08OWIW3/niPvOgT5MmsNH
EE+F5QzP2GsiX/sjEPnRvo8IpuBdKhxUwQPoMaGwK6UktapXiZ0q5ByNHgOP7Ze8
I2hiLkXssuNvKsIgazy9V08pKMBfFzC8pQFFCfR3y+L1jG478cudjMWPjXsNiD+p
JBjvH8VCA3DDIZ/Gnd6hujVnunm8k66pxZ7N6iN915aLjuqPnxXX5/4ymQdxHIoA
/nGLFFawQkx26iI+C03Ny1OnxUOh70Nexxdu+uY1/Jc0Duwz336xj3JzPKpc+Pzl
fUd3D+OwYfmIAuYxwUZ1KKhz60THaskkmgmsO5IBx93MSglk5s4+rC9aRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKlMfU+LyzmtKpJNPCR5kTb2fKQMB8GA1UdIwQY
MBaAFFx1cAeuvwAJioACKNsfWTDuZuZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWFlYTUtZmZlZi00Mjc4LTk4MmUt
YTdhNzMxOTQwMjhlLzEvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82NWFlYTUtZmZlZi00Mjc4LTk4MmUtYTdhNzMxOTQwMjhl
LzEvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR64B5zkS
tjN7JsShedfjXbnxLzBgwPXsi9lymh5GitMtPi2ZL5PuuOBBjFc3bcsR7Z0ERVAa
Ov+pVYv73Dze/8Ri2k+NkYh4EQ3fQ1lu/T6NCv+7jV7IgnzXFke/xGr0SjgdMEJj
dHk/67WCrGZMj8PiUlfEgbpF3gH/bfkklfebZx1dJlaMa+egaz8notsYZHrU/8fg
rt14aBYFSCw+WXb0tADaBUpTYkA7gT3R9Raqqk3s7B6OJH6bB7CbBEA2Xla7abh5
sYo53c//VH73mEuWfjx8/cq/SVt6VZjm9fao1RvfYG/G2na4V1tpZice5VI31pxZ
nMWqTAEhzs7XBw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:50 2025 by rpki-client