Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
File:                     Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json)
Hash identifier:          cbdCvtqp1XC1HA6JZlj3JaHTAVcID0Tg5zDtTdFyGDo=
Subject key identifier:   E0:56:FF:77:6D:BF:3C:69:F6:B9:92:68:93:6B:31:89:51:F9:03:D9
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Certificate issuer:       /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial:       01987298A25381186CB19260B4756CE70861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 01:01:02 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:02 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:02 +0000
Files and hashes:         1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: OCM8LJTBXQhVMaKlLa+pAD+loAAQIO48OXzK2xl/UnI=)
                          2: ZL3E7Adz2UxGlx__ehEXq17MBJk.roa (hash: eyCT9Oq7LBXIn9/dNlFO4JQgfNKfcXzeYyZGwsbG9dM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:a2:53:81:18:6c:b1:92:60:b4:75:6c:e7:08:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
        Validity
            Not Before: Aug  4 01:01:02 2025 GMT
            Not After : Aug  5 01:01:02 2025 GMT
        Subject: CN=e056ff776dbf3c69f6b99268936b318951f903d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:8a:e7:ac:85:f7:88:40:af:29:32:39:d2:
                    e8:65:37:b9:f3:ec:e9:01:b3:33:87:f8:fb:95:8d:
                    21:eb:17:76:ca:e2:57:27:1f:07:2f:17:9d:12:04:
                    ce:10:2d:b4:d2:30:a9:77:56:1b:fc:b7:64:08:ff:
                    de:32:d5:cc:1c:da:71:42:77:eb:86:ff:6e:be:ae:
                    ea:5a:60:47:e1:61:3b:00:86:bf:29:8e:60:88:c0:
                    83:e9:94:fa:03:55:11:19:e0:13:d2:b2:61:c1:45:
                    d3:45:08:7d:50:ce:e3:fd:82:cc:11:b1:09:92:3e:
                    12:08:e1:45:f9:dc:13:6d:4c:2a:de:b4:2d:83:f6:
                    e3:2c:9a:89:95:89:97:01:c4:68:62:9b:f5:b1:5f:
                    5f:e1:95:e0:b4:c4:3c:6c:3b:38:2c:03:16:a3:86:
                    e5:d9:24:8a:8e:ee:cc:8b:2d:82:76:33:c7:1d:bd:
                    8f:d3:eb:95:d1:09:d7:ea:bc:75:7f:3d:ee:39:89:
                    7f:d5:ad:10:56:21:6a:0f:8d:6a:2d:5d:72:2f:8e:
                    be:53:13:64:c7:bf:59:be:15:e5:27:c5:1c:98:66:
                    5c:c7:5c:f1:16:97:e4:11:24:b2:e1:65:9c:cf:93:
                    06:f7:ab:ee:8e:3e:21:c6:56:20:88:b0:47:5b:32:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:56:FF:77:6D:BF:3C:69:F6:B9:92:68:93:6B:31:89:51:F9:03:D9
            X509v3 Authority Key Identifier:
                keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:30:70:7d:dd:8d:71:4b:6d:3d:fd:2d:64:44:50:47:6d:2a:
         12:40:8f:13:90:a8:f2:58:70:f8:18:d0:a6:9b:7d:d8:2e:43:
         68:7a:72:a8:1b:b7:43:4e:67:c3:39:12:e7:4f:7e:8d:5e:5a:
         ca:d5:82:94:e1:ab:4f:9b:17:e9:76:80:11:fa:44:bb:7c:57:
         6f:b3:30:1d:e9:ce:7a:b9:7a:43:5f:ed:e0:5a:84:fb:ab:a2:
         fd:2c:16:40:8a:b6:66:f8:cf:3f:ba:95:04:a8:53:13:9b:39:
         e8:3d:7f:f7:46:9a:81:a8:2a:c0:20:0f:0d:b0:e1:6f:60:a0:
         b1:b7:bb:00:c4:93:84:2c:da:87:30:9a:70:c0:48:6e:df:df:
         b8:20:9e:bd:a1:69:9c:ac:4b:80:58:d7:5b:36:80:6e:af:86:
         51:51:d8:04:35:d6:ec:76:b6:2a:88:81:e5:af:54:fe:03:39:
         c0:a0:0c:73:a0:bb:f5:d9:23:94:49:03:87:c7:b5:f7:c8:f0:
         80:b6:66:62:12:27:a5:e1:71:c9:f5:e6:ee:c5:8e:59:9e:99:
         eb:ab:32:54:42:f6:c3:2c:28:68:95:c7:7b:8b:30:5f:70:a3:
         7a:4f:9c:87:f4:30:68:1e:cc:57:b1:8b:06:c8:e6:74:75:3c:
         23:45:c4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:48 2025 by rpki-client