Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
File:                     xGn-PYgsk-OOi2ooajF33Bfpmsc.mft (raw, json)
Hash identifier:          oOeHXV37eucPp+yCHHKULM4uAXX0R5kVEGhw7JhL0tw=
Subject key identifier:   19:A5:51:37:40:2A:78:41:54:34:82:B3:99:04:23:92:22:BE:BC:F0
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Certificate issuer:       /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial:       0198744FAE4AD1B5251934A28572CA97ACAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 09:00:35 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:35 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:35 +0000
Files and hashes:         1: EOlGjDlmQ3zjWLU87OYTWDWcCEY.roa (hash: pUBA00I+CQC2RPjmIddeqkkbXGoBJUyoSnMxqvr2Gas=)
                          2: VWhDL_pbFyyRh5F_p1365369fw8.roa (hash: h0UGnV1yT7TAR4sgEMb7SSbuBaNRRDcOsgJUpZU75gM=)
                          3: eStVA852783cSRla3cS6Sa73nTo.roa (hash: hjwJSk0hM/n7mjZhOiCDKrp/IiuwE5tJF1ttaMrAUdQ=)
                          4: mz6tpSTyWG1tpsywf2xFprKsdgk.roa (hash: TcXisvKqSL089bUIJMzgiUZfK9JnlvU+0pDp8FZCWe4=)
                          5: xGn-PYgsk-OOi2ooajF33Bfpmsc.crl (hash: MdMfmddPkMKZ+FPDA1N8BXJSxsxcC6NqVF6xk52C30w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:ae:4a:d1:b5:25:19:34:a2:85:72:ca:97:ac:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
        Validity
            Not Before: Aug  4 09:00:35 2025 GMT
            Not After : Aug  5 09:00:35 2025 GMT
        Subject: CN=19a55137402a7841543482b39904239222bebcf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:49:ea:af:53:2b:75:84:7b:f5:41:5d:87:
                    65:6f:a1:77:9f:6c:fd:46:07:67:28:19:ab:b5:00:
                    e1:8a:f2:42:5a:b2:1d:e7:12:75:94:82:ff:74:15:
                    14:d4:c6:74:4a:53:cf:71:26:61:14:e3:6f:aa:52:
                    e3:ff:33:9f:73:d6:c1:09:6e:df:21:85:d2:f3:5c:
                    f6:e7:26:e8:62:d1:71:2e:4c:fe:13:77:d4:37:67:
                    85:54:0b:8d:e4:66:25:03:98:f3:d4:03:fa:eb:7b:
                    8c:a3:6c:88:23:e7:ce:e5:af:99:58:2d:cf:d0:0d:
                    5f:d0:5a:d2:ea:e1:54:84:ed:03:a6:f7:a4:a8:f2:
                    b7:2e:e2:9f:56:f3:28:5a:2e:67:d6:0f:ed:19:ae:
                    9d:d4:b4:f3:c4:f9:d1:9f:12:9f:68:36:74:95:7f:
                    5d:06:ec:6e:21:0d:ea:9b:04:74:77:32:4e:3d:01:
                    93:34:df:62:eb:5b:e5:08:fe:f8:4c:a8:f8:0f:04:
                    c4:c1:48:14:ab:c2:d8:dd:51:57:89:cc:86:e9:96:
                    9f:c9:ca:07:6a:14:ff:d1:4d:e2:22:88:38:da:e2:
                    17:0f:a1:ff:bc:c0:0e:be:67:bf:4c:3f:83:91:0d:
                    be:2f:9b:cc:25:5e:41:ea:aa:71:2a:3d:99:d4:57:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A5:51:37:40:2A:78:41:54:34:82:B3:99:04:23:92:22:BE:BC:F0
            X509v3 Authority Key Identifier:
                keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:17:55:ca:ab:cc:b6:1c:37:2f:7b:5d:73:9c:d6:f8:07:2a:
         b9:94:b8:76:2a:ab:ef:0d:61:90:94:19:c6:6b:8d:1c:a4:58:
         ed:4f:8a:00:4f:42:25:f6:c1:16:e1:79:1f:6b:0b:ac:bc:f8:
         ac:53:5b:04:be:e9:24:89:0b:1a:7e:df:5f:bb:3b:d4:b9:e4:
         97:67:3e:41:de:a1:45:6e:5b:83:f3:e3:36:73:a3:0a:f9:85:
         40:d8:a2:a3:79:7e:96:4a:f7:57:a4:db:65:2b:b2:49:39:6c:
         a2:3e:fc:b0:dc:e9:1e:75:3b:0a:67:dd:3b:3c:b6:cc:fc:19:
         6f:f1:0b:b8:4f:a8:15:55:0a:47:c6:16:ec:62:67:65:0e:5d:
         38:b5:15:af:4b:10:b6:3e:ef:4b:ec:58:ae:08:87:e9:82:7c:
         ce:4b:14:87:8e:84:3d:b6:97:15:98:b7:7f:07:11:be:2e:85:
         9d:2d:7a:27:d8:f5:a0:d9:ed:5f:21:b7:a2:54:a7:89:02:69:
         d4:5f:e7:59:d6:bf:e7:86:a3:90:a8:7a:3b:d6:c9:01:d8:f0:
         b1:f5:64:37:3c:18:65:92:a7:a5:b5:4e:ec:d5:90:c7:6b:8a:
         c0:e8:ab:b3:a8:f7:78:ab:f7:9d:f1:64:73:a0:e7:6e:ae:63:
         02:65:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:03:42 2025 by rpki-client