Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File:                     xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier:          7X6gK9Pgel1gHbXYH+1NMrvc3QB37W37cFVuPZ8+2ZQ=
Subject key identifier:   33:73:65:21:85:5A:AE:DF:42:56:67:35:C1:B0:FF:BE:5B:A0:E3:19
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer:       /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial:       01988B7CF9C527E0D8312647D3AE69A66BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number:          1622
Signing time:             Fri 08 Aug 2025 21:01:20 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:20 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:20 +0000
Files and hashes:         1: 8lcvOAYawA8m44njSriAA46ohqM.roa (hash: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=)
                          2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: JFWvH8F6J2Eu8xLqdmEN1CwePKG2BgYTBSvnw+Ed3Ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:f9:c5:27:e0:d8:31:26:47:d3:ae:69:a6:6b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
        Validity
            Not Before: Aug  8 21:01:20 2025 GMT
            Not After : Aug  9 21:01:20 2025 GMT
        Subject: CN=33736521855aaedf42566735c1b0ffbe5ba0e319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:1e:da:13:e8:a8:16:c8:97:ea:9e:11:c5:
                    d0:b0:99:e0:2a:7c:2f:ca:ec:25:d1:7c:63:76:07:
                    c1:12:d9:88:81:58:a6:06:41:2e:95:56:db:0d:f0:
                    71:b6:49:48:66:4a:e6:1b:64:a0:4e:41:5f:53:18:
                    29:85:66:a8:c8:13:d0:6c:ff:0e:3b:3e:1c:71:f3:
                    94:23:da:82:65:a6:2b:60:c0:af:95:47:cf:d5:65:
                    88:a2:3a:8d:f8:63:57:e3:c1:81:e9:bd:d7:57:da:
                    e8:93:2e:53:1f:99:1e:47:4f:3c:f2:4a:67:44:40:
                    5b:bb:b5:19:1e:a6:86:50:84:5e:0e:da:b8:56:e4:
                    99:f4:9d:24:f2:88:ff:d4:c3:ff:d1:29:37:b7:ed:
                    9f:7c:03:15:c7:b1:9a:98:ed:00:46:7e:42:60:7f:
                    ea:50:03:92:2c:c6:5b:7e:24:45:6d:88:e0:db:0c:
                    51:5b:36:99:97:5f:86:c1:51:91:cb:22:02:bf:86:
                    35:11:51:67:3f:df:fc:34:00:cd:e8:f7:35:be:9a:
                    46:e6:a4:9e:f0:c6:a7:c6:e9:be:a3:4f:5e:3f:5d:
                    22:40:f7:af:a0:ad:33:0a:b2:e2:e2:06:cf:d9:98:
                    cf:72:58:8d:c8:ce:fe:cb:58:f4:61:f6:71:77:54:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:73:65:21:85:5A:AE:DF:42:56:67:35:C1:B0:FF:BE:5B:A0:E3:19
            X509v3 Authority Key Identifier:
                keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9e:e1:17:9c:01:03:f3:e0:50:5c:99:76:22:66:cd:43:68:
         af:af:1a:ca:14:08:1d:77:16:ea:7a:ee:d5:58:61:a8:ac:82:
         ce:f7:fc:93:5a:0b:36:43:ff:51:40:be:32:46:aa:21:25:38:
         75:70:3f:11:a0:4f:4c:4d:80:cc:b9:1c:b6:df:97:7b:f9:ac:
         a9:a3:17:e2:7b:86:a2:ac:a2:da:0d:39:17:d2:d8:a7:93:24:
         b2:91:88:62:59:91:0f:26:00:03:43:19:8d:34:87:16:92:ea:
         e4:1a:11:ab:6a:3c:c0:3f:42:1c:8d:89:b8:16:c3:06:d8:70:
         1c:1e:40:92:f1:ce:ca:7a:00:c6:99:80:bd:f9:e2:5c:a1:0a:
         1e:ec:24:c8:48:c4:4c:9c:9d:a6:58:78:a3:d5:42:fd:e0:bf:
         d1:e9:4c:f7:ab:74:9b:15:9d:d2:05:d0:13:6f:97:bd:2c:75:
         1d:60:74:b3:87:41:01:74:d3:a4:ea:48:00:3d:13:f2:95:79:
         33:60:3c:4c:79:09:57:a9:60:d7:0f:fc:d0:f8:da:a0:7e:40:
         25:7e:48:cf:bc:07:e6:45:32:25:9a:00:eb:f3:29:c8:93:0b:
         0b:eb:38:2d:30:8d:ce:b2:52:7d:d4:fe:05:cc:c2:ce:fa:ec:
         a0:a0:04:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:26 2025 by rpki-client