Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
File:                     XGpfUrAC9ihsHV6yV7tehTNCooQ.mft (raw, json)
Hash identifier:          FofX7jO688rGVWat7sDUq+PP2ExtQ08dK0DxZ4Ih/JM=
Subject key identifier:   B9:0A:F4:84:90:5F:58:0E:74:70:5D:6F:07:8C:3C:61:39:F3:C0:92
Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
Certificate issuer:       /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Certificate serial:       01988B0F7FFE8006FC129B9083397B1B0CFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
Manifest number:          12D6
Signing time:             Fri 08 Aug 2025 19:01:45 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:45 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:45 +0000
Files and hashes:         1: XGpfUrAC9ihsHV6yV7tehTNCooQ.crl (hash: +MgjVwP5JDSNrDHdjaI6fs4rg5BRIym0eCbJDwSx9Mg=)
                          2: tscq8RR5-J67nLuusgspLPatxCY.roa (hash: mhooYjP72FJexVsRBpMnu3/8vTwdVxQOmpcDiGXdBjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:7f:fe:80:06:fc:12:9b:90:83:39:7b:1b:0c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
        Validity
            Not Before: Aug  8 19:01:45 2025 GMT
            Not After : Aug  9 19:01:45 2025 GMT
        Subject: CN=b90af484905f580e74705d6f078c3c6139f3c092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:4f:43:57:9e:18:a1:3d:60:99:52:72:1f:
                    39:b2:ce:df:c5:3f:cb:77:60:74:3d:f5:8c:ad:1d:
                    bc:cc:24:97:2a:d5:76:5c:8b:d4:5f:d9:d8:1c:f6:
                    5a:d6:f7:d9:af:ec:b0:94:84:ef:09:75:b1:15:eb:
                    4c:9c:57:9b:5e:6d:14:29:ab:bc:fc:23:f9:5c:3f:
                    58:d5:14:ca:47:2a:8e:ef:df:4e:04:15:fd:6d:57:
                    3f:4b:12:33:4a:b4:68:61:f4:e0:72:de:2e:1f:07:
                    20:9e:8c:63:29:28:3f:94:29:dd:73:b6:ce:0f:c0:
                    0e:fc:90:20:ea:62:49:e1:03:22:ac:f2:60:50:ab:
                    f9:d8:3e:6c:b8:2c:1d:bc:1e:ed:26:d3:8a:5c:03:
                    af:01:d2:6f:ef:35:4c:ce:fd:e5:8c:02:60:c2:55:
                    0f:ea:b9:9a:02:56:08:ae:6e:33:83:5c:4d:5e:7f:
                    74:d5:a3:76:d8:01:28:9f:61:90:80:dd:9a:d2:42:
                    b2:93:6b:b0:c8:d0:fe:cc:14:28:4c:ff:ed:d1:30:
                    2b:1e:87:32:8f:5d:4f:ac:5e:9e:ff:b0:e6:29:13:
                    f4:38:c2:ae:35:a2:f6:6e:7b:c9:b2:22:3c:8e:e3:
                    a7:00:73:d7:96:94:b1:70:04:ed:b5:22:3d:37:2c:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0A:F4:84:90:5F:58:0E:74:70:5D:6F:07:8C:3C:61:39:F3:C0:92
            X509v3 Authority Key Identifier:
                keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:69:c3:a2:6f:1b:06:db:64:35:9c:1d:d1:de:5c:18:a1:ea:
         6c:33:da:c3:7b:44:61:71:7c:4c:9d:c5:f5:3e:50:d8:cf:6a:
         59:46:0e:94:37:3c:a0:93:bb:6d:13:72:8d:16:bd:5e:e1:15:
         3a:e9:d8:82:f3:0d:36:7f:85:e1:cd:4c:39:c3:9d:5a:98:c0:
         f1:34:3a:e3:79:3a:4f:d8:8b:06:cb:53:ba:c1:40:56:2a:3d:
         b1:9a:48:4b:e1:90:16:b6:9a:c3:f7:ca:8b:12:78:7a:48:4f:
         ae:fa:e6:19:00:0a:28:c0:23:df:f5:0b:f7:04:5a:df:ad:36:
         87:b5:ec:f0:fa:b4:48:9b:45:87:1c:f1:79:af:bd:55:c0:7d:
         2f:f8:a6:72:07:eb:07:d5:b2:f6:c4:2b:75:eb:0e:4e:88:09:
         ad:1e:ee:32:80:41:b6:2c:7a:1e:7f:4a:d3:ba:8f:db:1c:4f:
         dc:da:46:e5:f3:8f:d0:b3:98:2f:80:ce:fb:85:e4:05:ee:8f:
         ba:15:2e:80:ad:aa:7e:18:85:d6:df:86:ab:56:ed:6d:46:71:
         d0:0c:44:2e:41:fa:ef:f5:75:36:af:a6:77:de:4a:31:63:d3:
         bc:49:1f:a7:d5:6f:c8:27:f6:97:58:d3:67:e8:f5:b6:e7:0a:
         12:7e:03:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:12 2025 by rpki-client