Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File:                     Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier:          WqFLu0pJ6fkYL2rQLRoN+11T27AVk5hlrxbaeo81fCE=
Subject key identifier:   19:DC:08:A8:B0:8E:BF:67:8A:78:B0:31:DF:7E:AD:C0:1E:D7:FE:75
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer:       /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial:       019887D6696DC84388AD50E418F758D3CEB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number:          1623
Signing time:             Fri 08 Aug 2025 04:00:32 +0000
Manifest this update:     Fri 08 Aug 2025 04:00:32 +0000
Manifest next update:     Sat 09 Aug 2025 04:00:32 +0000
Files and hashes:         1: 1-tY6XrpLl6k8z4SEpjbzLTNn-Ts.roa (hash: NgyRH1HoSM4A0oGw3/Fq5tCBEmQWMjuDp+Z3SYU6zV0=)
                          2: H6gjp969pDik2dbvAHkeDvA39EU.roa (hash: uTBwtnz4xC6ZHA5AOiAmoUrvWCrVfYHdQ+TO4uHFF8M=)
                          3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: T4JrRYMbWNgR1qBlQCSUZEXFpkiHEcqf8ghH08USrB4=)
                          4: lZXduURQIAy8fdzIUaz-JWRizD4.roa (hash: vA2TeloqgyuxxL+VT++WEALS/lCOLQ2+y5IcVHn+2Aw=)
                          5: oM8IOquHIgB1YBWLpM1pmBbc7O8.roa (hash: IV7XgqctfzxaP5G+ON8fYqKcchsupNcGfIWY1I+WU3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:d6:69:6d:c8:43:88:ad:50:e4:18:f7:58:d3:ce:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
        Validity
            Not Before: Aug  8 04:00:32 2025 GMT
            Not After : Aug  9 04:00:32 2025 GMT
        Subject: CN=19dc08a8b08ebf678a78b031df7eadc01ed7fe75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:c9:0f:a9:aa:f9:45:c3:9e:5f:2e:40:50:
                    97:f1:be:0c:8a:ee:2c:d0:d7:9c:90:f5:a6:07:ca:
                    d9:b4:ba:e0:78:1d:c5:ce:28:ec:fd:ea:0b:22:55:
                    5c:e6:d9:77:99:a8:00:eb:24:7f:3a:c6:b5:64:7a:
                    58:58:49:ca:1b:75:e1:39:5a:6b:6d:32:35:85:2f:
                    77:f2:aa:88:e2:00:e1:a5:a9:86:74:39:bf:80:41:
                    38:1d:09:c6:f8:3c:d5:1c:ec:c6:62:84:e6:0e:91:
                    9d:01:7c:de:65:34:b4:09:9c:9e:4d:d4:f1:d4:67:
                    5d:0e:bd:a5:92:2f:ad:70:c9:4c:bd:2a:12:86:ca:
                    43:fd:a9:7d:84:68:b4:d3:4f:af:5c:6b:3f:01:9e:
                    83:24:9a:ba:71:15:ea:4f:61:ed:6c:33:3d:fc:f3:
                    fd:ac:b6:85:c0:e3:4a:5b:88:78:76:62:75:d8:2b:
                    1a:ba:36:5b:50:42:88:9d:36:38:51:03:e2:c0:7a:
                    54:b1:90:c0:58:1f:31:c3:3a:ce:30:6a:a0:3f:0c:
                    52:b5:bc:95:52:b1:e5:29:6d:1d:30:e0:3a:83:b2:
                    cd:69:1a:7a:c2:15:f8:91:97:62:d0:28:2c:21:9b:
                    c4:56:4e:8b:97:4a:2d:f9:fc:b7:57:96:9a:6b:e8:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DC:08:A8:B0:8E:BF:67:8A:78:B0:31:DF:7E:AD:C0:1E:D7:FE:75
            X509v3 Authority Key Identifier:
                keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:7d:5a:1e:b0:93:e9:3b:5f:87:2e:f7:45:88:a4:36:d1:
         68:43:84:2b:53:78:35:e7:c0:ea:01:62:82:4d:b9:eb:56:48:
         eb:e3:53:d3:6e:5d:5e:66:7b:28:bf:af:b2:30:09:90:8f:5f:
         a4:44:87:26:12:c8:9a:d3:2c:a5:63:16:06:63:cd:dc:4c:66:
         81:49:73:be:de:e0:29:c6:3c:89:57:f8:64:8e:55:8a:c4:8f:
         3f:56:9f:17:8c:a2:b3:40:bd:c5:b8:57:4d:84:ae:07:05:4c:
         3b:c2:b7:30:62:f8:ac:35:de:67:8f:67:a6:fd:8c:b5:d2:88:
         8c:35:3b:59:a0:a3:fb:46:c4:53:5c:e8:19:f5:66:a4:66:0d:
         c6:99:ba:97:0f:4c:c2:9b:39:a2:36:fb:28:40:63:3f:9d:0c:
         38:de:dd:9c:b6:bf:b3:a8:7a:f6:99:bd:60:c3:95:09:c7:e5:
         9c:92:a0:cf:96:40:a8:c1:55:49:90:26:b5:e8:fd:82:e8:d9:
         e7:63:c1:a8:c5:57:12:02:6f:8e:13:9f:8f:fb:b1:71:9c:25:
         35:16:a6:0f:ac:7d:dc:5e:71:c1:0a:93:8a:03:5e:f1:90:9c:
         24:f9:a3:2d:f4:08:46:e2:c1:f2:f7:4e:5c:b9:b3:d9:ba:21:
         84:18:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:47 2025 by rpki-client