Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File:                     Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier:          Arz+nx5XYV9O19OEu3pK/RwZn8wv0z1q48PzfuwazYg=
Subject key identifier:   F1:58:0C:F9:3F:86:5E:2C:6D:32:54:D9:8A:DF:19:65:61:92:A7:EA
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer:       /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial:       019872CF9317596AEE0E371DC78B17B93876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number:          1920
Signing time:             Mon 04 Aug 2025 02:01:02 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:02 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:02 +0000
Files and hashes:         1: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=)
                          2: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: RLc6tBvzXAQHJptCGQe++8YJry4TuaGr+LG0glQi5SU=)
                          3: huVX8NkuD_u6gEKSLyazfI1PAMQ.roa (hash: zHXoTHdD9yKJxCh8RT/4VZjJZ6Cr7X35scSC2hUQFH0=)
                          4: jPPJRlQHOW3Bdo3Xffl1cKS8yYI.roa (hash: +QHKisnDpujXyoJyM4AGTUHFPfJzBO245kYgUJWvE8Q=)
                          5: kJd1mkdRCSilFJ0vWMXaG5mq6mk.roa (hash: QapTsfgox/QaxsnWHKzo0M6LIuQ36JhAZOQaum3cmHk=)
                          6: s6nYW-wwFY4e4FliH1slATjjkcI.roa (hash: IaJM9j4ERldNW3bqfwmZZck2Nh3sfZGgvyUZuPD1Rqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:93:17:59:6a:ee:0e:37:1d:c7:8b:17:b9:38:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
        Validity
            Not Before: Aug  4 02:01:02 2025 GMT
            Not After : Aug  5 02:01:02 2025 GMT
        Subject: CN=f1580cf93f865e2c6d3254d98adf19656192a7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:a9:67:f7:ce:0b:82:59:54:36:97:41:22:
                    13:4f:bd:fb:97:9e:d8:19:18:64:be:60:33:36:55:
                    bc:aa:78:2f:a4:a1:cc:47:ae:ef:de:cc:4b:d0:c4:
                    f9:96:d3:e3:16:7f:3f:69:6f:07:99:14:93:8f:9b:
                    bc:c5:12:98:11:fa:63:4d:d2:99:ee:65:b6:aa:92:
                    de:89:dc:fc:f6:c0:40:df:2c:63:23:81:5f:07:e5:
                    15:bc:37:cf:a7:cb:d3:ba:21:9d:af:ce:3b:61:34:
                    fa:64:5d:b3:4b:45:c7:9a:a7:2b:d5:c0:c9:ab:39:
                    ef:36:8f:02:ff:55:39:2c:e8:8e:e5:47:be:3f:81:
                    09:91:72:33:f8:23:b8:11:89:8e:04:eb:ad:27:36:
                    19:52:c0:90:c3:00:ad:6f:dd:e4:94:86:6e:a3:6c:
                    65:7f:89:b8:97:cd:44:f3:ca:6f:3b:f5:05:92:72:
                    8e:eb:cd:20:21:c6:26:3a:a1:0c:65:0f:9b:7d:7c:
                    16:af:2f:05:d4:3f:93:1f:3a:a0:a9:1f:35:f5:6a:
                    8f:21:36:5a:a1:f0:f7:4d:c1:69:5c:ec:41:fa:4e:
                    4e:4e:33:5f:9a:66:2c:66:a2:ab:14:a6:54:5e:e2:
                    63:23:33:b3:39:54:98:4d:33:f0:85:eb:6a:29:53:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:58:0C:F9:3F:86:5E:2C:6D:32:54:D9:8A:DF:19:65:61:92:A7:EA
            X509v3 Authority Key Identifier:
                keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:47:61:78:59:eb:58:28:f3:ec:16:ca:0d:5b:a6:ce:72:14:
         05:8b:61:02:a5:fb:39:87:4d:64:98:16:04:5e:08:c9:94:72:
         e7:e8:6b:9d:65:6e:bc:c7:78:16:13:68:1c:39:87:69:38:1f:
         fe:94:87:6d:62:c5:95:8c:0b:a2:63:ef:11:aa:44:ee:c0:28:
         f7:4e:75:56:12:4b:9b:26:d8:a1:b3:2a:9c:64:91:63:39:09:
         98:68:5c:5b:37:f4:8f:a8:71:b8:fe:f3:e9:69:b3:80:5c:ee:
         26:1c:2e:1b:7b:c5:ff:aa:03:3e:3a:c5:ab:a9:ff:d2:89:59:
         32:0f:a0:6a:d2:7f:ee:b9:32:a9:13:54:11:0a:d6:78:55:dc:
         05:a1:f4:11:0a:7f:b1:8d:1d:92:7a:32:4a:8a:56:bf:f0:37:
         b0:5a:36:aa:4d:3b:14:43:20:95:2f:ba:08:77:b9:26:1e:7c:
         fb:55:ec:28:b0:95:a9:9c:ce:87:a1:de:29:cb:f2:23:d2:19:
         45:56:a1:0d:24:dd:d0:99:62:d6:bd:7e:6d:c4:3d:9d:35:d7:
         aa:bd:d7:ec:5b:3e:35:10:16:a3:df:e1:a9:49:55:d8:64:bb:
         0c:35:14:3d:05:a7:97:1c:2c:be:ac:21:64:f7:de:6a:59:00:
         d5:bc:d4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:33 2025 by rpki-client