Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File:                     xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier:          szDBbdfITJYwPtEUHUend+HL6gS3uF591uCrYJIvA+k=
Subject key identifier:   25:0E:11:16:32:14:8E:47:9C:C8:9A:54:23:00:3C:28:7D:59:FF:F6
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer:       /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial:       01988B0EF2E57E224E6989049E077BCBDE94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number:          1625
Signing time:             Fri 08 Aug 2025 19:01:09 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:09 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:09 +0000
Files and hashes:         1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
                          2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: LXG49/loAyDly4krqQPFa2iekxPEgZb+m1ysFb+5WbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:f2:e5:7e:22:4e:69:89:04:9e:07:7b:cb:de:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
        Validity
            Not Before: Aug  8 19:01:09 2025 GMT
            Not After : Aug  9 19:01:09 2025 GMT
        Subject: CN=250e111632148e479cc89a5423003c287d59fff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:61:c4:40:62:9f:f8:5c:aa:06:d8:a6:98:39:
                    cc:38:39:47:82:a6:51:52:a0:55:81:eb:c7:e1:6c:
                    2a:7a:33:82:99:29:b4:59:30:fd:4c:c9:71:69:2a:
                    b9:fb:b0:81:c2:f5:d6:1d:9d:74:e8:85:29:c5:90:
                    82:bb:c7:d7:05:19:c7:97:d5:60:66:9e:07:44:44:
                    eb:a9:2a:3c:c3:23:a6:9a:fe:b4:d0:c2:8b:c8:3e:
                    29:8b:9a:5f:65:2f:13:23:11:03:58:ed:e7:a6:fb:
                    52:42:55:19:0e:a9:54:99:2c:f8:43:8d:cd:d3:79:
                    55:e9:98:b1:ea:68:f1:c7:46:58:77:39:21:14:63:
                    e0:06:ea:35:8f:4f:a6:50:ca:d1:97:fd:ae:50:60:
                    f1:e3:6e:7a:34:55:79:84:1e:d5:96:e8:41:3f:8c:
                    12:e8:72:0c:48:61:be:34:43:45:24:3f:85:3d:a1:
                    81:54:49:1d:b3:f8:39:32:bc:bd:c7:63:58:02:38:
                    be:94:b4:e8:c1:5f:fa:5f:9d:29:07:d5:53:7e:6c:
                    83:2a:df:90:2d:ff:d9:74:fa:89:05:36:39:b8:94:
                    5e:c3:59:b8:f9:b0:6f:f9:fb:bc:5f:97:b7:19:f7:
                    fc:14:47:31:43:7d:e8:36:b6:4c:a9:73:e5:a0:0c:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0E:11:16:32:14:8E:47:9C:C8:9A:54:23:00:3C:28:7D:59:FF:F6
            X509v3 Authority Key Identifier:
                keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:69:51:7b:d9:3a:e5:59:c3:b1:09:a3:bc:3c:f3:aa:58:e7:
         88:d0:c9:83:28:e2:84:84:de:e3:33:ee:69:87:d8:e4:dc:57:
         63:1e:16:92:49:a9:34:24:37:66:d3:a5:b7:97:bf:74:f5:79:
         c0:de:15:bc:e0:ee:d0:52:18:dc:9d:50:d5:17:ea:59:b4:61:
         2c:95:5d:e3:d6:73:35:87:6a:f2:b2:66:8c:0a:26:e6:e6:45:
         84:a9:4a:5c:69:ec:85:fe:fa:9e:b3:8c:57:c1:d4:03:80:cf:
         cc:cd:87:b1:bd:61:8d:6a:cb:9c:96:e9:1d:d5:e1:10:90:af:
         1d:6b:0f:09:d3:db:c6:45:97:6b:9e:7a:42:fb:d6:a8:23:0d:
         3f:d0:e1:4c:0b:cf:39:62:a0:ad:4a:c9:0b:08:2c:13:ce:10:
         dc:c6:08:56:8f:cc:36:c8:a0:d7:2e:05:da:64:78:41:0e:31:
         65:bf:74:d3:c7:28:7e:6d:9d:cc:50:86:e6:e0:06:7a:19:cf:
         91:8e:73:4b:7e:82:cc:fb:b6:64:1f:fa:53:43:9f:7b:b2:41:
         c5:bf:74:7c:d6:b6:0f:42:d5:c8:8c:d4:98:63:54:0f:0a:88:
         50:32:9b:97:31:74:2a:a4:62:60:17:d8:73:40:94:d8:57:07:
         d3:1c:2a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:44 2025 by rpki-client