Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
File:                     x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json)
Hash identifier:          0kPbq8sd6wk/q19yorh6jd1OkoTGvb9FwAX06DNNwHQ=
Subject key identifier:   57:0A:64:10:5A:D8:AC:AE:19:3B:C8:35:26:CA:DF:54:6F:83:83:AF
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Certificate issuer:       /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial:       01987419366FCF7DAF01CD789772C4C1DDDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
Manifest number:          0EB8
Signing time:             Mon 04 Aug 2025 08:01:06 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:06 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:06 +0000
Files and hashes:         1: 1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa (hash: wqsUGKMXa3a0bqJDEXOb2Eoz6FNnYl15/F+MOCWnVUU=)
                          2: cztvIRkmsCPXq2-H_4GpkaNyzII.roa (hash: wGz2hIDGmVI+VZFGQswcvNseSHozmizv0NMUMTJqa4c=)
                          3: pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa (hash: 4UmrNvYonno/HoHy5PiUXCmAjmZg7PWwKoiEqb2kwD0=)
                          4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: oC0HHFIaM1H5V0zQimCBR9zU1txOJA+SaG6EyiRo/Dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:36:6f:cf:7d:af:01:cd:78:97:72:c4:c1:dd:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
        Validity
            Not Before: Aug  4 08:01:06 2025 GMT
            Not After : Aug  5 08:01:06 2025 GMT
        Subject: CN=570a64105ad8acae193bc83526cadf546f8383af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:df:9f:28:97:b2:b1:cb:02:ac:c9:63:a3:
                    53:9d:1e:fe:b8:74:8b:b4:a9:fc:d2:bb:4b:48:d8:
                    30:20:ed:55:f2:e8:2a:a5:f2:42:eb:45:1a:af:25:
                    b0:31:c1:28:61:21:95:9f:36:08:78:7e:5d:66:d0:
                    d1:fe:2a:a3:2c:75:f7:40:bc:32:7e:7c:4d:b9:ad:
                    45:0c:bd:bd:4e:61:ad:cb:82:2c:65:90:f1:ac:4a:
                    f8:0b:ae:5a:2d:46:29:74:94:e6:35:c6:f6:2e:46:
                    38:b5:9f:22:09:8f:23:18:4f:81:da:97:47:69:5f:
                    e0:d4:fc:e6:00:e7:08:f5:11:e3:e0:58:b6:b2:7d:
                    96:0b:60:6e:18:62:14:ec:bb:7b:e4:6d:fe:36:1e:
                    27:b6:c8:0f:bb:a3:95:a0:b2:f8:52:f1:31:51:33:
                    9b:fb:0b:b7:1d:7b:aa:8e:02:97:31:62:00:e7:87:
                    25:38:9d:e4:22:68:8a:64:f2:12:cf:63:c9:07:3e:
                    f3:fe:1b:8f:82:01:d5:95:9b:a1:5f:3e:ce:c9:b3:
                    0c:80:24:64:05:a8:ec:95:b2:b2:9e:4c:cc:d2:d2:
                    a7:b9:b1:61:b9:1a:ac:be:a7:55:48:e2:42:54:28:
                    9a:9d:e2:0e:0f:5b:d9:32:64:26:70:7f:12:28:45:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0A:64:10:5A:D8:AC:AE:19:3B:C8:35:26:CA:DF:54:6F:83:83:AF
            X509v3 Authority Key Identifier:
                keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:77:80:3b:a2:0a:e4:6b:b0:90:03:4e:dd:6d:8e:e7:27:ba:
         31:11:ca:ed:82:39:cc:61:31:8d:bf:85:0a:3b:c0:2d:eb:98:
         f7:4e:34:da:bb:b0:7d:2f:f7:4e:ef:9e:15:52:f4:b1:1e:13:
         6d:9d:d6:29:b8:ac:65:64:21:2b:92:de:8a:d2:ec:95:fc:fe:
         3f:a5:72:82:38:4c:78:a3:7d:20:a3:b3:f9:bb:a7:29:7e:c8:
         59:df:cc:d4:57:74:f0:35:b2:f2:90:e0:41:34:c2:a3:22:63:
         cf:5b:2b:9f:c7:f9:d2:83:86:c2:0c:06:2f:92:06:a2:9d:0e:
         0d:21:a3:1c:79:dd:31:83:37:13:2d:2c:37:f2:27:af:c0:54:
         c0:f2:9e:af:4e:e4:54:ce:f3:7b:f7:5a:6a:9e:97:c5:8b:36:
         ba:f2:fe:34:7a:94:92:17:68:55:04:25:7b:f2:7c:3b:3e:4a:
         79:b4:9e:fc:75:9f:97:ff:3b:d8:4c:53:18:45:5a:c4:cf:38:
         be:48:99:0a:5a:f0:4b:99:94:61:65:98:19:08:fa:ad:bb:04:
         21:fb:33:93:6a:2b:e2:1f:91:19:bd:a3:5e:3b:57:e3:c5:df:
         27:4b:46:de:e8:81:01:97:1a:ea:50:56:bd:c5:b4:66:d0:1e:
         00:e8:ab:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GTZvz32vAc14l3LEwd3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjA0Yjc4YjJlZWRmOTk4ZWRkNWNjMWU4ODY3MWM4ZDEw
ZjE4NjUwHhcNMjUwODA0MDgwMTA2WhcNMjUwODA1MDgwMTA2WjAzMTEwLwYDVQQD
Eyg1NzBhNjQxMDVhZDhhY2FlMTkzYmM4MzUyNmNhZGY1NDZmODM4M2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtArfnyiXsrHLAqzJY6NTnR7+uHSL
tKn80rtLSNgwIO1V8ugqpfJC60UaryWwMcEoYSGVnzYIeH5dZtDR/iqjLHX3QLwy
fnxNua1FDL29TmGty4IsZZDxrEr4C65aLUYpdJTmNcb2LkY4tZ8iCY8jGE+B2pdH
aV/g1PzmAOcI9RHj4Fi2sn2WC2BuGGIU7Lt75G3+Nh4ntsgPu6OVoLL4UvExUTOb
+wu3HXuqjgKXMWIA54clOJ3kImiKZPISz2PJBz7z/huPggHVlZuhXz7OybMMgCRk
BajslbKynkzM0tKnubFhuRqsvqdVSOJCVCianeIOD1vZMmQmcH8SKEU5WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcKZBBa2KyuGTvINSbK31Rvg4OvMB8GA1UdIwQY
MBaAFMfwS3iy7t+Zjt1cweiGccjRDxhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzct
ZjQzNzgzOTA5NWQxLzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzctZjQzNzgzOTA5NWQx
LzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3eAO6IK
5GuwkANO3W2O5ye6MRHK7YI5zGExjb+FCjvALeuY90402ruwfS/3Tu+eFVL0sR4T
bZ3WKbisZWQhK5LeitLslfz+P6VygjhMeKN9IKOz+bunKX7IWd/M1Fd08DWy8pDg
QTTCoyJjz1srn8f50oOGwgwGL5IGop0ODSGjHHndMYM3Ey0sN/Inr8BUwPKer07k
VM7ze/daap6XxYs2uvL+NHqUkhdoVQQle/J8Oz5KebSe/HWfl/872ExTGEVaxM84
vkiZClrwS5mUYWWYGQj6rbsEIfszk2or4h+RGb2jXjtX48XfJ0tG3uiBAZca6lBW
vcW0ZtAeAOir+w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:56 2025 by rpki-client