Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File:                     x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier:          Xfia3wUuY2LhQ3XBAlHA/Stj8fs8NiKPMJSnWQYR3VI=
Subject key identifier:   76:23:B2:86:BC:89:99:80:05:E4:21:C2:C9:90:E3:4E:AA:CA:5C:BE
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer:       /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial:       0198737402E8AD55F0B49E6B7E031B33FE88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number:          15E0
Signing time:             Mon 04 Aug 2025 05:00:39 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:39 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:39 +0000
Files and hashes:         1: 6BkAjCciZdkVim2iQSRHdt1sfiU.roa (hash: ht4W9yWg20hMczJ5oRJNnUfqsbvH+S+TLA3MoaL5IE8=)
                          2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: 9SuHXLQ2K+b0ITJeJ2KRoPFKVWTqjGKaxYFSD03ouCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:02:e8:ad:55:f0:b4:9e:6b:7e:03:1b:33:fe:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
        Validity
            Not Before: Aug  4 05:00:39 2025 GMT
            Not After : Aug  5 05:00:39 2025 GMT
        Subject: CN=7623b286bc89998005e421c2c990e34eaaca5cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:7e:14:56:22:81:cd:39:07:40:09:a9:65:
                    76:dd:1a:30:aa:4f:61:98:d7:44:49:00:51:c9:7e:
                    ea:8f:c1:22:17:ba:bd:05:01:f1:db:c6:56:eb:b6:
                    cc:a9:38:0c:29:e8:c3:a3:4d:b6:7e:30:94:91:1c:
                    5f:d5:4c:e9:d8:10:9b:0a:82:d2:fc:79:72:98:ff:
                    f7:7a:88:f2:25:07:1d:09:b7:5e:09:62:41:ea:fd:
                    06:d7:08:9b:49:ae:51:a5:5f:ea:75:12:c7:52:00:
                    2e:27:20:ff:47:d9:2c:f8:9d:4d:cc:83:41:24:5c:
                    5e:b6:b4:55:b9:26:47:5d:6a:14:f2:ab:1e:55:51:
                    f5:e2:b9:2c:3a:8e:b0:f5:16:23:58:ba:d6:21:04:
                    2a:e9:cd:6f:35:f2:d2:34:7c:5d:a6:a5:1b:13:27:
                    3e:3c:23:2b:e0:b9:6b:28:e0:32:cf:7f:6b:93:61:
                    f8:8e:3a:96:1c:89:e5:15:e0:8f:78:9e:e2:7e:76:
                    b9:a8:42:8f:43:d1:ac:49:82:87:bb:df:a5:53:cf:
                    98:78:e3:ac:09:d1:e1:33:93:8b:a7:b5:66:c4:78:
                    a2:ad:8e:62:cb:43:77:55:e0:2d:64:65:ed:1a:14:
                    85:e0:58:82:44:8d:46:c9:ac:d5:0d:39:6d:e7:22:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:23:B2:86:BC:89:99:80:05:E4:21:C2:C9:90:E3:4E:AA:CA:5C:BE
            X509v3 Authority Key Identifier:
                keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:f5:c8:fd:22:8d:89:08:0f:cc:9a:c9:b0:c1:21:b5:bc:
         ea:72:cb:43:8c:04:0c:4f:73:e2:35:54:07:e8:76:ed:9c:b9:
         bc:cb:b5:d2:fa:50:06:fb:87:5c:e2:9a:12:9a:ad:76:79:75:
         08:92:9d:b2:6e:89:b3:13:6b:29:b9:01:1d:e8:51:70:20:e6:
         17:4c:9c:62:71:b8:ab:79:88:c6:d4:a7:a2:b2:9e:2b:03:06:
         91:be:03:31:44:69:45:85:c6:e2:88:b7:11:67:b4:b8:6c:91:
         fd:34:b8:f2:9a:40:b2:46:62:f6:47:24:6c:1a:87:69:dd:85:
         0a:0b:53:99:7e:3f:9b:8f:c8:11:e6:be:fd:3e:27:de:98:21:
         3b:56:b8:d7:07:09:81:31:5d:fa:ac:0e:55:34:13:95:2b:f1:
         ec:34:a2:7e:52:7a:d9:07:67:39:e2:9c:d7:ba:5b:81:c3:95:
         16:98:94:ac:70:6e:a6:85:80:c8:43:10:49:b3:b8:e2:03:5d:
         ca:4f:ea:18:7c:b2:18:91:6d:c3:1d:d1:98:14:dc:27:72:0b:
         3f:96:f4:c0:fa:e9:e3:a2:dc:6e:d4:51:d4:26:6a:de:bd:f2:
         7c:e9:fa:2d:fa:77:24:24:83:03:ad:39:b5:12:a2:14:6d:9e:
         32:37:0c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:39 2025 by rpki-client