Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File:                     fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier:          GBi7jeff/ThcjUpflaLz9WyldjQFAo02Ju5lSCt1/E4=
Subject key identifier:   0B:A7:A3:44:06:F7:B2:66:50:0F:3C:24:38:DE:9F:1A:E6:66:84:3F
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer:       /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial:       019875D095A1C12F8947029D3D4E04BC5469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 16:01:00 +0000
Manifest this update:     Mon 04 Aug 2025 16:01:00 +0000
Manifest next update:     Tue 05 Aug 2025 16:01:00 +0000
Files and hashes:         1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=)
                          2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: pBrPAb/7fY9VnS4gnCHnAX27St/E5KpjDBCSnkGc8D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d0:95:a1:c1:2f:89:47:02:9d:3d:4e:04:bc:54:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
        Validity
            Not Before: Aug  4 16:01:00 2025 GMT
            Not After : Aug  5 16:01:00 2025 GMT
        Subject: CN=0ba7a34406f7b266500f3c2438de9f1ae666843f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:4a:18:9e:af:02:f1:8a:6a:6b:60:25:5a:
                    fb:f2:f1:36:d9:6f:83:90:14:be:d5:ce:11:93:63:
                    34:7d:c8:92:e8:c3:34:cc:ff:17:72:ab:99:81:40:
                    6a:21:90:79:73:2e:59:0a:31:fc:23:97:7c:0e:27:
                    c9:b7:16:79:67:33:bd:c9:df:56:d3:39:3e:6a:78:
                    b4:5b:fd:ed:31:3d:af:74:37:ab:76:6a:5e:33:8a:
                    46:96:fd:9b:f5:4f:1c:72:a9:50:60:7b:6b:35:e5:
                    75:96:11:6a:14:0a:08:7e:b4:cf:51:e9:0f:89:fd:
                    5a:ac:d4:b4:fc:c9:d5:6f:c1:e9:95:76:9a:78:bf:
                    a7:4f:53:35:f6:3b:56:fd:24:4b:cc:32:cb:9e:e6:
                    a0:e3:ea:ad:96:4d:45:30:bb:29:7c:b4:0c:a6:04:
                    1b:a5:c9:de:98:3c:5d:4c:ed:31:8a:aa:c4:19:df:
                    10:3d:db:ee:fc:89:f3:4b:79:2f:95:0e:48:be:df:
                    06:81:62:a9:4f:cc:8c:f8:06:f3:41:d2:fe:7b:f8:
                    9c:ee:3a:3f:a6:92:6b:eb:09:bb:60:10:d8:45:03:
                    48:e9:f9:f3:06:32:2a:33:4d:34:5a:d9:1f:b8:0c:
                    e6:a6:cd:3c:8c:bb:ea:b0:ac:8f:fb:ce:2b:44:a9:
                    4e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A7:A3:44:06:F7:B2:66:50:0F:3C:24:38:DE:9F:1A:E6:66:84:3F
            X509v3 Authority Key Identifier:
                keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:53:b5:30:2d:06:b4:bd:76:ae:44:6b:06:84:74:af:77:4f:
         a4:28:8e:de:78:e3:1c:ad:cf:11:ad:d6:f4:28:42:28:94:f9:
         bb:a7:c7:07:91:06:f2:7a:10:c1:bd:fe:b2:5c:57:61:5b:a2:
         f2:5a:03:29:af:aa:45:97:e7:e0:a2:a5:36:4e:81:99:b6:46:
         66:cb:0a:ac:77:d7:f5:7c:e2:a9:eb:e1:6f:b0:49:b1:b2:30:
         59:13:07:0f:fa:49:26:6f:62:a8:ab:3b:94:0f:a6:c6:e7:90:
         10:a1:e1:61:ee:cb:16:15:ff:9c:36:a3:c3:f4:5a:69:ff:0f:
         b1:04:fa:55:0e:27:cb:30:d1:c6:ac:20:e0:04:09:ef:39:49:
         b1:88:4a:01:74:92:85:26:de:bd:ae:dc:80:26:97:c0:e0:e2:
         c0:b4:31:2e:fa:69:64:f1:77:81:fc:98:57:25:1b:13:9a:27:
         2c:94:59:93:f3:33:27:14:ce:96:ce:65:92:b3:ef:26:82:fa:
         ce:51:ff:b9:95:3c:a0:97:f9:df:57:11:fd:1c:12:f8:61:75:
         bc:4d:ac:8b:56:32:b0:4f:c4:48:d8:9c:a8:0f:41:7e:e2:11:
         87:97:83:a9:92:46:be:8b:7c:51:b9:18:46:70:39:b8:62:a6:
         2e:83:e1:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10JWhwS+JRwKdPU4EvFRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMWQ1OGQ2MmRkZDdlNDdhZjIxOTZmZDc1NGJiM2ZmMjY3
OTg5MmEwHhcNMjUwODA0MTYwMTAwWhcNMjUwODA1MTYwMTAwWjAzMTEwLwYDVQQD
EygwYmE3YTM0NDA2ZjdiMjY2NTAwZjNjMjQzOGRlOWYxYWU2NjY4NDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva1KGJ6vAvGKamtgJVr78vE22W+D
kBS+1c4Rk2M0fciS6MM0zP8XcquZgUBqIZB5cy5ZCjH8I5d8DifJtxZ5ZzO9yd9W
0zk+ani0W/3tMT2vdDerdmpeM4pGlv2b9U8ccqlQYHtrNeV1lhFqFAoIfrTPUekP
if1arNS0/MnVb8HplXaaeL+nT1M19jtW/SRLzDLLnuag4+qtlk1FMLspfLQMpgQb
pcnemDxdTO0xiqrEGd8QPdvu/InzS3kvlQ5Ivt8GgWKpT8yM+AbzQdL+e/ic7jo/
ppJr6wm7YBDYRQNI6fnzBjIqM000WtkfuAzmps08jLvqsKyP+84rRKlO6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuno0QG97JmUA88JDjenxrmZoQ/MB8GA1UdIwQY
MBaAFH8dWNYt3X5HryGW/XVLs/8meYkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQt
ZTNiOWUwYmFlNmFiLzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQtZTNiOWUwYmFlNmFi
LzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlO1MC0G
tL12rkRrBoR0r3dPpCiO3njjHK3PEa3W9ChCKJT5u6fHB5EG8noQwb3+slxXYVui
8loDKa+qRZfn4KKlNk6BmbZGZssKrHfX9Xziqevhb7BJsbIwWRMHD/pJJm9iqKs7
lA+mxueQEKHhYe7LFhX/nDajw/Raaf8PsQT6VQ4nyzDRxqwg4AQJ7zlJsYhKAXSS
hSbeva7cgCaXwODiwLQxLvppZPF3gfyYVyUbE5onLJRZk/MzJxTOls5lkrPvJoL6
zlH/uZU8oJf531cR/RwS+GF1vE2si1YysE/ESNicqA9BfuIRh5eDqZJGvot8UbkY
RnA5uGKmLoPhKQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:12 2025 by rpki-client